{"report_id":"f005ec44-21c3-4681-841a-2f0373490715","version":6,"status":"done","tags":[],"date":"2025-10-05T18:28:20Z","url":{"schema":"http","addr":"javxx.com/ja/v/dbnk-080","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"172.67.220.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"javxx.com/ja/v/dbnk-080","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"title":"JAVxx - HDでDBNK-080 AVをオンラインで視聴 | 無料日本AV MissAV"},"submit":{"url":{"schema":"http","addr":"javxx.com/ja/v/dbnk-080","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"172.67.220.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-09T18:28:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":14}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"estimatedeferbulk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"estimatedeferbulk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":3,"received_data":19569,"sent_data":1479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"javxx.com","ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-05-03","domain_rank":365267,"first_seen":"2025-08-10T02:21:40.744668Z","last_seen":"2025-09-02T07:48:38.883581Z","alert_count":0,"request_count":9,"received_data":1441599,"sent_data":4754,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":5,"received_data":96841,"sent_data":2696,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.rmhfrtnd.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":103540,"first_seen":"2023-12-13T13:20:46Z","last_seen":"2025-09-30T00:03:20.95005Z","alert_count":11,"request_count":11,"received_data":36867,"sent_data":7759,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-09-29T02:27:40.16893Z","alert_count":3,"request_count":1,"received_data":521,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-09-28T22:12:32.441112Z","alert_count":0,"request_count":2,"received_data":99745,"sent_data":869,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.plyr.io","ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-02-16","domain_rank":65563,"first_seen":"2015-03-05T06:48:14Z","last_seen":"2025-09-29T02:15:02.577966Z","alert_count":0,"request_count":1,"received_data":6509,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-01T04:53:40.312929Z","alert_count":3,"request_count":1,"received_data":85963,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"faf8b60b.sparkvibe33.store","ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-10","domain_rank":0,"first_seen":"2025-10-05T18:28:23.814557Z","last_seen":"2025-10-05T18:28:23.814557Z","alert_count":0,"request_count":6,"received_data":1964577,"sent_data":3027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-28T22:11:36.689828Z","alert_count":0,"request_count":1,"received_data":422884,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stripchat.org","ip":{"addr":"104.17.118.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-31","domain_rank":0,"first_seen":"2025-08-28T14:02:59.556852Z","last_seen":"2025-09-29T15:28:35.305073Z","alert_count":0,"request_count":1,"received_data":833,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-01T11:21:03.813992Z","alert_count":1,"request_count":1,"received_data":377,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.125.168.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-09-28T22:30:31.748184Z","alert_count":0,"request_count":2,"received_data":718,"sent_data":952,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rec3.javxx.com","ip":{"addr":"172.67.220.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-05-03","domain_rank":5277197,"first_seen":"2025-08-10T02:21:40.740894Z","last_seen":"2025-10-01T15:48:39.943371Z","alert_count":0,"request_count":6,"received_data":10475,"sent_data":3656,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2025-09-28T23:45:51.594532Z","alert_count":0,"request_count":7,"received_data":87478,"sent_data":3255,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"icdn.javxx.com","ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-05-03","domain_rank":4044866,"first_seen":"2025-08-03T13:13:05.389505Z","last_seen":"2025-09-06T22:43:13.888912Z","alert_count":0,"request_count":26,"received_data":2917862,"sent_data":14353,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"surrit.store","ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-03","domain_rank":64825,"first_seen":"2025-07-10T06:55:15.414579Z","last_seen":"2025-10-01T15:48:40.040093Z","alert_count":0,"request_count":5,"received_data":34961,"sent_data":2752,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-01T00:47:42.887723Z","alert_count":2,"request_count":1,"received_data":530,"sent_data":764,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creative.rmhfrtnd.com","ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":352080,"first_seen":"2023-12-13T13:20:47Z","last_seen":"2025-09-30T00:03:20.804309Z","alert_count":16,"request_count":8,"received_data":1334068,"sent_data":5436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"estimatedeferbulk.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2025-08-19T03:47:05.074362Z","last_seen":"2025-10-01T15:48:40.27082Z","alert_count":2,"request_count":1,"received_data":98975,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-28T22:14:23.990054Z","alert_count":0,"request_count":4,"received_data":763243,"sent_data":1796,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/hls.js/1.6.7/hls.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6b4b0566933bbace745d354bbf66a45","sha1":"37421e0fdc0f834e9b76c83c86b8f8dc5a25f9f5","sha256":"98f063553824f201d7a46e124e1dabdeefbc517e35e800ba0c8cbeedd432ab67","sha512":"b972867cd30918e974a0603937c16d106aca52ae7b52ffecfb1096b093dd21778cc38eac17d777e53a709b9a3c451b5785d9ac2d3ead1b9ad5532dc718389dfc","ssdeep":"6144:tN52SSJ22f+rppL0uMRzXrpbQLTfUUD+6D5U7qKxnU3F4BsibLioRGJ8z0xEnFak:te22eppSRzbpbTiwqKxUHF84xfg","tlshash":"cbb43aed3695a01683c2b169903f5507633a7d0a284cc12cfa2be9db2d7994db13bf74","size":525787,"data":"","first_seen":"2025-07-08T11:22:48.878147Z","last_seen":"2026-05-01T09:58:15.740701Z","times_seen":29796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surrit.store/assets/dist/player1/script-BYXPy0wp.js","fqdn":"surrit.store","domain":"surrit.store","tld":"store"},"ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93294d3e84da01254d493caec810e865","sha1":"68ead45e564626053e0ab6aae63ac4b33c08b507","sha256":"181f79bc710ef6242faa1ff21c1300346d2f3132da4d905ed7acc5ee15c055eb","sha512":"9dc767e9caaea150cc4c7bbb28da2cd3260629be8c1cd3f940710757d34d0dc1786968b37d64f417aa2c1584e4e15387020dcd67c4de696878cf07c86a35b03e","ssdeep":"768:j22CwIprXYAoE/3r1VHzS6iHnQqw/+IRS:jSPosmC/+R","tlshash":"efd25254ab0b608b4150e2be125f75c15c2c884ae05caef65db1c79fcc9a0c791ebaf3","size":29845,"data":"","first_seen":"2025-09-13T07:46:03.118323Z","last_seen":"2025-10-17T22:59:30.965267Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-16VEEYG9GR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5e31c225d6f291f8770726c2fc15bec","sha1":"11015d93f00fb631750c41f2d2e47655409ba227","sha256":"e23eaa65e34a1f89b6f80678901b6c32d0d015a92257ce9fadae5142890b27b0","sha512":"53bf904ec7a7162fe86519a58e9be1fbb576448d584b571282ad7de5cc1a44a40e9f0fabe3230e7f3d07ef3ecb86fa4e33f60ec03642b65982d1046c13dbed9a","ssdeep":"6144:1B8ZTP5DyYvRC1cZwtgk6dSLd6gZg1X+6RVt:LebdtvIcZwhGt","tlshash":"24941ace73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","size":422280,"data":"","first_seen":"2025-10-05T18:28:30.028961Z","last_seen":"2025-10-05T18:28:30.028961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.7/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-05-01T13:58:08.646588Z","times_seen":1328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/ja/v/dbnk-080","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57393e23ab813860b004b49318470bf4","sha1":"2598f4b9bb436daa77089eb553d63b0debbc023b","sha256":"7799793648a5c9f28210ef27cd469e06ea33288938ebb725cf99183014d116ae","sha512":"eee54f980ff7d7a11e494b19d6b0e5160ba9e37e8563fafbe850dd19b3002f89a8b27e2ae788e69a58083532621f3d22d7700304f629389c994d3f2f15d6492f","ssdeep":"","tlshash":"7fc02bf785751809082602c1023f2b317c000237080f207d38f2a044371e89fd022ed4","size":139,"data":"","first_seen":"2025-10-05T18:28:30.123951Z","last_seen":"2025-10-05T18:28:30.123951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-01T15:41:16.552449Z","times_seen":141302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/main.efff7dd06e83080d1a67.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4926b660856aba8ebf6f0b06fc2320e","sha1":"edf70360420e8e2e7fcaf5a9ed93ca6cee5c6380","sha256":"c8b0ef7c6ad75055caf85ab2f468c8f3d7bb461ee3b2012d7847a9c683d71e2c","sha512":"6ba50512d553fc64030ed26f1e71a2560ab200e421a1fa8892a2906d20bc9e39f5e0cb48d94cd9e6f9426318a6af3b213430c2cdc6878cea68defe3e32e3d6e0","ssdeep":"3072:mevelzVWoxs34gqSBaDXXLx8e7Tah93eZ/w5h+BCqUtrbT6/7tVDk1Y7sntpS2Oc:zelu32LNTafeZIT6C83Dh46sV+zHY","tlshash":"36d409c87796f07246d69156503f0603f239aa59280ad01cf296ecec796cd8ee276f37","size":647995,"data":"","first_seen":"2025-10-02T15:41:42.419684Z","last_seen":"2025-10-24T02:52:58.022277Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-01T15:41:16.552449Z","times_seen":141302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/dist/11/script-BJVrg1r_.js","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1514accf062626a9ba86bf5b7052d63","sha1":"2d3695e346964f7e7e1955b43f1d0158563b880b","sha256":"927af369760ce1f2acdaeb9e2f50f48ed0797d4d58bf7eacb8f4e7e9edbcc421","sha512":"bc8df0160d9f841d1ab0b36a972ba0838bca88a8b0737338093485141d1d28832a997e9bdeecd9c9f6a16c7a71e405282c6ae92d892d2b31de2c9112c7e20135","ssdeep":"6144:3lezU9Bi6TqgKRyE4rScy6MV6ftCGI4F0+:3lezU9BDTBKRyxmcy6Lt24F0+","tlshash":"05243b5d694ab0e81712a0b3306b606bed5d8d459c8ce8f4fddaf66c7c34149f07b9a0","size":214151,"data":"","first_seen":"2025-09-19T15:57:47.05519Z","last_seen":"2025-10-17T22:59:30.886987Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/dist/11/lang-ja-BB-8PxtS.js","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f691bc2659368b71c0dac796b48f6cd","sha1":"76a579b541953f534d68617d293365f183987558","sha256":"8d2df352b00797d563f51e46a369994c7c5a1416aecf66860d6096a48c5f9bc0","sha512":"23e9a6c7b6f28b8500188383dcd4508a12dbecd6d1541e2051c139d0baa0564e1f4afa280ce414eb630d0cf244170c95d1eebf27be24e50100568a5fa831ce84","ssdeep":"","tlshash":"1121f16c03501d300df906b1504753c6bb2ccc4bda67391a69afd51c3675f8ee18a4f8","size":1385,"data":"","first_seen":"2025-09-19T15:57:47.026378Z","last_seen":"2026-03-17T02:48:22.412129Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/main.efff7dd06e83080d1a67.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4926b660856aba8ebf6f0b06fc2320e","sha1":"edf70360420e8e2e7fcaf5a9ed93ca6cee5c6380","sha256":"c8b0ef7c6ad75055caf85ab2f468c8f3d7bb461ee3b2012d7847a9c683d71e2c","sha512":"6ba50512d553fc64030ed26f1e71a2560ab200e421a1fa8892a2906d20bc9e39f5e0cb48d94cd9e6f9426318a6af3b213430c2cdc6878cea68defe3e32e3d6e0","ssdeep":"3072:mevelzVWoxs34gqSBaDXXLx8e7Tah93eZ/w5h+BCqUtrbT6/7tVDk1Y7sntpS2Oc:zelu32LNTafeZIT6C83Dh46sV+zHY","tlshash":"36d409c87796f07246d69156503f0603f239aa59280ad01cf296ecec796cd8ee276f37","size":647995,"data":"","first_seen":"2025-10-02T15:41:42.419684Z","last_seen":"2025-10-24T02:52:58.022277Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.polyfilled.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71dc06ef63bafd519190803503d6fdd0","sha1":"efc20140bd1efe04b3a56bb3635874f0749cd8ca","sha256":"b0fc604958d3c5d9b393c4a4e48f77e232ab9928ee1a585a0e87e97984b5b024","sha512":"09719b177749c237fa5682d3022b73803bcc1f81dc93eb37a8925eabb2a56e0d0d9c559fc83e6bc682b867424632ff81225c4a27011237ff1135aaabd7f73141","ssdeep":"1536:hhaP8CysBHnjvlzs265In0KSVjq1FrJRD4r/lhmn7GGq78NUQJkAwwlepmDZBS34:hG88j91D1/itRajAUccxnC8t","tlshash":"dec319c3325af63181a659dea036021572398b9a7005c26cfd3cedde6838d4276bbf75","size":119969,"data":"","first_seen":"2023-10-23T10:46:16Z","last_seen":"2026-04-29T15:50:34.926013Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estimatedeferbulk.com/46/8b/44/468b4484271c0fa952375ef7df899c62.js","fqdn":"estimatedeferbulk.com","domain":"estimatedeferbulk.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"89d810b2c80a6e4f7464425e54ebe9c2","sha1":"5f8f9048546cf6c0a0163a1c69ca3f3a5c9b82a5","sha256":"6cd00c52c02a63813389178ad518d2f522675b2ed50cfcb364cdd33314967aca","sha512":"6eb2fe14070080f52de6431f8d1abc4ec86f5b3e994436e864a3a98107942343bcc4c2bdaf3b721d8071379ac7c4479c8fa30917853e28527a24590103ac030c","ssdeep":"1536:lexlqxOenfI+HeOOoJm+h1eE6eunK1lz2N9QeK22udmmrmYpDkUeDCoxbp3pkcXq:hxQoJSnxKOWe","tlshash":"97a3e9983b50f0bc02a674f9362f7906e064ce6160ccd668d507fca86b7975bf439e29","size":98044,"data":"","first_seen":"2025-10-05T18:28:29.946807Z","last_seen":"2025-10-05T18:28:29.946807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/ja/v/dbnk-080","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"667f82dfaae3804fe0b617becea03e3d","sha1":"df69aef5d3386fae10a69ea27ffd12b32ad48da6","sha256":"2160b34cab442f2fe49fbde49145f1182188de64872508a874ee6a62d88d55cb","sha512":"4b6767a0482ca6d2588c212c67d4f9cc489e9abbac7b87901268dd95ccf0266137da53e5d2912cedf1f3598bc04b8ba170d47b34f4bff045f12b3fb1cfa48628","ssdeep":"","tlshash":"fec02b8c330a4c7041f72740cb3ff640b442321496d0bd32084b23088e30e03d744d14","size":152,"data":"","first_seen":"2025-09-23T05:05:01.461745Z","last_seen":"2025-10-05T18:28:30.128685Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"210593d4f868ec598e71d0960d862f20","sha1":"5118ddc183653b84a131ba8e89f75fdc522aa238","sha256":"5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83","sha512":"ba85c82d1e8080eea1b01a2ccb9dd83805b911ac5bc65ed0f2e942f67ddf38ff6b4d5369322fea9e4646525b69cdfdf5a1b35b29ec8e98613748bc09cfc95f80","ssdeep":"768:1C6jR2KMgasLUU6+9Db69qBuug2Uw5jOyhMVNY1EbV9tGcpfBgQfuWVuY8t:r2PgasLUU6+RxuX2bhNDt","tlshash":"17232a583256397227d980e1a17b63437326753ae94ccc50a423d976367cecad233fba","size":49421,"data":"","first_seen":"2025-10-03T17:34:33.785374Z","last_seen":"2025-10-09T20:11:58.603455Z","times_seen":5784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 07:00:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BxToji3yJydVofVLevQfh0Y%2FkVOEfrS7PTIziE6E%2BAtecqC4XuPOJvNsc28Lpo3bnFFQGBolWVD01d%2FZY8OXvdmBvE3p5C8H1Z%2B6B5cj2ybzwJAaQ%3D%3D\"}]}\r\nexpires: Sun, 05 Oct 2025 18:28:07 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 989ef9e329d4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1315), with no line terminators","md5":"2e45b60e6983af9366c33a2fdcf32ccb","sha1":"49d665b6ccd505af37220885dc6b5bc7db043553","sha256":"19f3e8e521d3dc44e60a46de95076ce3cc47c87de9a1691399a912064eb42cb3","sha512":"b0c5cd1322fd98aafc0d5f0fe75cf210f04382f0b799e32e11de901be9173a2befae05e512d1c020e35916a36e8eb0aad50072da9e9921752a1ec30867ca38aa","ssdeep":"","tlshash":"17219c65d504c40e6170e377be903229d84f760eea20bfd4ac21088be869fca4165947","first_seen":"2025-10-02T15:41:42.431335Z","last_seen":"2025-10-23T21:17:33.737983Z","times_seen":337,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":35,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 18:27:58 GMT\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-05-01T14:43:42.603116Z","times_seen":3755,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/main.efff7dd06e83080d1a67.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/v4/Universal/main.efff7dd06e83080d1a67.js HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.efff7dd06e83080d1a67.js\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEi5b0TkKTNcan5N5G90AGKI7swAVGGkBJGQ%2B3SNbrBdFqeYe2kVsse1dNQMBIP7QokBrwB9d5w5l2tmgLZSuNiE03%2FqADq5qbY1OAKMZyLNhFj7QQ%3D%3D\"}]}\r\nlast-modified: Thu, 02 Oct 2025 12:31:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3145\r\ncf-cache-status: HIT\r\netag: W/\"e4926b660856aba8ebf6f0b06fc2320e\"\r\ncf-ray: 989ef9e48e4db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e4926b660856aba8ebf6f0b06fc2320e","sha1":"edf70360420e8e2e7fcaf5a9ed93ca6cee5c6380","sha256":"c8b0ef7c6ad75055caf85ab2f468c8f3d7bb461ee3b2012d7847a9c683d71e2c","sha512":"6ba50512d553fc64030ed26f1e71a2560ab200e421a1fa8892a2906d20bc9e39f5e0cb48d94cd9e6f9426318a6af3b213430c2cdc6878cea68defe3e32e3d6e0","ssdeep":"3072:mevelzVWoxs34gqSBaDXXLx8e7Tah93eZ/w5h+BCqUtrbT6/7tVDk1Y7sntpS2Oc:zelu32LNTafeZIT6C83Dh46sV+zHY","tlshash":"36d409c87796f07246d69156503f0603f239aa59280ad01cf296ecec796cd8ee276f37","first_seen":"2025-10-02T15:41:42.419684Z","last_seen":"2025-10-24T02:52:58.022277Z","times_seen":340,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rec3.javxx.com/users/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/items?timestamp=1759688878\u0026signature=3c69fb29","fqdn":"rec3.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"172.67.220.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"POST /users/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/items?timestamp=1759688878\u0026signature=3c69fb29 HTTP/1.1\r\nHost: rec3.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeishIP%2FIx938y7JwAPn8hVxkLHME%2B3bnsDs2yN4iLbP6XTibfPjtG5M10bu8svdHDuoum3RvLvLywMyw138F4EGbD5d2oe1p9e1U08S\"}]}\r\ncf-ray: 989ef9e53e5b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2889,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"85c109073f716bf10494dbabf9d7548d","sha1":"836a12a3b059b4f25b6474898a555118f914b087","sha256":"02e4d611138c2bbc45abf2f86c2624ba0d3b9c19cdce6a1a28613af110219b39","sha512":"c29e4c81c1b41f332fbf2ab7f2b8d53394d788199ead431241de631be4a1127541973f41bf50c5b78d93ec07730645642826df96924dac4def826d85472cc7fc","ssdeep":"","tlshash":"3351aeba7e1c89fe563749824c8ff585567e280ee3c18760bc0c8eac576d87ac806574","first_seen":"2025-10-05T18:28:29.943202Z","last_seen":"2025-10-05T18:28:29.943202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estimatedeferbulk.com/46/8b/44/468b4484271c0fa952375ef7df899c62.js","fqdn":"estimatedeferbulk.com","domain":"estimatedeferbulk.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:58.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"estimatedeferbulk.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 11:39:21 GMT","end":"Wed, 12 Nov 2025 11:39:20 GMT"},"fingerprint":{"sha1":"BC:E3:AA:1D:9C:58:ED:BE:DD:42:73:B7:0D:E2:51:82:78:CC:CA:6F","sha256":"8F:F5:7B:5A:8B:AB:01:85:7F:56:27:BD:46:F2:3B:CE:8C:09:9D:70:10:E5:82:E7:60:7E:CC:E8:1F:08:C2:69"}}},"request":{"raw":"GET /46/8b/44/468b4484271c0fa952375ef7df899c62.js HTTP/1.1\r\nHost: estimatedeferbulk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sun, 05 Oct 2025 18:27:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 35785\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_BS-1183=0; expires=Sun, 05 Oct 2025 18:27:59 GMT; secure; SameSite=None\r\nHost: estimatedeferbulk.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bea1fe18217751f1543658a169f3f937\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89d810b2c80a6e4f7464425e54ebe9c2","sha1":"5f8f9048546cf6c0a0163a1c69ca3f3a5c9b82a5","sha256":"6cd00c52c02a63813389178ad518d2f522675b2ed50cfcb364cdd33314967aca","sha512":"6eb2fe14070080f52de6431f8d1abc4ec86f5b3e994436e864a3a98107942343bcc4c2bdaf3b721d8071379ac7c4479c8fa30917853e28527a24590103ac030c","ssdeep":"1536:lexlqxOenfI+HeOOoJm+h1eE6eunK1lz2N9QeK22udmmrmYpDkUeDCoxbp3pkcXq:hxQoJSnxKOWe","tlshash":"97a3e9983b50f0bc02a674f9362f7906e064ce6160ccd668d507fca86b7975bf439e29","first_seen":"2025-10-05T18:28:29.946807Z","last_seen":"2025-10-05T18:28:29.946807Z","times_seen":1,"resource_available":true,"data":null}},"time_used":850,"timings":{"blocked":324,"dns":46,"connect":91,"send":0,"wait":108,"receive":91,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"estimatedeferbulk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"estimatedeferbulk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.polyfilled.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:58.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/plyr/3.7.8/plyr.polyfilled.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30620\r\ncf-ray: 989ef9e59e9523eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"641dd583-779c\"\r\nlast-modified: Fri, 24 Mar 2023 16:53:23 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 921915\r\nexpires: Fri, 25 Sep 2026 18:27:58 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Yw91k76ZhuY69iseVkzpKjGeIpl7qBo8zvHCnOQ6kSOv80Hcdr%2Bu5JZQ5DliT9l8wJgktPcCqEVZiToTpCK6XDPMDwp55%2BY6kBIvXtBbUMKowNK90IISEWrmCNc%2BG%2BnESUdVJyD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119969,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71dc06ef63bafd519190803503d6fdd0","sha1":"efc20140bd1efe04b3a56bb3635874f0749cd8ca","sha256":"b0fc604958d3c5d9b393c4a4e48f77e232ab9928ee1a585a0e87e97984b5b024","sha512":"09719b177749c237fa5682d3022b73803bcc1f81dc93eb37a8925eabb2a56e0d0d9c559fc83e6bc682b867424632ff81225c4a27011237ff1135aaabd7f73141","ssdeep":"1536:hhaP8CysBHnjvlzs265In0KSVjq1FrJRD4r/lhmn7GGq78NUQJkAwwlepmDZBS34:hG88j91D1/itRajAUccxnC8t","tlshash":"dec319c3325af63181a659dea036021572398b9a7005c26cfd3cedde6838d4276bbf75","first_seen":"2023-10-23T10:46:16Z","last_seen":"2026-04-29T15:50:34.926013Z","times_seen":1162,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688670/208335839_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688670/208335839_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13176\r\netag: \"958c0a0c55118875caab7937e03b7505\"\r\nlast-modified: Sun, 05 Oct 2025 18:24:02 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 85\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e608ccb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"958c0a0c55118875caab7937e03b7505","sha1":"c3a8109a8098b2fdf7fbb4e490233cce39cf04a5","sha256":"81c2290723399e60d0edff08d6542f2eb5642a585818423eb76241c7b4396b6f","sha512":"b07e11861fa2630153fdc4a2aefb40111ab50a1212e468e4b0dad0c6af9c403904a6366c107d2b41078e06daec2fb80acd9c27bf19b09608b48b4466e3ba55e3","ssdeep":"384:1vCyOrdbt0yqgJkasYtYimF48abEa5U2RoqvA7hzlKQh2v:nCdR0gHsaYn48/qU2SquPKqE","tlshash":"2842c0ce23f3e7fa97446eda2a5fc1774aa642ce1f6268d8532397d908b205e1d40012","first_seen":"2025-10-05T18:28:29.954217Z","last_seen":"2025-10-05T18:28:29.954217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/cache/2fad7247bf4afd916052a2af5e9631de43122a.png","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /cache/2fad7247bf4afd916052a2af5e9631de43122a.png HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=ll6j8RaNXmNak8Bglx5B1lfsXp7CP69hRA49nNGz; locale=ja\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 15197\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 19 Jul 2025 16:41:13 GMT\r\netag: \"687bcaa9-3b5d\"\r\nx-cache: BYPASS\r\naccept-ranges: bytes\r\nage: 3240491\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VElMdYSKxhawuJr05OwVSZ%2F477CgHCLn4LPD2D7%2B1kV2I9lwnayQh%2FP7lv95QfrIh7lrI1gYqJRUu21muza1rMiWlnLEG54%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e44ede569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"33425b09c13049c244cf3c9f8209fbb0","sha1":"4293684c9096a056a3f4b9d3f42fdf90cfb6ca8a","sha256":"3fb702f7d579a031e98739451275ab2f6a6b11a92e0f3f0850cdc33ad4d2ce21","sha512":"aa125516bf4c905fd9b5a0a26e4fd6d1f4cb35eb66791284f62459e172519161d1d8def88d1366012f177eea11ebde398b4c75e5601dc0db150926c6619eeadd","ssdeep":"384:YlvlDxQZopaaq5HUvMD7g3G/p1e8OKOpIuY+ZI/RWW:Cv3QZopaayUvs7qGB1eXKOpxYCGV","tlshash":"3262d0ea86d1bc293a30380a41c6dceb15887b66cb138c721c2714375caefdc7e45b59","first_seen":"2025-09-19T15:57:47.174547Z","last_seen":"2026-04-23T18:33:00.254066Z","times_seen":35,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 09:59:26 GMT\r\nexpires: Fri, 02 Oct 2026 09:59:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 289712\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-05-01T15:40:40.347665Z","times_seen":223362,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":82,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/a1/spz-1159/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/a1/spz-1159/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 124704\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Wed, 01 Oct 2025 00:28:41 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEjKu%2F95mudqVOnaOwBYPSoX4JpLS896jk7%2BxkHNoOa2QUyVy%2FuavnZIqSk4634GBrvYPrcC2KDgKmlLFhHUi8FeAKVU2aeBP3cT%2FQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ec7f8c569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9553d0f01222a515e94ed9990fb7d7b","sha1":"32610da0ebb3f4e2814c5f3e37c7c67fdbd87a94","sha256":"15af2345c13917b16032180851c2202ebf806c173900bfaa63960635ac6046f2","sha512":"c26c9c87c82971086add05eefdc57939dfd1d9c51b7fb65ccd6c0df1ed4d38c3a4e81502dbccc057956036d5c90a3d1955c67b1ef3dd108dea9c3b69cae98c1c","ssdeep":"3072:6uU+2QDUTk4T2YwOw7Fc2gbyAAKVgH7w8vYg14O:6uUq0kU2bT7F1QjMYg3","tlshash":"7cc312b2d9bd3ed07c0966214bc013783bbb6a8ad4fbd941c9d694cd0466b8dd13d38a","first_seen":"2025-10-05T18:28:29.963003Z","last_seen":"2025-10-05T18:28:29.963003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=1","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=1 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9e69827712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 05 Oct 2025 18:27:57 GMT\r\ncf-cache-status: HIT\r\nage: 1\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6930f5b78dd8a8dc2f00bd69b0cb3549","sha1":"6f0e11495607f61cccb8131f1adea0e7df18ea14","sha256":"ed55cdda7a7c7dd4100fda154f304ffab54bd8698e64c0858bf6f5778ae21539","sha512":"b66f89b845126ef607cf80364828d65c03c5bf7f2eb81d6d7c6ae1312c9ba7a58df71ccc3a21f6f0cc3c092be6ade22b8b059ef9c8ef5398f70c1a60c695d315","ssdeep":"","tlshash":"593100b746cd1c6a0f4641c4cc8e700cdc663d27a5c4b791e199ce492b7eac9115e6a2","first_seen":"2025-10-05T18:28:29.967265Z","last_seen":"2025-10-05T18:28:29.967265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=737\u0026rd=737\u0026fd=530\u0026bv=25.9.7989\u0026tmpl=70","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:51:30 GMT","end":"Tue, 25 Nov 2025 21:51:29 GMT"},"fingerprint":{"sha1":"1E:45:CB:7E:7C:E7:1E:08:73:0A:D3:08:B4:74:21:2F:CA:B6:15:9B","sha256":"54:F3:5A:C9:08:4C:76:26:F7:0E:BF:E0:3F:5B:38:DD:53:CF:95:81:0B:FC:C7:F9:6A:3E:9C:1A:6E:33:92:E0"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=737\u0026rd=737\u0026fd=530\u0026bv=25.9.7989\u0026tmpl=70 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 05 Oct 2025 18:27:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":655,"timings":{"blocked":280,"dns":4,"connect":91,"send":0,"wait":94,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/85/509jpak-019/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/85/509jpak-019/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25852\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 04 Oct 2025 12:56:33 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Q1205VNcm1GvmThUb8lYLwUVUDS%2FFOefv2EhlxmTlnOQkb1Rw0vEpQHtX451XMn%2Bp71Ghov2LpPPHqsQvLFrzxBD26TbiVngmkGCA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea5f62569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a931c70a89667b4f574765f9cc777453","sha1":"2341c8387f5c891d1d2f25d9be74f5786299a63c","sha256":"96fea55995d2f9145f9ee90ac939c3aa5406f1e433ed70fb2a02324f1bec485b","sha512":"e573a1cd3872db35af68a0f0476a663f23afa8df815d7d5cc3580b1332d63bef12c17f31b78c2662629fdb6615519457cd82c103676a9c8127a4a1684438033a","ssdeep":"768:F7v5dAtV4rG1IIGQ9DQ9C9BemIRq5c94A:l7Ar4r0I5UcEvxI594A","tlshash":"2bc2f1d6ac70f256a5ba7034b7e27f10aac8835ac9c41e79770cfc58dc4203918d85be","first_seen":"2025-10-05T18:28:29.971211Z","last_seen":"2025-10-05T18:28:29.971211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/51/ghz-039/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/51/ghz-039/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 151500\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Thu, 02 Oct 2025 14:59:50 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXmJdyRgAXyHprwKmuLTmf%2Bl7kOfU%2FYxaUdRYEaCTdWFUq%2BV09dh1HTvCjZ05Kj5WvDzzegZoE6ci7dmEreEVJhk8AJBWLIUNBqHkg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ec1f83569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f77446fbdd2c1fcc96834efd4325a7c","sha1":"6280e7c38f382b8fd6e04f00faee0fdd9b57b51b","sha256":"e3918bebb74b6b8702a5411f837dc544e53010467e3664f3c9d2ab981c46d4a4","sha512":"57723af549c8b12a0739a37acd86e78243ab1034d0dd3a23d1e4ac9b819e791898cb3c9fb693fb1c8fc91d1fe05ae8041738f330427d9cdc9214339344347d56","ssdeep":"3072:BbvOGAC6di19fL9T26aFABWL40U+HdFZ3tBK2GpTbuJTCcDaaQ4HD5+tB:BbvMC6419p26kAgL/9tGR6Ji4HD5+tB","tlshash":"f1e312230eed305e7387c7260aa413590ad6a4162bc86761372f9c72d3c5eb5fc26c9b","first_seen":"2025-10-05T18:28:29.974234Z","last_seen":"2025-10-05T18:28:29.974234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@100..900\u0026family=Poppins:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@100..900\u0026family=Poppins:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 18:27:58 GMT\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b0ba186bf997bd3f267ac423f5b017bf","sha1":"45dce47afa0017d3fc7ce67540078e1d32385ddb","sha256":"a26c63e6b6d74595e4e085f2e5b98b020c2e0969c8d5dfb1fc65dfbee721be84","sha512":"3cf22edb6e61280410ea543e8182e9a09816ae95f4e8787de7ca8fdbf31bd5a37830106991d19ae64eceb96f88ef5dc3cd51201884e9689c3097be3efab47fa2","ssdeep":"96:bO4baqLO4baCFZyO4ba/O4ba+O4bax3iO4baIgO4bafJc+umO4baTN3OEanOEaCg:4qImkBx3NIj7aCgKQFVwa3RzJZ","tlshash":"e1e1d0e1446bd448ab835cc233cf7d36ae1e91516450e678affd1c98acabc29433175e","first_seen":"2025-09-19T15:57:47.164731Z","last_seen":"2026-04-23T18:33:00.302599Z","times_seen":36,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":57,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/main.efff7dd06e83080d1a67.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/v4/Universal/main.efff7dd06e83080d1a67.js HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.efff7dd06e83080d1a67.js\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYHlZlrFrUzXduFxDDReJnaOjljPb3c9ENjR6yBQSyZcowUn%2FrdPbmUhQg0zzfs1X1docDZr2r9bArGsCkLMwYUGhZ4vqWA6bm9Uwzm8QfsBg7ktzQ%3D%3D\"}]}\r\nlast-modified: Thu, 02 Oct 2025 12:31:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3145\r\ncf-cache-status: HIT\r\netag: W/\"e4926b660856aba8ebf6f0b06fc2320e\"\r\ncf-ray: 989ef9e38e21b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e4926b660856aba8ebf6f0b06fc2320e","sha1":"edf70360420e8e2e7fcaf5a9ed93ca6cee5c6380","sha256":"c8b0ef7c6ad75055caf85ab2f468c8f3d7bb461ee3b2012d7847a9c683d71e2c","sha512":"6ba50512d553fc64030ed26f1e71a2560ab200e421a1fa8892a2906d20bc9e39f5e0cb48d94cd9e6f9426318a6af3b213430c2cdc6878cea68defe3e32e3d6e0","ssdeep":"3072:mevelzVWoxs34gqSBaDXXLx8e7Tah93eZ/w5h+BCqUtrbT6/7tVDk1Y7sntpS2Oc:zelu32LNTafeZIT6C83Dh46sV+zHY","tlshash":"36d409c87796f07246d69156503f0603f239aa59280ad01cf296ecec796cd8ee276f37","first_seen":"2025-10-02T15:41:42.419684Z","last_seen":"2025-10-24T02:52:58.022277Z","times_seen":340,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fv4%2FUniversal%3FthumbsMargin%3D20%26gridRows%3D1%26gridColumns%3D4%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Dfa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e%26tag%3Dgirls%2Fchinese","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fv4%2FUniversal%3FthumbsMargin%3D20%26gridRows%3D1%26gridColumns%3D4%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Dfa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e%26tag%3Dgirls%2Fchinese HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9e51ed1712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7436,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9f98aab490ceeebf4a1b5e758af77391","sha1":"383c14a2b92560da4a6a2c6fdf23725c15417fde","sha256":"effb2b908d96da4cafdca543ff7c88e12c0e2a687becfd2ef653177020a9cad1","sha512":"046c1d9660ff16befe7661e7acf1e374530cc372a2092f18201716159f4ec65fc0938ff4c807aed977e8ecd3cc28f5f91f7029f8622d2deef7508845d50ff47e","ssdeep":"192:m6DyZj1EHeAkkU2YuldcvR4Hh8nyayqh13/7VlloqJIwi13Y6yQ13/7VlloqJIwJ:sZAhkkj93WR+lg5eH","tlshash":"31e146eb821e68f717c44d4ebebda8c8665d40ab4e8148efdc498438426d37213b7b4d","first_seen":"2025-10-05T18:28:29.9794Z","last_seen":"2025-10-05T18:28:29.9794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surrit.store/assets/dist/player1/style-BLMLwy1Z.css","fqdn":"surrit.store","domain":"surrit.store","tld":"store"},"ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:58.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surrit.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 09:09:30 GMT","end":"Sat, 29 Nov 2025 09:50:39 GMT"},"fingerprint":{"sha1":"87:A7:CE:80:0D:37:89:20:DE:30:04:21:5B:20:CF:22:8B:81:D4:49","sha256":"19:C3:62:41:1C:0B:5C:53:05:0F:CD:1C:E3:17:7B:16:D8:89:00:35:45:C5:B9:DF:B6:44:4D:CF:D5:78:74:1F"}}},"request":{"raw":"GET /assets/dist/player1/style-BLMLwy1Z.css HTTP/1.1\r\nHost: surrit.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 06:26:24 GMT\r\nvary: accept-encoding\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W510I%2BUZlDkeCp4M%2FJVGKjB2fq%2BfptGpOzJNw78hKJU0IzNEa3MlpqeaTFuoybP7UlfrFn3U0%2FWWvrahZI9DI%2BKZ5RrHjds0BfutBg%3D%3D\"}]}\r\nage: 3254432\r\ncf-cache-status: HIT\r\netag: W/\"6892f590-28f\"\r\ncontent-encoding: br\r\ncf-ray: 989ef9e59f84120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (654)","md5":"549c22c3e588e7466b47387c1594ba94","sha1":"1dbb51a745dd0c7d920e9c732cafc14ff6f59aa2","sha256":"ce0552b00cbd0e43b139474bbc14f79e75db0b1a980e6abed84a1a32fcad5b24","sha512":"d62794bcf1608d206e4753cb6616a7b1f10f23dc5f782ce0880acc17c2af73a624b64b34bd146292157b2aa74fb9b53261fa7a703989dfb23d50605407390e3a","ssdeep":"","tlshash":"38f0703146aae039d43a65b170d04adc3328c409b6620f68eb257931c5df06b76690c0","first_seen":"2025-08-10T23:03:05.412795Z","last_seen":"2026-03-28T16:39:34.246701Z","times_seen":132,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688130/215135198_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688130/215135198_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9228\r\netag: \"5faf3c28eb808ce5da5425cbe688cfac\"\r\nlast-modified: Sun, 05 Oct 2025 18:15:03 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 647\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e608cab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5faf3c28eb808ce5da5425cbe688cfac","sha1":"d8f217f687d77b3eb31d7b6729a6ad02b1bb1ee7","sha256":"3df6d09e0b681a114275d6963a616a60c0e3046a9ca72edd147185626f79a512","sha512":"c5046a339e89dd782925711bf0172afec510888350c2a074b6996760eeff40c581eeaddb4bd7839b942dc496e98e7d43ca6ddee34ce2355334bf50a2b5932fb8","ssdeep":"192:j7K8WrJcM4mIyE0hQY01zczRgy5yIvWhQ/+dC2baPMFBEv5s/co:j5Y8yE0VFgy5z+A3MrEv5s/p","tlshash":"bd12b0db0744deece9a4f10679003a999b602ec67aadcfde046c66e2c9505b8e04495d","first_seen":"2025-10-05T18:28:29.983113Z","last_seen":"2025-10-05T18:28:29.983113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faf8b60b.sparkvibe33.store/blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/qc/ZDcxYS12MQ.svg","fqdn":"faf8b60b.sparkvibe33.store","domain":"sparkvibe33.store","tld":"store"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sparkvibe33.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 02:18:24 GMT","end":"Sun, 07 Dec 2025 03:16:37 GMT"},"fingerprint":{"sha1":"05:13:56:D5:99:58:B0:32:D9:F2:F0:FD:21:29:93:5E:35:16:6E:B3","sha256":"20:06:0B:04:8E:4D:F1:B2:CA:F2:34:1C:50:C0:40:F8:7C:F4:1D:52:6B:CC:AD:3A:F1:8C:2B:C2:AB:DC:71:12"}}},"request":{"raw":"GET /blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/qc/ZDcxYS12MQ.svg HTTP/1.1\r\nHost: faf8b60b.sparkvibe33.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Sat, 04 Oct 2025 09:51:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTQOn4mWsGw6fBEv5vZhX77bI%2FUqEaFQGQVbE2NrFbVqiww2d99gfPAkTz9WY7vZfhg0%2BQzoni6XYWWHw93eHAL1tN3E7YHeV4Z5nWcRbHstoX3EVnTUdA%3D%3D\"}]}\r\nserver: cloudflare\r\ncache-control: no-cache, public, max-age=16070400\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"68e0ee05-710c4\"\r\ncf-ray: 989ef9e8dd7fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463044,"size_decoded":0,"mime_type":"image/svg+xml","magic":"data","md5":"bbd4484d277bc3cf36829e8a38768647","sha1":"250e16b72e99f4abda70314927f1ae1a7544d43b","sha256":"c85b7f5aacb721878e1d35e8e1987a51ca4ff25d4b7f7d0d7716ffc03bd43f5e","sha512":"d7d10cf842a3a7a4372900252ca338a3e758bf77765f45d03983066e2abc46f14fe9d40824f19974de807cf55d4ad2aaafa0d625bf1ca71ee9743e1cd0b70771","ssdeep":"12288:TuvDXj/PMHvzhjGUekofLhVJDikcuS3vnFQZofVZAtAtcteAlaBA3eyE6DCnH790:TyZUCRiSVZofW3EBtlxBA","tlshash":"55e4e0035301f370a2ea93f66c1246e862055b98f7ebbf90e93481612dce12d779e5e7","first_seen":"2025-10-05T18:28:29.985686Z","last_seen":"2025-10-05T18:28:29.985686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/60/713jkrf-006/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/60/713jkrf-006/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32682\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 04 Oct 2025 20:05:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeebURSz8ojlfxbqjcoaS2wfXBQEUOTwp9TYS9%2B%2BPIcpe%2FwAHXVKZ2lLsxM0m%2FBkiNfXbNZalM%2FVqVHNMJhr6opiUzkIPtg0Dp3aag%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea9f68569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c19c318c72751abf54a9c0af139153f","sha1":"ac8ba4880e96f3d57eb023a6f4cfdf65152144b8","sha256":"11cd91537c15fe753293ca18237bb29ac7d8020ad1516a8d81ba1378e308c99d","sha512":"32b8f802e1767a8e2f5efa50bc6815157969c8bc92e5fab3bec1cc08e1125c6855f259013bd4b67732711bbbd15fb60bb1fb5d9fbadd91d65d8e122484cf8ce8","ssdeep":"768:ovljiNkdl5cwDQIF6FkLdKyoD2KXkpyOsYDwbiRgTuuE:o8+cuL4yc250OsaCak0","tlshash":"dde2011c46cc2fe1b8f5951dd504c6d2462a311602fd60924ad8aa99fed3a7b8df0e4e","first_seen":"2025-10-05T18:28:29.988005Z","last_seen":"2025-10-05T18:28:29.988005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/71/erdm-184/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/71/erdm-184/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 137690\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 04 Oct 2025 05:30:35 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjVFMU0cnd1UItFqcz1e67bGGS8aCez9fj9OxvzmZ0DXuaKoi0CS1M%2FGFTVUsQuHoO21VwAB9kwvSed3l%2BUCuUWinOYyLmFCAif5Bg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9eb5f75569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137690,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d38af886d9c747e363fa3481fcc3dfa","sha1":"25f8e7e8e9e3c8004806355fa13a1c9092746792","sha256":"da06499187bcee9354b6a9a4526217a767fc7720de448e57eb4d6655a63fde99","sha512":"7a98755f85c9be1beeda44de9b04e45ac2d0e73a882fcf2d6fa0c004b6a523e31bd846f9ab9125a3100119e68eae8b48e26bbb3db9900ee5da6a093553c95529","ssdeep":"3072:3FwLkk6TVFiiNeX23RbLGb0XCjwRT/sG++BPa:3FwwXVIig8LGb0b9p+ca","tlshash":"00d312e7a28b255e874b18ddc1b3ca546f71a6e870c6616a8818d131c11eceeca935fc","first_seen":"2025-10-05T18:28:29.99025Z","last_seen":"2025-10-05T18:28:29.99025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:55:40 GMT\r\nexpires: Fri, 02 Oct 2026 12:55:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 279138\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-05-01T15:47:58.473092Z","times_seen":20455,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":66,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:58:27 GMT\r\nexpires: Fri, 02 Oct 2026 12:58:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 278971\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-01T15:38:22.146622Z","times_seen":225659,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":80,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/32/dbnk-080/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/32/dbnk-080/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 127460\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 04 Oct 2025 07:55:00 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzesV9Z%2Bq9IY0s4gg2bvpGY%2FdBW4IodtkAtYFDigfxkNBpkwuX9SCSwClKI%2BIfav2uCBYjHuThmduyaqnf3YxA4XbyVkLf6UhMZ7AA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e78f36569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d1d73e4a6a5e19cab30e22652892daf","sha1":"b55166faaa0b28a9d538b2b2b7650caff7567114","sha256":"cae0f4322d5a92bc231b85d47c9021bd34926b315aecb4700b9ab31e87758041","sha512":"79ca906fc4750b7f38506366e5cedec187a49b4ffbf3d8bf681fad36d52d7bb4e024e5c1a7b9dd6d637ab7622d7cd4ca1b8a59b03367262b5939eca3adc40981","ssdeep":"3072:McjAI7gsdysyQvfKZuG1CsYia6uT3JlUNXSRKHEnIp:MNMNC8G1C/X6W362Ip","tlshash":"0ac3122acdd1dd0c8541ed210b31586328a45db2f699336db6457e93be08cea7b8c9f8","first_seen":"2025-10-05T18:28:29.99876Z","last_seen":"2025-10-05T18:28:29.99876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/69/erdm-185/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/69/erdm-185/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 154266\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 13 Sep 2025 00:53:21 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2BHux3GvgNhtPEc8SHa9VSle7qbyjYUs29XlNin90GNaRKJzYi4%2Bp0Wyb7rjKA1or0rTqDzutEabk8hBQ1FWKixR28pml9NGVU9scA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ebcf80569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154266,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcb4abdc2b5cdfba2b1361a8119ffee0","sha1":"4e2947e3449c8dc846cdceb9fc77c03379dc8eb3","sha256":"efac7b13258ccfa61fe357ed1c48e05ac76541b7da849826ce2b060244a3ecae","sha512":"6912a45b8af14dff75536c8110373d6f2d16a19eaa13bd8ad0815aa7f80e10587a167f5fecd059d105f4b877673ec640434c2b390a7f27bed82f2c18e4d9276c","ssdeep":"3072:6BdZAIWoTVljaXfJbqPvHhsswI1wZmpTfTCz518+m4:6+1onMh8vhsWyZ6fTCN18+m4","tlshash":"03e312f23075a8c407a310707bec89103f76b18a1f6aaa141d3c2be68fddaa594534df","first_seen":"2025-10-05T18:28:30.00257Z","last_seen":"2025-10-05T18:28:30.00257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/dist/11/style-VkmuLz2l.css","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /assets/dist/11/style-VkmuLz2l.css HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 18 Aug 2025 02:01:44 GMT\r\netag: W/\"68a28988-616ed\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nage: 666018\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSQWYtA4DeqaqxMYlqsgySCOad7E8afwcRXSmfYPOCJNjybub6bGJ%2Fj9xmLG0Q3wES%2FA9hraf0hnc4OAhqhjwaaNPlmLWtgdOQ%3D%3D\"}]}\r\ncf-ray: 989ef9e0e9b68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399085,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62584)","md5":"3041c258b08b21d513af14dd37ffe90f","sha1":"9e1d9a0c26a4ebec2b385f8543269db1bde13d9a","sha256":"122a7ca5b930338ef7c5459e4e28cadfc306b4dd2cfbead26c5944ef67d96623","sha512":"092a69eb1a4191bfa32e9e6424f16939ac29b2e5264b8f657582a032f18a4106dafe93ca537758830fccada74b4341c623ccf81f017c7a00459bba891838c98a","ssdeep":"6144:uHI8rz4f7DQfZwEjbgeyLWnI9dfqjEbGpz600I4TQjwJmI:SI8rz4fgf1jbZyQjEb7QjwJn","tlshash":"f984b3f6e08814e8a776c85fc380b7bc553af660c6015d96f00baa5c5fc679a06d6f2c","first_seen":"2025-09-19T15:57:47.158795Z","last_seen":"2026-01-14T08:19:23.066117Z","times_seen":25,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec3.javxx.com/items/dbnk-080/items?timestamp=1759688878\u0026signature=3c69fb29","fqdn":"rec3.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"172.67.220.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"POST /items/dbnk-080/items?timestamp=1759688878\u0026signature=3c69fb29 HTTP/1.1\r\nHost: rec3.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 164\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmG4XrBJ3Dk622WsNkBU4JbRcJwEEOBCmWbiEYaAeVJDRgYFyH8Izogkzc6EbLyMGtYyrvghNZtOU12zFT5ONZdXGSsZdSkAsxDlk%2BmC\"}]}\r\ncf-ray: 989ef9e55e9c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"432bb642be4eb5c1df68de09930e1263","sha1":"5eca066e52a163b17f07d915e266c699c46238d5","sha256":"e5d0ff36ffe22be1ddaa2230caa288f4ea5cdefbc0eb2fbf5f2066d28e83357f","sha512":"902cdbbdead29ab3d9b64c7facdc2bdf1048783bed72801c6a55bb069e91eda30d854df0fc7efc1bb445c2ea84f4fd0b60d7b1f1b58abbf2bfda63c5dba7a7e0","ssdeep":"","tlshash":"c761ffbdbb58c8ba557709525c5ef1c5623e6c0ad3c29bb5ac1c8d0c4b6583ace07128","first_seen":"2025-10-05T18:28:30.007286Z","last_seen":"2025-10-05T18:28:30.007286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":2,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surrit.store/e/2L9449Z2/views","fqdn":"surrit.store","domain":"surrit.store","tld":"store"},"ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surrit.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 09:09:30 GMT","end":"Sat, 29 Nov 2025 09:50:39 GMT"},"fingerprint":{"sha1":"87:A7:CE:80:0D:37:89:20:DE:30:04:21:5B:20:CF:22:8B:81:D4:49","sha256":"19:C3:62:41:1C:0B:5C:53:05:0F:CD:1C:E3:17:7B:16:D8:89:00:35:45:C5:B9:DF:B6:44:4D:CF:D5:78:74:1F"}}},"request":{"raw":"GET /e/2L9449Z2/views HTTP/1.1\r\nHost: surrit.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=30\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6kUHbHYwRxcc0cEjdc1N8FUdyDeHjl6rcbhb9x8dQuxhVR8glgTLq7GZ9jpcybhyDjzXvZAfkYIFu2gxLtXSDmqQUoSy25r%2Bp8%3D\"}]}\r\ncf-ray: 989ef9e5ffff568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/05/meko-359/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/05/meko-359/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 166966\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Thu, 14 Aug 2025 03:52:03 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tNVFT9g5P2U1sfFM4ClytxG24jSJgHo0CoZIJzXOL6P3Cx2BpqVnY%2BQDh%2FDcc5jOVXoponqvr1fmhd0HerPNZaN2Y2PJ13K06cJrQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9eb8f77569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"607c3c236fc848de9c79a5314c42f317","sha1":"fd06c572fe359e9be0d53f862dfd5b21ee9557b0","sha256":"764efc11b60ce8079d4363d39c98ce1590c3f2aaeccecfea3da81a2031b7f805","sha512":"d190a7722902ee2970e162aa5f30bb2060333affc57312023d26b94b634266bc749df57dc8254481a9e28c93b467f680db7da29d1728bc7f56454c20a963fa64","ssdeep":"3072:bZda++oWywYRP7NnVrUHZ3aJRO49MyxoD4uRIElm8yfsyt:bW++oVJxVCBaPOGM2Ax1yt","tlshash":"c9f323ed2362c62ff982bc6ccd55ba44418b23b5f4e63f208d42f6fa4528525c643a7d","first_seen":"2025-10-05T18:28:30.015642Z","last_seen":"2025-10-05T18:28:30.015642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec3.javxx.com/users/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/items?timestamp=1759688878\u0026signature=3c69fb29","fqdn":"rec3.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"172.67.220.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"OPTIONS /users/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/items?timestamp=1759688878\u0026signature=3c69fb29 HTTP/1.1\r\nHost: rec3.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://javxx.com\r\naccess-control-allow-headers: content-type,x-requested-with\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwbIZdahsskqaS1ufjTy8%2BZBChAGij4aBovCI%2BbeilkXx9zfOmCzF8h9t2Ov53OEH6P5NDH9QeOIh3vlNZMacCnAZwclrtBBIQ5K21EP\"}]}\r\ncontent-encoding: br\r\ncf-ray: 989ef9e47c2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-05-01T15:40:36.472528Z","times_seen":282253,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":15,"dns":5,"connect":3,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 02 Oct 2025 07:00:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Oct 2025 18:28:07 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkXC%2FsLebNyuZ5ukKqE4C1h%2FBDwCpfe9P4aQTCZWUgQ2bzf%2FDozLtF6fZc7sRzxx9DrdW50IJJPQBqShZvjMQstisyy%2Fjx%2FgpwaZOqYiJ7G67mk7eA%3D%3D\"}]}\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 989ef9e46e48b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1315), with no line terminators","md5":"2e45b60e6983af9366c33a2fdcf32ccb","sha1":"49d665b6ccd505af37220885dc6b5bc7db043553","sha256":"19f3e8e521d3dc44e60a46de95076ce3cc47c87de9a1691399a912064eb42cb3","sha512":"b0c5cd1322fd98aafc0d5f0fe75cf210f04382f0b799e32e11de901be9173a2befae05e512d1c020e35916a36e8eb0aad50072da9e9921752a1ec30867ca38aa","ssdeep":"","tlshash":"17219c65d504c40e6170e377be903229d84f760eea20bfd4ac21088be869fca4165947","first_seen":"2025-10-02T15:41:42.431335Z","last_seen":"2025-10-23T21:17:33.737983Z","times_seen":337,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surrit.store/stream?token=WQ5BZ14KbQE%3D","fqdn":"surrit.store","domain":"surrit.store","tld":"store"},"ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surrit.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 09:09:30 GMT","end":"Sat, 29 Nov 2025 09:50:39 GMT"},"fingerprint":{"sha1":"87:A7:CE:80:0D:37:89:20:DE:30:04:21:5B:20:CF:22:8B:81:D4:49","sha256":"19:C3:62:41:1C:0B:5C:53:05:0F:CD:1C:E3:17:7B:16:D8:89:00:35:45:C5:B9:DF:B6:44:4D:CF:D5:78:74:1F"}}},"request":{"raw":"GET /stream?token=WQ5BZ14KbQE%3D HTTP/1.1\r\nHost: surrit.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=30\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04q6xdOet8g2sinQXpdLFOSIjEaLs2erTk48l1bEu%2FL7rZq3g3v84P1VZTeSN389n8rYEj97Q01Zei3rrFXKVghHGWEI9GSTYmU%3D\"}]}\r\ncf-ray: 989ef9e5f800568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"140c47b1664219a0d7d47d5b3775d1c7","sha1":"64112076a38ca35201bda90e0efdf14b6000b8e4","sha256":"a51768d03b3adc485211ddda4ec1ac53bf1107b4c2c4a41ae9ab02edb9fa5d7e","sha512":"1174a7b26177d48fe0e4cd4a04381222f8d2d460eded0a5370d2bff59c9a1467d32ef017a061d1274984366e9d682f5a9df45f6e43aec2041be7833bf062490c","ssdeep":"","tlshash":"77f002289b361abd5d71c00631a4e8832526558d7742722738ed022417bbc1529a920a","first_seen":"2025-10-05T18:28:30.019244Z","last_seen":"2025-10-05T18:28:30.019244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faf8b60b.sparkvibe33.store/blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/qc/ZDcxYS12MA.css","fqdn":"faf8b60b.sparkvibe33.store","domain":"sparkvibe33.store","tld":"store"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sparkvibe33.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 02:18:24 GMT","end":"Sun, 07 Dec 2025 03:16:37 GMT"},"fingerprint":{"sha1":"05:13:56:D5:99:58:B0:32:D9:F2:F0:FD:21:29:93:5E:35:16:6E:B3","sha256":"20:06:0B:04:8E:4D:F1:B2:CA:F2:34:1C:50:C0:40:F8:7C:F4:1D:52:6B:CC:AD:3A:F1:8C:2B:C2:AB:DC:71:12"}}},"request":{"raw":"GET /blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/qc/ZDcxYS12MA.css HTTP/1.1\r\nHost: faf8b60b.sparkvibe33.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Sat, 04 Oct 2025 09:51:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWvFt9QJvkwwj86TveYFC4ro6BqUcTz6JByFg%2BNtSzjBdZB2QaR68IYpQVqWT7gouySz2RXRLh5qfCV9ijBIQ7TYmPIPWv7WF%2FzeEa07ybNLB%2BfyqBC7%2Bg%3D%3D\"}]}\r\nserver: cloudflare\r\ncache-control: no-cache, public, max-age=16070400\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"68e0ee05-40130\"\r\ncf-ray: 989ef9e80d7ab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262448,"size_decoded":0,"mime_type":"text/css","magic":"data","md5":"dd1b63660a6ab31c92a51b21bde04f0d","sha1":"2b83a0f4f8d2f96a8411d77f9fba3172f39f45c6","sha256":"48f17deee913ac4e7da8b149f3de8848f699f52b6e66de626a7a8bb1b05cf6ff","sha512":"220b173aaf41697d74c05e97827e788079f41876411bb5857b3c8e7df5cbc7c2d0b5c66f67bc8ac51328030686567fc4fd00e33862f29c219f03419e7e74c9d3","ssdeep":"6144:KUJLa2ib8PYgqeW9hy3tAJizaYFcXPRrGUqJHKc+x4rljC5emDidaRNuUl7vdApB:KUVvPYgqeAy3tAJiGlrsKc+8ljC5emon","tlshash":"1b84e1039392f360dab943f6ac1207e492015794a7dbbf91e57492701d8b13db2df8ea","first_seen":"2025-10-05T18:28:30.020754Z","last_seen":"2025-10-05T18:28:30.020754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/ba/ss-151/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/ba/ss-151/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117948\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Tue, 30 Sep 2025 11:43:33 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJQq6RMkJeECFlgI2Z4Db5tG%2BWtN%2FfPvqpbeVagOYGKIsQQyJ3dXjRD2yFvvu5WBMrqxwwgYDt%2Bl1Drvob%2BgHvDB5Ca6fLK8%2F5pauQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea3f60569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d5fb1a255f5785368b25ed0c59f8a51","sha1":"cac0e614d08d586767f4d61b25c621d41b8dfb8f","sha256":"cceaf20d48bf8fbda4ff28dccb080ffc7dd03be1a02c0b8b16478d95a1c052b2","sha512":"8f8913753a5f0aad4effc2e079dbb0a14a0f62c609e381861432efa45fbe15a47fc35ca0042cbaa9d38347fe4a34decf5d55fbbbdf59213658fa26171eaed86c","ssdeep":"3072:T1luHEdlVSdBIWB3Cb9jfkVaUfia9WBuyQNY6Fu047:TesVS3IrRcgBuyQNYK547","tlshash":"64b3124f6b00b71127b6d66ab5b7aefbbc6c280705900cccd64384f41de2c6f51e6996","first_seen":"2025-10-05T18:28:30.022119Z","last_seen":"2025-10-05T18:28:30.022119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/16f9cd2f90a6/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/b/16f9cd2f90a6/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Fri, 03 Oct 2025 12:00:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e13e3ab517-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49421,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49420)","md5":"210593d4f868ec598e71d0960d862f20","sha1":"5118ddc183653b84a131ba8e89f75fdc522aa238","sha256":"5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83","sha512":"ba85c82d1e8080eea1b01a2ccb9dd83805b911ac5bc65ed0f2e942f67ddf38ff6b4d5369322fea9e4646525b69cdfdf5a1b35b29ec8e98613748bc09cfc95f80","ssdeep":"768:1C6jR2KMgasLUU6+9Db69qBuug2Uw5jOyhMVNY1EbV9tGcpfBgQfuWVuY8t:r2PgasLUU6+RxuX2bhNDt","tlshash":"17232a583256397227d980e1a17b63437326753ae94ccc50a423d976367cecad233fba","first_seen":"2025-10-03T17:34:33.785374Z","last_seen":"2025-10-09T20:11:58.603455Z","times_seen":5784,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/main.4ee1a4aa2bf49825a054.css","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/v4/Universal/main.4ee1a4aa2bf49825a054.css HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.4ee1a4aa2bf49825a054.css\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7OpwzmwIJUFBA2f78tlBOLfDnwsn5EGhaBHYkYntus2w24jx9Bn5u4X0RSi%2FXd%2FYmDhIzSf6ORPu9uG5urNIURmICNGfrEKnLg66cObjjymfq4Inw%3D%3D\"}]}\r\nlast-modified: Thu, 02 Oct 2025 12:31:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 590\r\ncf-cache-status: HIT\r\netag: W/\"0a06113e9a3b7b45e232f69bd189a565\"\r\ncf-ray: 989ef9e48e4cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14217), with no line terminators","md5":"0a06113e9a3b7b45e232f69bd189a565","sha1":"fcf093cbfad3a07e5a3383ca4afbefbb41f03e42","sha256":"b33ecf80e88b420f09410bebf37253b3ed576feb889ca720a4cb97cc4f3106cf","sha512":"f359e5a286fb92f79a3fb0c509872b4a69c2451a34ab4c5dd512b634aaa303337ea80beebc5d6fa9357c8d57093573638ac1a7a3141cc08b73ee1887257b3cde","ssdeep":"192:tXaNHrs9nXOVXqkbuyKqyhjUi+FBuHVAjV94kL+YXFcX:ZauOcD1+FgHVAjVymiX","tlshash":"4b52c73355a12708f41bcd2167a527dba268c41be11227fced927a35cbcb4870fb618e","first_seen":"2025-10-02T15:41:42.497699Z","last_seen":"2025-10-23T21:17:33.243453Z","times_seen":337,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/abc.gif?userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=4\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fjavxx.com%2F\u0026i=0\u0026abTest=widgetv4universal_default260925\u0026abTestVariant=widgetv4universal_default260925_default_74\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A109%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A17%2C%22duration%22%3A22%2C%22transferSize%22%3A165633%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A17%2C%22duration%22%3A8%2C%22transferSize%22%3A5204%7D%5D\u0026mh=-1290904646","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /abc.gif?userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=4\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fjavxx.com%2F\u0026i=0\u0026abTest=widgetv4universal_default260925\u0026abTestVariant=widgetv4universal_default260925_default_74\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A109%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A17%2C%22duration%22%3A22%2C%22transferSize%22%3A165633%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A17%2C%22duration%22%3A8%2C%22transferSize%22%3A5204%7D%5D\u0026mh=-1290904646 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 989ef9e60fa1712d-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faf8b60b.sparkvibe33.store/blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/video.m3u8?v=a2","fqdn":"faf8b60b.sparkvibe33.store","domain":"sparkvibe33.store","tld":"store"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sparkvibe33.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 02:18:24 GMT","end":"Sun, 07 Dec 2025 03:16:37 GMT"},"fingerprint":{"sha1":"05:13:56:D5:99:58:B0:32:D9:F2:F0:FD:21:29:93:5E:35:16:6E:B3","sha256":"20:06:0B:04:8E:4D:F1:B2:CA:F2:34:1C:50:C0:40:F8:7C:F4:1D:52:6B:CC:AD:3A:F1:8C:2B:C2:AB:DC:71:12"}}},"request":{"raw":"GET /blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/video.m3u8?v=a2 HTTP/1.1\r\nHost: faf8b60b.sparkvibe33.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 04 Oct 2025 09:41:29 GMT\r\netag: W/\"68e0ebc9-d1\"\r\nserver: cloudflare\r\ncache-control: no-cache, public, max-age=16070400\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqlyikAweu2fsN7D2DOMwKYI%2FkWG%2FG%2FicdlLnfpcOclUwKSA5y7Odcuc2Wjs4VcyJdt4%2FytSwrYsEMTjSeemCcXzpcxE4VUH8cV156rrrqTbSBAD6K0Kj%2F0N\"}]}\r\ncf-ray: 989ef9e72e9f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"4dc853fba5eb31db84680389a4d43b34","sha1":"68f704015a358d2c684c443c51ea2198472cd1eb","sha256":"1bd334a9a17190f73ff00a68f6005f148446be4ee941e53aad04379a79e5025b","sha512":"c803c63f60fbdc008da85b44feb55ec58362b6b6622c8df1afe2379ed4e28b5d327d42f7975b34f34eac921b5009aa7cb9b5682e0b6cbcdb127bfe6834b9393c","ssdeep":"","tlshash":"acd02280306df2242d5cccc2a989f3023c163ce88e5848f832fe7a008083cf025ef028","first_seen":"2025-08-22T03:42:07.288195Z","last_seen":"2025-11-14T15:18:47.266556Z","times_seen":38,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":76,"dns":33,"connect":1,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.plyr.io/3.7.8/plyr.svg","fqdn":"cdn.plyr.io","domain":"plyr.io","tld":"io"},"ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.plyr.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 23:29:57 GMT","end":"Fri, 12 Dec 2025 00:21:15 GMT"},"fingerprint":{"sha1":"B0:37:28:8F:CC:8C:3F:9C:89:35:B5:54:32:22:ED:1F:E1:FB:98:EF","sha256":"6E:22:6E:A7:8E:6D:29:06:9D:5F:4D:FA:6A:78:3F:C1:79:06:00:36:62:BA:07:AC:21:2F:BF:53:E4:C7:24:F5"}}},"request":{"raw":"GET /3.7.8/plyr.svg HTTP/1.1\r\nHost: cdn.plyr.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nage: 2030253\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 20 Apr 2023 10:33:44 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3IvOOIjgccu7QoxAclV97budPCl10DxDQmv0FmpGP6ehhtu8tIDWOzyaRhAL2vknwAkjHcnt%2B11dJQCuOI5%2BMsIHBix8YJqiSM%3D\"}]}\r\netag: W/\"3a727a9b7eef825081d78cc6e48aaadf\"\r\ncontent-encoding: br\r\ncf-ray: 989ef9e7dfd176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a727a9b7eef825081d78cc6e48aaadf","sha1":"bc98e4a347921594352fbae53aaad185c0c7f6b5","sha256":"4846018760f6e11a8a1dea7639a5c75c712f198d978eccf117840820bb8c37d7","sha512":"a685f2c1a709994fbbf25582ccb4996562973e33b859d58225a3388de22410b5a2e2a52a87bda13d5473c3348f1ab7fb8c01010e6778d52276eb649ba03ba308","ssdeep":"96:ym9IR6RryIR6R2syGo0R1J5a6A3jalbI0NSJVUqSnxKfi5aR:yFR6RrRR6RHf1raYlM00JqAyaR","tlshash":"c7c197ffc72483b95c87993ddf33a090318fa1fab4e541b8a1558bb48b975c5e906e10","first_seen":"2023-05-09T20:31:23Z","last_seen":"2026-05-01T12:47:54.249069Z","times_seen":3267,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":31,"dns":3,"connect":2,"send":0,"wait":8,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faf8b60b.sparkvibe33.store/blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/preview.jpg","fqdn":"faf8b60b.sparkvibe33.store","domain":"sparkvibe33.store","tld":"store"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sparkvibe33.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 02:18:24 GMT","end":"Sun, 07 Dec 2025 03:16:37 GMT"},"fingerprint":{"sha1":"05:13:56:D5:99:58:B0:32:D9:F2:F0:FD:21:29:93:5E:35:16:6E:B3","sha256":"20:06:0B:04:8E:4D:F1:B2:CA:F2:34:1C:50:C0:40:F8:7C:F4:1D:52:6B:CC:AD:3A:F1:8C:2B:C2:AB:DC:71:12"}}},"request":{"raw":"GET /blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/preview.jpg HTTP/1.1\r\nHost: faf8b60b.sparkvibe33.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/jpg\r\ncontent-length: 1042030\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 04 Oct 2025 09:41:29 GMT\r\netag: \"68e0ebc9-fe66e\"\r\nserver: cloudflare\r\ncache-control: no-cache, public, max-age=16070400\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teGtcJrzVvwx0coF%2FEHLQ1lvNX6hLRiLYHEBJnITZ%2B2Otb0Sh0t3bKC4BwEpu37jxbAknT0zDyXJtFBtkENupUAFyGMRCRH7Qoo6Kf9Nr8jEptluOR0j5w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e7fe0ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1042030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 224x225, segment length 16, comment: \"Lavc62.13.101\", baseline, precision 8, 3000x1792, components 3","md5":"932b2f3b2934d02052d0b3b360339c82","sha1":"9eacf308ac5445944cf57b421e2d7f051fa24465","sha256":"60801f3174a6caa93e7baf89b74250c13e64f887eea3a1ebc5d0c371145cdeac","sha512":"9eecd91553fd16eb4b64c8d5c3039d8267ef233f33fdad54dc8a8f5eff402713b0a76f6a9385e841d3e852b364c88633c2c69b6d571340aeef809477aa29ca07","ssdeep":"24576:2oeNwQnjhcIN7vWsnS3H1ukZ9m6AI2xMw2AXTkK:YlnjhdZWes1XSIBHy5","tlshash":"5f253368ac1c6ac1bfc2a72c1d10779019900dd7e2affd21c58e6b245fe48de54af49e","first_seen":"2025-10-05T18:28:30.026694Z","last_seen":"2025-10-05T18:28:30.026694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 05 Oct 2025 18:27:59 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e1f1aee1d5f29f8939f73656a7cb004b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":65,"dns":1,"connect":20,"send":0,"wait":21,"receive":19,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-16VEEYG9GR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-16VEEYG9GR HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\nexpires: Sun, 05 Oct 2025 18:27:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140742\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422280,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a5e31c225d6f291f8770726c2fc15bec","sha1":"11015d93f00fb631750c41f2d2e47655409ba227","sha256":"e23eaa65e34a1f89b6f80678901b6c32d0d015a92257ce9fadae5142890b27b0","sha512":"53bf904ec7a7162fe86519a58e9be1fbb576448d584b571282ad7de5cc1a44a40e9f0fabe3230e7f3d07ef3ecb86fa4e33f60ec03642b65982d1046c13dbed9a","ssdeep":"6144:1B8ZTP5DyYvRC1cZwtgk6dSLd6gZg1X+6RVt:LebdtvIcZwhGt","tlshash":"24941ace73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","first_seen":"2025-10-05T18:28:30.028961Z","last_seen":"2025-10-05T18:28:30.028961Z","times_seen":1,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":68,"dns":0,"connect":9,"send":0,"wait":38,"receive":22,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 18:27:58 GMT\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-05-01T14:43:42.603116Z","times_seen":3755,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688340/186175301_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688340/186175301_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\netag: \"ee62dc8c0ead0fade944e31c155a69e1\"\r\nlast-modified: Sun, 05 Oct 2025 18:18:23 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 517\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e54fcd0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee62dc8c0ead0fade944e31c155a69e1","sha1":"9591c19372ad3e3a6d601e8c96c555c029e264cb","sha256":"e97fe170bd9ecf84a1f6b4a77abb081846aea9dc26e25f9c10e65375682adcea","sha512":"30740b85cf6f65692692143b01b2f23b7f834dcebb1f6b15a852291cd6db1666d0f823c7646e34794c792106f793ebb943d68d6cd66df88af0c70953cf04cf96","ssdeep":"192:+csHxw1DPQO3JfEnsvHenZ7mXUJUUZKMWngpMAtPBId/ns5Ah:iHxcQWVPWb7S6MAtPBId4Ah","tlshash":"ec22cf31ebf0bc95725def1e6283239441e08d43f023e249dda5509ba672cbb4977e06","first_seen":"2025-10-05T18:28:30.030706Z","last_seen":"2025-10-05T18:28:30.030706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":14,"dns":4,"connect":2,"send":0,"wait":11,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faf8b60b.sparkvibe33.store/blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/qc/v.m3u8","fqdn":"faf8b60b.sparkvibe33.store","domain":"sparkvibe33.store","tld":"store"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sparkvibe33.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 02:18:24 GMT","end":"Sun, 07 Dec 2025 03:16:37 GMT"},"fingerprint":{"sha1":"05:13:56:D5:99:58:B0:32:D9:F2:F0:FD:21:29:93:5E:35:16:6E:B3","sha256":"20:06:0B:04:8E:4D:F1:B2:CA:F2:34:1C:50:C0:40:F8:7C:F4:1D:52:6B:CC:AD:3A:F1:8C:2B:C2:AB:DC:71:12"}}},"request":{"raw":"GET /blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/qc/v.m3u8 HTTP/1.1\r\nHost: faf8b60b.sparkvibe33.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 04 Oct 2025 09:51:01 GMT\r\netag: W/\"68e0ee05-1f517\"\r\nserver: cloudflare\r\ncache-control: no-cache, public, max-age=16070400\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urEHnG5M728hGpm8zXzALQSQsM8Qwq9dBF92RulMv0UkiEguULAVogJSRxopgm9AnvunJ6%2Fgm6ofXjDgHNiaxnM24cNyMlDzvk%2FhWWmddN3OPtZlqHdej6By\"}]}\r\ncf-ray: 989ef9e7b82e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176900,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"0f729c8a580cde1f518227039e7b5929","sha1":"b700b142db2dbe5b8c2352726ed08c969159306d","sha256":"12df79509041b68d1cf9922bb395e2debae78821234c56cac1008dc64b45b03a","sha512":"d5f1ec3b84cec894affdce760c52f789f3c6bf7a5761ca6b66585aea2b868582c5967ae3c1da87dff8c8bd1ab3e5022104e36083dae93774f9e04258b58e62b3","ssdeep":"768:wOLW4Jv0IFtRoEjJoH4XQ6OMi4xh8ZNLyME7KX4fAX:w0DJplbOWhquuXmO","tlshash":"290422c567337cdedd1dad24876e3483e318bd786ae10ae7b08549cd0c329892499ef6","first_seen":"2025-10-05T18:28:30.032516Z","last_seen":"2025-10-05T18:28:30.032516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/ae/orex-343/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/ae/orex-343/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27876\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Wed, 24 Sep 2025 18:11:24 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAgpBRFuHY%2FaTQCIT7rKHp%2B1uZsYaNgQGEfe%2BwChaFB9OnUOUORagIBRztHBnW6Nx4aj0osDWjRpStfxsUWSSdmFryhJAKDPW7BfkA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e9ff5b569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff20993155dedb3310c6ae14e63eba55","sha1":"0c0bcee73ff98079034d4ad6a6e5caa4022ed192","sha256":"3146c070784843c0b5e2b4cde8d6773f606a205cec2ef62347ef484a5d4e8bfd","sha512":"24d093f4e89839dc7ee9090ceadeebb9ce3b07ce10d4e2edeaf1777b1441a374e703da93d7ef59587174fba135d79e3e0ce70a5688a1e394765e786fe4d38475","ssdeep":"768:h//H+hiajyu1/IBYUXaS+fTeUETJl390+P:hXpS1ABYUqS+fO37","tlshash":"6fc2f197a5871829c253d1307970c62b8a4f5f070c9e67b9348613049e9fae1e8d7e76","first_seen":"2025-10-05T18:28:30.03472Z","last_seen":"2025-10-05T18:28:30.03472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/6a/ss-141/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/6a/ss-141/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 121668\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Fri, 03 Oct 2025 18:54:35 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhhIWoifszTMY1dhj9fMHJBWgIxOS75MGukwclB2m9xJnMQ8EMGIyyDgsTKV6ADygFmklWYEFC81W7PEWMT%2BCFnTjwBQEzfOJSA8JA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea5f65569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b991eb539ef1969952eb88dd5df3e3c","sha1":"37eeaae68a8c55962d4ef560848d709abf0a1b19","sha256":"d3a3c53123283a51d9a843acb327cf9604e01f70e34f968b9b8f07b97a6c5403","sha512":"d6b04d7c4e2f5d8d6a5de464fffda6bc4634e00e67065f0f46777c34fe2a04e83e7c6fdb561af6ae282cfa4cccccee811530a461e260c2e7535e259b6c59d20e","ssdeep":"3072:0kgk0TbsL7zj9KsGN6/O4N0Lno6JuntAMp:0ZlTb0Pjwu/n0Lnwp","tlshash":"12c312962e99d5c0d44610733ee619bc5daf50a3b33b8bca3d57141ea91bfd81b2c0b2","first_seen":"2025-10-05T18:28:30.037261Z","last_seen":"2025-10-05T18:28:30.037261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688340/186175301_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688340/186175301_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\netag: \"ee62dc8c0ead0fade944e31c155a69e1\"\r\nlast-modified: Sun, 05 Oct 2025 18:18:23 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 497\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9eace64b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee62dc8c0ead0fade944e31c155a69e1","sha1":"9591c19372ad3e3a6d601e8c96c555c029e264cb","sha256":"e97fe170bd9ecf84a1f6b4a77abb081846aea9dc26e25f9c10e65375682adcea","sha512":"30740b85cf6f65692692143b01b2f23b7f834dcebb1f6b15a852291cd6db1666d0f823c7646e34794c792106f793ebb943d68d6cd66df88af0c70953cf04cf96","ssdeep":"192:+csHxw1DPQO3JfEnsvHenZ7mXUJUUZKMWngpMAtPBId/ns5Ah:iHxcQWVPWb7S6MAtPBId4Ah","tlshash":"ec22cf31ebf0bc95725def1e6283239441e08d43f023e249dda5509ba672cbb4977e06","first_seen":"2025-10-05T18:28:30.030706Z","last_seen":"2025-10-05T18:28:30.030706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/74/gigl-758/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/74/gigl-758/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 156714\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 23 Aug 2025 01:50:33 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9TuMKvQ9dLSGYo%2BiDDPWi3UQQZFUQwxovg%2BW1%2Fx7ekAyd270fFw9hGBGO8lso6CAKksJ2ljEzV6FPQuWbbiuwjTPZFlso43oBfXwQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ebbf7f569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"410d416f7f4360642fefa95674adf5a8","sha1":"4de8d759661a0df6b1ac9a9c50ed41d80330c4cc","sha256":"2596af25fb6da689a5bf44d14a0f0643a0ac2356acb48da966888ce34a88b83a","sha512":"e791fe3fbcdec6806ee314e08488d8106839c5863119d09fd3f64290e469f567484f681b97ca0b1f85a8b39e7a169cdaf5e90f472dec9a6620d22b40034703c6","ssdeep":"3072:3y4PHIVMtO8eQNRrLSQHYQkpTkAhsVsV95jjdpx6BA1HlVjXe1nUm:mVMtOmj3kpTkGsuDVBoA1FVjXeH","tlshash":"cae31372de0c06b84b72e0f4f66b3ce516d15466b81d99718817c648f33bec9f4a25b8","first_seen":"2025-10-05T18:28:30.040182Z","last_seen":"2025-10-05T18:28:30.040182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/16f9cd2f90a6/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e0fb5f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49421,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/main.4ee1a4aa2bf49825a054.css","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/v4/Universal/main.4ee1a4aa2bf49825a054.css HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.4ee1a4aa2bf49825a054.css\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pt%2BkbjcvWzXaKpoRoetn7WkrL3ZywpUVNhviSUyvc4DbtxZViEmJeob%2FYYR6TEqAL92K1JHvrxUpetBDdoGSj2X57zJKjeF6JgAjNS5wqixOQHL9jw%3D%3D\"}]}\r\nlast-modified: Thu, 02 Oct 2025 12:31:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 589\r\ncf-cache-status: HIT\r\netag: W/\"0a06113e9a3b7b45e232f69bd189a565\"\r\ncf-ray: 989ef9e38e20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14217), with no line terminators","md5":"0a06113e9a3b7b45e232f69bd189a565","sha1":"fcf093cbfad3a07e5a3383ca4afbefbb41f03e42","sha256":"b33ecf80e88b420f09410bebf37253b3ed576feb889ca720a4cb97cc4f3106cf","sha512":"f359e5a286fb92f79a3fb0c509872b4a69c2451a34ab4c5dd512b634aaa303337ea80beebc5d6fa9357c8d57093573638ac1a7a3141cc08b73ee1887257b3cde","ssdeep":"192:tXaNHrs9nXOVXqkbuyKqyhjUi+FBuHVAjV94kL+YXFcX:ZauOcD1+FgHVAjVymiX","tlshash":"4b52c73355a12708f41bcd2167a527dba268c41be11227fced927a35cbcb4870fb618e","first_seen":"2025-10-02T15:41:42.497699Z","last_seen":"2025-10-23T21:17:33.243453Z","times_seen":337,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/abc.gif?userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=1\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fjavxx.com%2F\u0026i=0\u0026abTest=widgetv4universal_default260925\u0026abTestVariant=widgetv4universal_default260925_default_74\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A189%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A81%2C%22duration%22%3A23%2C%22transferSize%22%3A5220%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A82%2C%22duration%22%3A42%2C%22transferSize%22%3A165473%7D%5D\u0026mh=294945652","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /abc.gif?userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=1\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fjavxx.com%2F\u0026i=0\u0026abTest=widgetv4universal_default260925\u0026abTestVariant=widgetv4universal_default260925_default_74\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A189%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A81%2C%22duration%22%3A23%2C%22transferSize%22%3A5220%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A82%2C%22duration%22%3A42%2C%22transferSize%22%3A165473%7D%5D\u0026mh=294945652 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 989ef9e53ef9712d-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stripchat.org/checkUrl","fqdn":"stripchat.org","domain":"stripchat.org","tld":"org"},"ip":{"addr":"104.17.118.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stripchat.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 14:07:32 GMT","end":"Tue, 25 Nov 2025 15:07:26 GMT"},"fingerprint":{"sha1":"55:09:22:3F:1F:58:82:B3:00:A8:1C:6E:DF:21:36:45:37:F6:78:AC","sha256":"C3:7A:88:19:1E:25:55:AC:9C:4A:E7:2E:F2:61:33:76:C9:5A:98:42:6F:C8:0C:95:4E:78:52:15:10:F9:43:F3"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: stripchat.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\ncf-ray: 989ef9e5ca8676ef-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=8BWtj4rmGnETefK8FKAfB23SUB8mHsDfq8xdZ1G1dqs-1759688879-1.0.1.1-b2vyUs2Zqk.vSUQ_1KiEll0EzjdBdK.GJWhS2ammLuzOGqoEqNOFdhBDDtXq9tCwvfBMgc4e.3ux0PAVaKHzC8YXpiawCEOkJHJf8klHElz8k1Ta38EUGbOJ6tp_UgIH; path=/; expires=Sun, 05-Oct-25 18:57:59 GMT; domain=.stripchat.org; HttpOnly; Secure; SameSite=None\n_cfuvid=e6t_gwW1Nzzxa_gGR4y_Rph530BLWz_e361jM1a_bCs-1759688879049-0.0.1.1-604800000; path=/; domain=.stripchat.org; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-05-01T16:25:39.368114Z","times_seen":7843,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":30,"dns":2,"connect":1,"send":0,"wait":42,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/app/domain-checker/check-result","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 240\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncf-ray: 989ef9e62fc5712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/88/hez-824/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/88/hez-824/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 151728\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Mon, 22 Sep 2025 14:42:54 GMT\r\nage: 4898\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J3SiBytmGWowewLFieLpb9OL4CpRLVBZrFFOsrsZtB%2B2hHWd21%2BIzBFNzc28AlMjY3lUWRaI9gKsPKe36y%2FKSTv9bDJAlhz%2BQY%2F7ZQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9eb7f76569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2fea836c8400d253cf4457f2ef571454","sha1":"0dbe0d532d78ef0ca585920f1ecd87e62e0c64e9","sha256":"964cda5fa9e42da7407bcab5ff46f2b1175662d78ceb61234c1160df479fe3fe","sha512":"a7c935de82018817de4ecda4970c0bf241f0dd01b7a708146866e4195559e0587e2b8f9ef0efe4758a0d3540f8d70a19a89308649ed815a31e229b85781b3fe3","ssdeep":"3072:lzlXtUnk6NPVg/wFSmMZR+OpN/jtLTEZZNvUrI+bAal091:lzlIkgXFPOFN/jtLTEbRUsam91","tlshash":"9be31265a92553c849792c0319718c3dd0b97dea413b3eccf85c08d93e95ecd6627cab","first_seen":"2025-10-05T18:28:30.043607Z","last_seen":"2025-10-05T18:28:30.043607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/4e/spz-1163/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/4e/spz-1163/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 128296\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 20 Sep 2025 05:56:29 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeeafWDT9XXXLiIBX05RjPAqov8bPqdDoLprYi1L1feM7SrdAMGwFZqkuHUBIuWBYE5JDv3kU32olp%2FO7W8ftb93H4NiV83dvP25CQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ebef82569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95558d546e4076e66657292374e13b58","sha1":"31a631db3fa8ff702d4559b51d04b6788244bb09","sha256":"3dc16a001202125c8a343697d598d3455d282a84b5269c1043bf18dfe6847218","sha512":"6b7eb64d775c65ab6254c70bc7787fa9217ba51187c3d115b402c60291ea0a92c09b925ab3a406771396181bdbe664b24366979c3c16917e7b87bf0aece4c7a2","ssdeep":"3072:bJ7RE/eYjzP4j0OAz1V1v6ZjzCA4Pr61MhqhG:3w9jziAz1b8jzlacG","tlshash":"aac313f1051eda8660f593246a6a23fe7486ab2931d706d36548f47221e70be3db33c3","first_seen":"2025-10-05T18:28:30.046242Z","last_seen":"2025-10-05T18:28:30.046242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec3.javxx.com/detailviews/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/DBNK-080?timestamp=1759688880\u0026signature=6750b540","fqdn":"rec3.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"OPTIONS /detailviews/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/DBNK-080?timestamp=1759688880\u0026signature=6750b540 HTTP/1.1\r\nHost: rec3.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cr3x09liFtFVEhqkd2wT6TaMoQAAYxQrOXNmOR0j0wgsHWqGKqZGifnVecDZJZs1kgtEXUAXhPnTlAIynv3M8EPEzvRIHOKqKQdtw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://javxx.com\r\naccess-control-allow-headers: content-type,x-requested-with\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 989ef9eccf8e569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-05-01T15:40:36.472528Z","times_seen":282253,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.7/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.7/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21199\r\ncf-ray: 989ef9e0f8420b45-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"68523613-52cf\"\r\nlast-modified: Wed, 18 Jun 2025 03:44:19 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 65077\r\nexpires: Fri, 25 Sep 2026 18:27:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H%2F2aL0u%2BlHpkHZyDv6EyPJXVdx081CVjAZEutGKZD5%2BXATHTQ4IIdzSg1RxDAiJMwT4pgY3yIN%2FjEatAtZTFKATWlKcSITUs1VlJmvASuoW0wpL5OZ9%2ByP4Zr5eDfee2TrPo39WN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80821,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-05-01T13:58:08.646588Z","times_seen":1328,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":12,"dns":0,"connect":3,"send":0,"wait":17,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/vendor/fontawesome/webfonts/fa-light-300.woff2","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /assets/vendor/fontawesome/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/assets/dist/11/style-VkmuLz2l.css\r\nCookie: session=ll6j8RaNXmNak8Bglx5B1lfsXp7CP69hRA49nNGz; locale=ja\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 429668\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 29 Jul 2025 13:43:12 GMT\r\netag: \"6888cff0-68e64\"\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3240491\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQgSIzCkCjO0sLoIajm065kltiKoXbMN0L58RoHxpuLNNrYzcyRaa%2FJAaRhkp0WYBpyorH27OQuOvEeceqcQnGqyeN6r80w%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e33ed3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 429668, version 772.256","md5":"802a011ca06de684256fb8fa742ac22b","sha1":"ecdfe9360eee317b39f6369ea167498c5f308d0e","sha256":"64dd5243b3ec5568134c9c4ecbf37d4db65cb3d6a833e57b7971b2ec987f0459","sha512":"249b3d66e30f8e41cd6cde045a7269637a07865ddf1184c3e4f88ea5152763b9526f724c83058f8d4241a67c26a9ffc8ab04cd6ebc43dab6a4546e762ef2a97c","ssdeep":"12288:uDKzQLxVtdDgbm1hQHSkKQIt4zsC/KVqUaXb:uDKNbmsH+UzsiKVqUCb","tlshash":"b1942335a4e15b49d1d363e281496121fd37337c9f35b2e0e60a2d56419b5ea8ec3c3e","first_seen":"2023-06-09T20:12:16Z","last_seen":"2026-05-01T16:38:04.216635Z","times_seen":567,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/vendor/fontawesome/webfonts/fa-sharp-light-300.woff2","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /assets/vendor/fontawesome/webfonts/fa-sharp-light-300.woff2 HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/assets/dist/11/style-VkmuLz2l.css\r\nCookie: session=ll6j8RaNXmNak8Bglx5B1lfsXp7CP69hRA49nNGz; locale=ja\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 361596\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 29 Jul 2025 13:43:12 GMT\r\netag: \"6888cff0-5847c\"\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3240491\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMH4joM14XOZbfAfruBZWNFxKgSuCDv5Q9AhCuI4b%2B0pk4DL0vH9gHhGX4r%2BhInceOPb7s9GXaOVoi0fbq234G8eaGZRg%2FI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e33ed4569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 361596, version 772.256","md5":"d2733a7e7162d29435f504eb86e857eb","sha1":"941750cf48f989f55409b779b6029da675c9bef1","sha256":"ebaa29fe2f8748eb79dd696aed6fc2e6ad8b09a0559a510b66b3108822019d8b","sha512":"3733958ebf4513f55fa6944ce62e98fa0ec74f75678c243d85ace5d90f4741a89c6bd796583a67a721f5d2a17d599b48d5b82666fc0b461e92c0b4c1e0f43d19","ssdeep":"6144:JGTfd3GOj4/XiCG4D7dkTPa3cFMb4AGclK283VzW56SkIT8GPg1sH1Jr0VU1W26L:Ej5GOcW4D5kPywMbgc2V7SIGPAvUI26L","tlshash":"c97423d1af5be053a08c5d315d62d27acdd38490c2eee2ee410d3d64dee30f8d5a5a8a","first_seen":"2024-09-19T22:27:52.511993Z","last_seen":"2026-04-26T20:22:06.437055Z","times_seen":56,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/app/domain-checker/get-check","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9e55f1b712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da0ca1be584e96642dfeaba63a3c8508","sha1":"fa0fa94d415762da8966f7bfbbd2c25a052873d5","sha256":"8ad3f8aef1b7e92fa8c55a9c97ff40a662fb8429a437065a94bbabcf1b0cbd91","sha512":"73f13952b9d07dabe9efcb4db3f807f2d38e098f216f54f004868b4e128cab3b98cff086972cbf40505355414cd6e886a43f5f364a8a2c14553ceb8d57210fee","ssdeep":"","tlshash":"76d0125b4008b043d4d096963d3f959c4a0a559914820ca65eca74fdc1e876245b3a16","first_seen":"2025-10-05T18:28:30.05346Z","last_seen":"2025-10-05T18:28:30.05346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surrit.store/assets/dist/player1/script-BYXPy0wp.js","fqdn":"surrit.store","domain":"surrit.store","tld":"store"},"ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:58.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surrit.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 09:09:30 GMT","end":"Sat, 29 Nov 2025 09:50:39 GMT"},"fingerprint":{"sha1":"87:A7:CE:80:0D:37:89:20:DE:30:04:21:5B:20:CF:22:8B:81:D4:49","sha256":"19:C3:62:41:1C:0B:5C:53:05:0F:CD:1C:E3:17:7B:16:D8:89:00:35:45:C5:B9:DF:B6:44:4D:CF:D5:78:74:1F"}}},"request":{"raw":"GET /assets/dist/player1/script-BYXPy0wp.js HTTP/1.1\r\nHost: surrit.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 06:22:35 GMT\r\netag: W/\"68c3bc2b-7495\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nvary: accept-encoding\r\nage: 2030716\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erQ1FlCj4f9mwo0UaORW6aUoJFy%2Bo3isoiDtQXLxoW5CMLoh09DM7B7RpJKMPVr9zJ%2BY4VyXhxGzL7aAuEbSvM2noTRCiYn4NELXNg%3D%3D\"}]}\r\ncf-ray: 989ef9e59f8a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29845,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29845), with no line terminators","md5":"93294d3e84da01254d493caec810e865","sha1":"68ead45e564626053e0ab6aae63ac4b33c08b507","sha256":"181f79bc710ef6242faa1ff21c1300346d2f3132da4d905ed7acc5ee15c055eb","sha512":"9dc767e9caaea150cc4c7bbb28da2cd3260629be8c1cd3f940710757d34d0dc1786968b37d64f417aa2c1584e4e15387020dcd67c4de696878cf07c86a35b03e","ssdeep":"768:j22CwIprXYAoE/3r1VHzS6iHnQqw/+IRS:jSPosmC/+R","tlshash":"efd25254ab0b608b4150e2be125f75c15c2c884ae05caef65db1c79fcc9a0c791ebaf3","first_seen":"2025-09-13T07:46:03.118323Z","last_seen":"2025-10-17T22:59:30.965267Z","times_seen":28,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688220/203374279_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688220/203374279_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20694\r\netag: \"1e3c524cca7ca5a05ce4b9d2f7dceca3\"\r\nlast-modified: Sun, 05 Oct 2025 18:16:46 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 431\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e608ceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e3c524cca7ca5a05ce4b9d2f7dceca3","sha1":"ffa580d3e164199dc097ec6def39dc553db63002","sha256":"1d1d2a51919eb4f6c170e9e0e11e38a9c9c6d954de55c4b084cbd51b98659a2d","sha512":"7020429f988d11572b8508ba259b7a65628acc9ab09510c75e3d981fa6a4ebee3c5452e3d588532371e7d5b9e55aefdd9e5b459ce633461c7c61790377dc0827","ssdeep":"384:iiUkONsA4QN/wC/5LnyxQPbQp97ayj9YUUI6UcI1hH+ZzUzG5:pUkZENok57yyP8p9ZBFU1UcIL+Zw0","tlshash":"4792d03143c790a5f04931e759116ca1f997b38ec0d16a2feaeabccd25bb0852f12f85","first_seen":"2025-10-05T18:28:30.057973Z","last_seen":"2025-10-05T18:28:30.057973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 05 Oct 2025 18:27:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 37ffeae820098ea7e6c3c34caab7eb11\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":66,"dns":0,"connect":20,"send":0,"wait":27,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=1","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=1 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9e4de80712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 05 Oct 2025 18:27:57 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6930f5b78dd8a8dc2f00bd69b0cb3549","sha1":"6f0e11495607f61cccb8131f1adea0e7df18ea14","sha256":"ed55cdda7a7c7dd4100fda154f304ffab54bd8698e64c0858bf6f5778ae21539","sha512":"b66f89b845126ef607cf80364828d65c03c5bf7f2eb81d6d7c6ae1312c9ba7a58df71ccc3a21f6f0cc3c092be6ade22b8b059ef9c8ef5398f70c1a60c695d315","ssdeep":"","tlshash":"593100b746cd1c6a0f4641c4cc8e700cdc663d27a5c4b791e199ce492b7eac9115e6a2","first_seen":"2025-10-05T18:28:29.967265Z","last_seen":"2025-10-05T18:28:29.967265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0g4%2F4yvSdMF9AgvfhkBPnO3m%2BNyrdK%2BIGC1jl7CZMENmn7bpeOm0TNaMjdLAVRpYGUyj1Zzc2pVWsDW%2FQNmvNZVnXGxmSa3FbVsu6fxCtnQvQAYjXw%3D%3D\"}]}\r\nlast-modified: Thu, 02 Oct 2025 12:31:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3004\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 989ef9e51e6db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-05-01T13:30:03.140986Z","times_seen":3742,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:44:58 GMT\r\nexpires: Fri, 02 Oct 2026 12:44:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 279781\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-01T16:30:51.636109Z","times_seen":7150,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.125.168.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://surrit.store\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=64b730ba-e76e-4065-8834-e7b3b9ecb823:3:1; expires=Wed, 03 Oct 2035 18:27:59 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b3de8b28ea080e464a81fabe9252fa36","sha1":"b03eb76f3a8959637536b8aad0b85d235a659772","sha256":"e267442e66da9d02c405a7e86ba3addc54fc1d32442ef579cb07062713f5464a","sha512":"ba87b68ddc51a2e00cf62ebdea14627b63e20ed1defdf18352fdee400203f213d4cfe98f37f53989f1e3fcfe812144de58dcec3162e08182a05985e7e7a40430","ssdeep":"","tlshash":"b3900457c3413d0151471004fc700445157cc7d3051751c413d4f0044f5101014d4105","first_seen":"2025-10-05T18:28:30.061659Z","last_seen":"2025-10-05T18:28:30.061659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":119,"dns":3,"connect":29,"send":0,"wait":29,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/03/ktkz-067/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/03/ktkz-067/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88848\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 04 Oct 2025 08:37:19 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Nsz7JRa%2FXPSd8sUgQmB9GKFlOJy7EvkPqLBzgSANAK9w6nKVWMMLcoAi8IjUv5FYUuujlD6pk%2FFCJEkcf7Mf1nlgqbsmt8FT10MYw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea7f67569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88848,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73dfeeb74e67cb365f993695f3cc80cf","sha1":"efc129e72727a97c9874351161ca2b3c1b6cff94","sha256":"bd4173a313d2eaa493422263d015af13a54e5708c6f8f375b39269966e05897e","sha512":"f37a35121d2076baf44654056b595da9935e846d63b61b48e619e57ae7b61b431063d0be6f210edcbd06feb891f70998e8ad5bb4762714343bd2d18ad3fed381","ssdeep":"1536:KO0PQ6WO0ZtnHjshTWcJeuI66A8v+u1Tj4vpZzYBx:XbRlEx2vLhj4rYD","tlshash":"5f930293a764b0b0050c7bc819fac9a94e953c177d4185b149bfa8c43bde815fd68b2e","first_seen":"2025-10-05T18:28:30.063627Z","last_seen":"2025-10-05T18:28:30.063627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.125.168.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nCookie: uid_id2=64b730ba-e76e-4065-8834-e7b3b9ecb823:3:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://surrit.store\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b3de8b28ea080e464a81fabe9252fa36","sha1":"b03eb76f3a8959637536b8aad0b85d235a659772","sha256":"e267442e66da9d02c405a7e86ba3addc54fc1d32442ef579cb07062713f5464a","sha512":"ba87b68ddc51a2e00cf62ebdea14627b63e20ed1defdf18352fdee400203f213d4cfe98f37f53989f1e3fcfe812144de58dcec3162e08182a05985e7e7a40430","ssdeep":"","tlshash":"b3900457c3413d0151471004fc700445157cc7d3051751c413d4f0044f5101014d4105","first_seen":"2025-10-05T18:28:30.061659Z","last_seen":"2025-10-05T18:28:30.061659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/cc/meko-358/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/cc/meko-358/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 168866\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Thu, 21 Aug 2025 01:07:41 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhscT12plw3c0R8K8v9FbQj6KVrVxFTg1IHKOKvn5b9xXLvuaMg38idUJeqow%2FJB3tpUSOmH7Fw3BeNxuV4UcyxsjwebSCaptlEsyw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ebaf78569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e79113cfca069d3588560b399c7545a2","sha1":"d9ed17c3701f41f132bd53ec7c19e51a82970794","sha256":"a0dd52a23dee6e6edd94fd0c9fcc5e62c00890e2aec9fab45b45b8a7e1a9455d","sha512":"74e370a5418dceba9cffbbce113eacecf66ef914da7347bc4d6a652634fd2d4296935daa9c514f341f15a0e274defa1c8be447a091ff50708ccbb3bb3344c5fb","ssdeep":"3072:YSCpD6GV3eAATRRpLh59/b4NZEgmPBL7c1fY2Vl6mBtjq5EuXhRGhYy:Y76GV3eAAT7pLhP/bcqVpL7Af9l9tfGo","tlshash":"eff312f9f4689a835b3a90bb0509618ce9495e4f6738667d6df14f9c80df82be80f1c4","first_seen":"2025-10-05T18:28:30.065779Z","last_seen":"2025-10-05T18:28:30.065779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec3.javxx.com/items/dbnk-080/items?timestamp=1759688878\u0026signature=3c69fb29","fqdn":"rec3.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"172.67.220.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"OPTIONS /items/dbnk-080/items?timestamp=1759688878\u0026signature=3c69fb29 HTTP/1.1\r\nHost: rec3.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://javxx.com\r\naccess-control-allow-headers: content-type,x-requested-with\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEctW0VpRGVnmL%2FKJUskINNWow3fflUFpWv2cJStkI92SX%2BGMC302c6v%2FKw%2FV2t4xykxB5BKuzDfk7RTdiS3rCmsW%2F7LjV%2F0LmDnmzAj\"}]}\r\ncontent-encoding: br\r\ncf-ray: 989ef9e47c398deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-05-01T15:40:36.472528Z","times_seen":282253,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":23,"dns":3,"connect":3,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:44:58 GMT\r\nexpires: Fri, 02 Oct 2026 12:44:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 279780\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-01T16:30:51.636109Z","times_seen":7150,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=4","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=4 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9eabc37712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 05 Oct 2025 18:27:59 GMT\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6375,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6bf5a8700f01551f4a4383eca0f407b2","sha1":"aa4c665dce4fecbad3b6ae2752d49dfc4c069fc0","sha256":"818e31acb011c52fa876248fdd24a6eefa1210e5e573ff8c2934a4177817d0a7","sha512":"5a60f81dfda147ec1a6ab2ff37e8681215735c1e42365fab7540a8acf71d38c32ef87c5cbfdd5f7683cdcfeb90948e29e14c51b884068a86c6931169dc4962d3","ssdeep":"192:Q9fQEtzLjzLmzLnSmyX/tzHzazL/IRn0tzNzozLnKwLbztzizZzceix:Q9ttzvzSzum8tzHzazLI+tzNzozTKwTB","tlshash":"b2d101f752cd1c6b0f0312c8c9cd751cde672e2bb1c9b395d59d8d8a05b6dc9212caa2","first_seen":"2025-10-05T18:28:30.067577Z","last_seen":"2025-10-05T18:28:30.067577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/b7/gigl-757/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/b7/gigl-757/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 148882\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 23 Aug 2025 02:47:37 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8e6%2Fzq%2Bx2cW%2FE5k%2BIWu2RKATgLwbSX%2BZsBbCC9IkW6lhe36SvZtk3wNzSunLZDehcfzoxDlJePhkn9erq9DdYMlvObPd1W7H6lau%2BQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ec2f85569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148882,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"656be5a13e67b3c953857c44260f2940","sha1":"487d0f7f484f241061aac806c6b425cbd25b4453","sha256":"d13b4011e82d1df211bcfbeb4edf8af3f8d7a58926730df18797effaef148260","sha512":"4ef34817e71f07737a3cce4a2e2eddfd306b901f0049017f551de2e8b1f77fec77823f18d7d6ac0f5a46d6c2b48d87079f7ea698fc04e396d1f675f68b4ff043","ssdeep":"3072:AwmAcgXC41Fr+3p+Bw1VP+0vfaiPAhwkMyEi70fzl:A9Dm1Fq3oJ4aQA64EiQfJ","tlshash":"33e3127d9461af1de5c03992c8a807a3c9c8732d36f5bfbc987764198ac37c8e8044b6","first_seen":"2025-10-05T18:28:30.06938Z","last_seen":"2025-10-05T18:28:30.06938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":68,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","fqdn":"surrit.store","domain":"surrit.store","tld":"store"},"ip":{"addr":"104.21.66.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surrit.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 09:09:30 GMT","end":"Sat, 29 Nov 2025 09:50:39 GMT"},"fingerprint":{"sha1":"87:A7:CE:80:0D:37:89:20:DE:30:04:21:5B:20:CF:22:8B:81:D4:49","sha256":"19:C3:62:41:1C:0B:5C:53:05:0F:CD:1C:E3:17:7B:16:D8:89:00:35:45:C5:B9:DF:B6:44:4D:CF:D5:78:74:1F"}}},"request":{"raw":"GET /e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp HTTP/1.1\r\nHost: surrit.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javxx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zh3r53o818E9ylMPaR1qAqymLLbF0Q9LBuPBwr50gvZCaBVnvwx3Us9GUdcIH%2BAJxinNpvGv9ZkihicmfxzSsU2adLm%2FQxwGtQGwDQ%3D%3D\"}]}\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 989ef9e48c81120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":715,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (715), with no line terminators","md5":"68dee630baebc0c491bed00c3d0ea39c","sha1":"ab0b715008f1c14f3d25264a3ab0ab8c8593ea45","sha256":"7d9e1e5f05eedd8c2e9ed9784c0041eca2119969167525e74d6f04e59fd3f7c9","sha512":"b220eaec362f4ab8f41007095f4096e0abd69f79630f64cc565415d63dceeb69c0a9ee47f2eeb0764ceda64f74a3a19bbb37f33a6316eb67129b200868b77de7","ssdeep":"","tlshash":"3b01cb0b7c55ca66ab10acc4f9e2f1ed849db11ca2a0cee567e5947f71687eccc48840","first_seen":"2025-09-13T07:46:03.121845Z","last_seen":"2025-10-17T22:59:30.820098Z","times_seen":27,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":39,"dns":3,"connect":2,"send":0,"wait":141,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/dist/11/lang-ja-BB-8PxtS.js","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /assets/dist/11/lang-ja-BB-8PxtS.js HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/assets/dist/11/script-BJVrg1r_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=ll6j8RaNXmNak8Bglx5B1lfsXp7CP69hRA49nNGz; locale=ja\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 28 Aug 2025 01:14:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2papkY850qr45lVq6H5XZpFj5BcmVc2HScW%2Be8%2BPAdH62mYbgpMdr0nCvwXYNocRHwKpc0ObbMJuC3XjWhjgypPxAg8LtuM%3D\"}]}\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 704198\r\ncf-cache-status: HIT\r\netag: W/\"68afad8f-569\"\r\ncf-ray: 989ef9e31ecf569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1385,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (952)","md5":"3f691bc2659368b71c0dac796b48f6cd","sha1":"76a579b541953f534d68617d293365f183987558","sha256":"8d2df352b00797d563f51e46a369994c7c5a1416aecf66860d6096a48c5f9bc0","sha512":"23e9a6c7b6f28b8500188383dcd4508a12dbecd6d1541e2051c139d0baa0564e1f4afa280ce414eb630d0cf244170c95d1eebf27be24e50100568a5fa831ce84","ssdeep":"","tlshash":"1121f16c03501d300df906b1504753c6bb2ccc4bda67391a69afd51c3675f8ee18a4f8","first_seen":"2025-09-19T15:57:47.026378Z","last_seen":"2026-03-17T02:48:22.412129Z","times_seen":10,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fv4%2FUniversal%3FthumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Dfa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e%26tag%3Dgirls%2Fchinese","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fv4%2FUniversal%3FthumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Dfa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e%26tag%3Dgirls%2Fchinese HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9e45be18deb-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7436,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"94f331f0ea5fc3e3a878d28c8265a4fb","sha1":"9fb4e0358cbbb5d1e08913fa0f4f1977d50452ad","sha256":"9995e82d5952779403d97a355271ef481a262623ad3846328dba4265f1bb4d6a","sha512":"23ae5b9715368280a23c2212d6f7e44e084242db464dd2a3a4ffccbc6a55ee91f365884e535cfe4c5d04ca05ed6f71920de7a37b5952b2dd5b177a2a09113409","ssdeep":"192:m6DyZj1EHeAkkUONxgRd8a4Hh8nyayqh13/7VlloqJIwi13Y6yQ13/7VlloqJIwJ:sZAhkkZNxja+lg5eH","tlshash":"49e146eb821e68f717c44d4ebebda8c8665d40ab4e8148efdc498438426d37213b7b4d","first_seen":"2025-10-05T18:28:30.07479Z","last_seen":"2025-10-05T18:28:30.07479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":34,"dns":3,"connect":2,"send":0,"wait":41,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/a7bbed3a/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 07:05:45 GMT","end":"Sun, 07 Dec 2025 08:04:06 GMT"},"fingerprint":{"sha1":"D3:8E:06:B9:13:A9:C5:FC:E2:63:F2:55:92:69:BE:88:9B:92:A6:BA","sha256":"A0:04:54:C5:FB:85:14:80:16:40:67:7A:78:18:A9:DC:59:C6:B2:0A:D9:B3:7C:E8:06:A0:0A:1C:EC:EB:DE:6D"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFQczt3hPMACjNsJZ7MqRSeZ1kxOQioVD7qVs9HaKZTbMvFCWdF%2BwukHO%2B2FIlN1wq1JhEW0WIFQc2e%2BCvMI0eTlRs7tUF5yx6Oae0UxP9dC9JEJKQ%3D%3D\"}]}\r\nlast-modified: Thu, 02 Oct 2025 12:31:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3004\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 989ef9e41e35b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-05-01T13:30:03.140986Z","times_seen":3742,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"creative.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688340/186175301_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=0\u0026gridRows=1\u0026gridColumns=1\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688340/186175301_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\netag: \"ee62dc8c0ead0fade944e31c155a69e1\"\r\nlast-modified: Sun, 05 Oct 2025 18:18:23 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 496\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e6bae3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee62dc8c0ead0fade944e31c155a69e1","sha1":"9591c19372ad3e3a6d601e8c96c555c029e264cb","sha256":"e97fe170bd9ecf84a1f6b4a77abb081846aea9dc26e25f9c10e65375682adcea","sha512":"30740b85cf6f65692692143b01b2f23b7f834dcebb1f6b15a852291cd6db1666d0f823c7646e34794c792106f793ebb943d68d6cd66df88af0c70953cf04cf96","ssdeep":"192:+csHxw1DPQO3JfEnsvHenZ7mXUJUUZKMWngpMAtPBId/ns5Ah:iHxcQWVPWb7S6MAtPBId4Ah","tlshash":"ec22cf31ebf0bc95725def1e6283239441e08d43f023e249dda5509ba672cbb4977e06","first_seen":"2025-10-05T18:28:30.030706Z","last_seen":"2025-10-05T18:28:30.030706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/62/dori-066/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/62/dori-066/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 111798\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Fri, 03 Oct 2025 02:38:21 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMpF6EXj94ZlVBrDzbSPLTLrlnZ5s59fzM3rd6fEtRzwf2Ev20Okxc04EkewkHVARmKetCbneYjqRnmhNcpqE6bzFjrOKRrE2ZSRBQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9eaaf69569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a38fe552ffcad6003ab71fd43e989c47","sha1":"ed48ff1954c20b3b3f04881dbf78c6a9ba77a566","sha256":"22298a533c47bde29f488e5b99ab97e2a0d9a509f1c2fb1c9ade1b64b73d61fa","sha512":"c78a4c86f7b1e570aab6d90e5f51b2db742e2ae61069f36f13f126ac40be777a0b6e9ac5c428d09594137f0c136b6f37cf01f19ced212242f3a6af1d02ca7c71","ssdeep":"3072:nLiLd19U9MVGGPjroXbLExnsNTlcW/ktzcTEBSq:LEXq99EPoXb4mPcfTwq","tlshash":"b3b3120d1de4de2d724e7247f79a7baa4bf6784085f1021150dbb96b6f8fb4b2884c80","first_seen":"2025-10-05T18:28:30.077231Z","last_seen":"2025-10-05T18:28:30.077231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":60,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/18/rdvij-001/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/18/rdvij-001/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 164512\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 20 Sep 2025 08:34:38 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2H43%2FKC8eOEvdHPujUfRhbFVubKFLPR73ks6zGQifcyvAbz7vWVPb7rYfQkRvnYA1BayGJBsjj9Tsl50f2blEJTMPr%2FcobwSSP2ug%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ec5f8b569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b04768d8ea8729e495118490146081f0","sha1":"c4ba998d20338bedfcacd0b0f02842fb657154b4","sha256":"0b1ded27497c043206c1e532c27a9d16cbe2dbbf09c12f91691c30db06844d83","sha512":"02c5f65dee63e35fc3df26ee60c8e76a3a1b9ced4dce7e5db4a9d9a1364c734746c20be08a29059087688a13b0b50be8c33443baf05c3498ede43ef0d5c47ad0","ssdeep":"3072:2kWlYydJmmpF7f0Z9CVly4G/S/Mx6SkTeKrwya5iLab/HOhv28JOBC:qdlr7f0DCDNkx6beRya5y1hrJOBC","tlshash":"22f3133acbd84f29d94cd2524a762bc4efd51774b4b8ea2240e2c655f6cdca221637f0","first_seen":"2025-10-05T18:28:30.079421Z","last_seen":"2025-10-05T18:28:30.079421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/74/emth-212/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/74/emth-212/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 120362\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Tue, 09 Sep 2025 12:55:42 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dsS%2BhwXsKPgPSHRjSjlpsOQ%2BpOrFWzyWKBcuVrIUVuUGNYlvxfL%2B9VRAedo9xvM2lc4BbXh7DDcC5DJrl403hc%2B9oOhU%2BVFrbNdig%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ec4f8a569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120362,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8192091e8ca2a23f72955ef483aa383d","sha1":"5281e3dc6b3bdae3c8f85f57e048d85d3919cc78","sha256":"481028054935515cb3a473738d4a7bd6eb1a7ce4a3b176188d083048bf69be7c","sha512":"7dc30fdbc88397913d16dc4374b64551b501f13389dd7bb6e87ffe056d68627053253a4ecf9beb0f461388bf296a7a07e2533ca2c23701bef670537336d3f1e7","ssdeep":"3072:cmP1+pDIypkA7lMZa7vIkEqcxcYTgp58f18VN/kGY:ca1+pDIQkA7lMZagkMxcR8+tkV","tlshash":"d2c312af400d7735ce93b2188de237766aa6d1c6f238f8249413a1513e27b7257829d3","first_seen":"2025-10-05T18:28:30.082099Z","last_seen":"2025-10-05T18:28:30.082099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/ja/v/dbnk-080","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T18:27:57.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /ja/v/dbnk-080 HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gX%2BbGjDji1g3QNhk1QlMBJ7gvqx0UxdAUXoKQ%2FCdev0NkSwhbNZeoxg%2BiLzEkv%2F2TbnIdN8O%2FU3cjd%2BDnrvnxrFYKlbslQBRbg%3D%3D\"}]}\r\ncache-control: public, max-age=30\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 989ef9df9e058deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14531,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9681)","md5":"8190cdb52446c3c8ecd9c0130e523a48","sha1":"bf60d6fec9fd0b0044851c7f93abaf1030c83d8a","sha256":"c28c97f2edc4abe8a480347b3d2aad1a11972716b048d96ba77749732a2eccbb","sha512":"05459337c045f272beb51c1f1ffc357a45091b07a377f307652b961b4327511360037c9c228fc97cce1aac9a2da002b5465e4c5f7303410761c4f0656113722e","ssdeep":"96:NNC7awiWWG0G+PeiZEX1X3MFzoBArn2LQiSiS2YUQyCMC+ChCG8CGCtdCtCSCwCO:UXtty0QizRawN/PO7b6dKGkNz51cEEQ8","tlshash":"456220773148b82b037193c95f31f36de2836166ca769e1762e88b9dbec1e91cc1095e","first_seen":"2025-10-05T18:28:30.085394Z","last_seen":"2025-10-05T18:28:30.085394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":162,"dns":0,"connect":2,"send":0,"wait":153,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/ja/api/video/views","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"POST /ja/api/video/views HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 96\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=ll6j8RaNXmNak8Bglx5B1lfsXp7CP69hRA49nNGz; locale=ja\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=30\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Va2cQnKr8K4LCh7un5BxjEXwYcRqC1pEq7UV%2BIf7Bs1ZDdkbLTad14tPuR1SdvOw6iPlFf7TIvRyiGFcPqWrfKd0TPAYwE%3D\"}]}\r\ncf-ray: 989ef9e3ced9569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d77eda848e002df2d5dd3dcb8be7da11","sha1":"203a6fdab45734e0558fad257bc3c5af5e2e60b0","sha256":"3679fe83ed3cdbc9903a1ad0dff168af43a82ba94eb29f78340f88c54ea86afa","sha512":"44de0d121a4a621bc5970ec8b85c272ebb48c3341611e922409f34b757274b5fd63a1e7545d7ff908ade768a4ed60f7b8809202260b9787b18d817c4175b2da5","ssdeep":"","tlshash":"f17000802e00882028880c0b828300a2ba223a000a0e0080000c00b00a038a0a20ca08","first_seen":"2025-07-27T09:19:42.280655Z","last_seen":"2026-03-28T16:39:34.215226Z","times_seen":34,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:58.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/plyr/3.7.8/plyr.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4503\r\ncf-ray: 989ef9e59e9123eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"641dd583-1197\"\r\nlast-modified: Fri, 24 Mar 2023 16:53:23 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 151661\r\nexpires: Fri, 25 Sep 2026 18:27:58 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d7uKsOj2tH32rDx%2BqOFjDg4lVxr5FNih23S%2BLrm5l%2FVsl0wvDbqWfWAqRVmyW1g6TEzHI%2B%2B2Jc85juDfMqIG0zx9b5w0gqYIdp5zEAA2I9DKLHF13JpHuRoA7NkTOfOKXRRSmGg2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32524), with no line terminators","md5":"27a5932e6ea87c90e820203b47311518","sha1":"9cd7e9b94c01a5cf5ffe0bd27f2d2e2429738e91","sha256":"6bfc1e307a874e08da7f2529dd89cca1e4a213d32cc06afaa1086ed85179d8b1","sha512":"b8fa8339a9b9be35609c0484ef97c280cb5d2dade82b6fb79ae0d4e444ae9522261c0034674c63127b89a4aa304ec5d4598d3d32c62b7b8f338011708763ffcb","ssdeep":"384:fj0+N8LOiGcQ6z+76+v+I+V+aWGKB21lgQ/r/abVDjg/zo:fTN8LOiE64pbVX","tlshash":"8ee2726179792138f83bd16a37b4c5cd333ca102fdd65aa9b194b72089ceaf306b3641","first_seen":"2023-10-23T10:46:17Z","last_seen":"2026-04-30T05:33:01.528967Z","times_seen":994,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/hls.js/1.6.7/hls.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:58.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/hls.js/1.6.7/hls.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 129057\r\ncf-ray: 989ef9e59e9223eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"686c2e8b-1f821\"\r\nlast-modified: Mon, 07 Jul 2025 20:31:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 53601\r\nexpires: Fri, 25 Sep 2026 18:27:58 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2yqDlX%2Fymy%2BXoZZFhVQgKlH9GeH6zgjqNUnFKe5lUQOz8dKitCYw9z%2FPmRqhs%2ByS3aMHcLiXvkGf6dZS00Gi7KRdavWl5EKmHBIgbl3sd19hMSn456K0Xi3ZatIxM3YarlS7v3Af\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525787,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c6b4b0566933bbace745d354bbf66a45","sha1":"37421e0fdc0f834e9b76c83c86b8f8dc5a25f9f5","sha256":"98f063553824f201d7a46e124e1dabdeefbc517e35e800ba0c8cbeedd432ab67","sha512":"b972867cd30918e974a0603937c16d106aca52ae7b52ffecfb1096b093dd21778cc38eac17d777e53a709b9a3c451b5785d9ac2d3ead1b9ad5532dc718389dfc","ssdeep":"6144:tN52SSJ22f+rppL0uMRzXrpbQLTfUUD+6D5U7qKxnU3F4BsibLioRGJ8z0xEnFak:te22eppSRzbpbTiwqKxUHF84xfg","tlshash":"cbb43aed3695a01683c2b169903f5507633a7d0a284cc12cfa2be9db2d7994db13bf74","first_seen":"2025-07-08T11:22:48.878147Z","last_seen":"2026-05-01T09:58:15.740701Z","times_seen":29796,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/app/domain-checker/get-check","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncf-ray: 989ef9e60fa4712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/ff/230orev-008/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/ff/230orev-008/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74176\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: HIT\r\nlast-modified: Sun, 28 Sep 2025 08:56:56 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc9iq1Z4m%2F0wqQ54%2F5Is9FNisBk2V1N52v7a2I75XKFgsiPjKti3gjs2EwrIbPreGvzRGwhg1usCD%2BWZQxN2c1%2FCbWkOHEo6FO8Urg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea0f5e569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e7be76c6cd42bd5c735a39a158fef8d","sha1":"d16326712204f1b920fd6fc528d12ee91a1a44bf","sha256":"9e5f3d340511f9d043222cfadbad70f7b75d4732b9183996f8ffa83e1b4c5a73","sha512":"84971d27e2adf887322c33e1bf892a7a9afee6ec786cfd057bbc0bb6610488b042afc758d8c2ea3f0f2b42fa300cc26dcd19beed3efbcb0a84a52913c32e45d8","ssdeep":"1536:h7SQoqbGweo/OHvN7DvbQFKkpNpKN2ozGdNByXwoXD7TQjMjj+:h7SNqSZv9DvbQFRzIN29LBoT7TQCj+","tlshash":"cf7302edf5a45d1b8fc13142fc4bb75a42f85b524c99c53bf710a7668e88b224ed012a","first_seen":"2025-10-05T18:28:30.093575Z","last_seen":"2025-10-05T18:28:30.093575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=64b730ba-e76e-4065-8834-e7b3b9ecb823\u0026eb=934ec1f47241fdf66f20ee1d49766ab9\u0026te=e42d95d968f5d9bab10a3409849977fb\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=1\u0026pk=468b4484271c0fa952375ef7df899c62\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:28:00.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=64b730ba-e76e-4065-8834-e7b3b9ecb823\u0026eb=934ec1f47241fdf66f20ee1d49766ab9\u0026te=e42d95d968f5d9bab10a3409849977fb\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=1\u0026pk=468b4484271c0fa952375ef7df899c62\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 05 Oct 2025 18:28:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7ff1ce389b070e8d6d9fc2933dadeb2a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":313,"dns":37,"connect":91,"send":0,"wait":96,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/32/dbnk-080/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/32/dbnk-080/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 127460\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Sat, 04 Oct 2025 07:55:00 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivY2MgY3p1r4Q2T4I5SoAkeq5pwhm5wV15go%2F4BYDNsKZMa4izoU06IuY2ktZFUJIESjRWsqLjcCEpbWWPuIpDbmnC9wmyOYqSywMw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e32ed0569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d1d73e4a6a5e19cab30e22652892daf","sha1":"b55166faaa0b28a9d538b2b2b7650caff7567114","sha256":"cae0f4322d5a92bc231b85d47c9021bd34926b315aecb4700b9ab31e87758041","sha512":"79ca906fc4750b7f38506366e5cedec187a49b4ffbf3d8bf681fad36d52d7bb4e024e5c1a7b9dd6d637ab7622d7cd4ca1b8a59b03367262b5939eca3adc40981","ssdeep":"3072:McjAI7gsdysyQvfKZuG1CsYia6uT3JlUNXSRKHEnIp:MNMNC8G1C/X6W362Ip","tlshash":"0ac3122acdd1dd0c8541ed210b31586328a45db2f699336db6457e93be08cea7b8c9f8","first_seen":"2025-10-05T18:28:29.99876Z","last_seen":"2025-10-05T18:28:29.99876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":74,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=4","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:58.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 07:06:38 GMT","end":"Sat, 13 Dec 2025 07:34:13 GMT"},"fingerprint":{"sha1":"12:12:3E:3B:76:DC:0A:A3:56:0D:12:15:1A:DF:16:AD:CE:46:E4:29","sha256":"8C:AD:0B:C8:82:8B:CA:7F:86:A4:DE:A6:3F:B0:9B:68:01:B9:65:30:8D:0F:14:23:94:0E:89:D0:E1:53:09:2F"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls%2Fchinese\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=4 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: application/json\r\ncf-ray: 989ef9e57f2f712d-OSL\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 05 Oct 2025 18:27:59 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6375,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6bf5a8700f01551f4a4383eca0f407b2","sha1":"aa4c665dce4fecbad3b6ae2752d49dfc4c069fc0","sha256":"818e31acb011c52fa876248fdd24a6eefa1210e5e573ff8c2934a4177817d0a7","sha512":"5a60f81dfda147ec1a6ab2ff37e8681215735c1e42365fab7540a8acf71d38c32ef87c5cbfdd5f7683cdcfeb90948e29e14c51b884068a86c6931169dc4962d3","ssdeep":"192:Q9fQEtzLjzLmzLnSmyX/tzHzazL/IRn0tzNzozLnKwLbztzizZzceix:Q9ttzvzSzum8tzHzazLI+tzNzozTKwTB","tlshash":"b2d101f752cd1c6b0f0312c8c9cd751cde672e2bb1c9b395d59d8d8a05b6dc9212caa2","first_seen":"2025-10-05T18:28:30.067577Z","last_seen":"2025-10-05T18:28:30.067577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"go.rmhfrtnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faf8b60b.sparkvibe33.store/blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/preview.vtt","fqdn":"faf8b60b.sparkvibe33.store","domain":"sparkvibe33.store","tld":"store"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surrit.store/e/2L9449Z2?src=javxx\u0026poster=https%3A%2F%2Ficdn.javxx.com%2Fimg2%2F32%2Fdbnk-080%2Fcover.webp","date":"2025-10-05T18:27:59.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sparkvibe33.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 02:18:24 GMT","end":"Sun, 07 Dec 2025 03:16:37 GMT"},"fingerprint":{"sha1":"05:13:56:D5:99:58:B0:32:D9:F2:F0:FD:21:29:93:5E:35:16:6E:B3","sha256":"20:06:0B:04:8E:4D:F1:B2:CA:F2:34:1C:50:C0:40:F8:7C:F4:1D:52:6B:CC:AD:3A:F1:8C:2B:C2:AB:DC:71:12"}}},"request":{"raw":"GET /blah3/XEn0ezUAjwPK3UvwUqJFKNim1Uxq2csKWenI_ASajU4FzoE/preview.vtt HTTP/1.1\r\nHost: faf8b60b.sparkvibe33.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surrit.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surrit.store/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: text/vtt\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 04 Oct 2025 09:41:29 GMT\r\netag: \"68e0ebc9-3cd3\"\r\nserver: cloudflare\r\ncache-control: public, max-age=864000, public, max-age=16070400\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crrVUKevFnIVq0d7phTikwI8MZ2E09%2FnTpEvRw2FEmjJZ9A2g256yR7ei4wTxcW9dT8SX0SPiH1vI5IGTV80Kzj5xNCRLtgA%2FGS2LULt3VBRRZqvKzeritfv\"}]}\r\ncf-ray: 989ef9e7b82a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"fe9606162f358668e9aaa856e33dce63","sha1":"fb36336480e1c47182601c45ef3ab9b324f20946","sha256":"3db4af3c778e9741dce4affd155d720d9866913f4f82c5de1efac2ec863da27d","sha512":"f1e435222df9070b45ab1904ec3a6f28023d6725642b56dd80ea5ee0039cac5076e7ed2763af22bc0cbcb41967ab88d32d3fd293a4ef216881046bb4d1fe2e7c","ssdeep":"96:LXV6OBdx8ta33QStKP7E66lRcPerAI+R5wO5XZnYm3Mmfqva4:rV6OkaEP7QlRcPQO5XZnR3Maca4","tlshash":"b362ace9c2a98813eee13b84e7f07d56841d729f6bc69791f0f4359f7ca8588a02111f","first_seen":"2025-07-23T16:47:28.647271Z","last_seen":"2025-10-13T21:26:57.993592Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/5a/727pchn-013/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/5a/727pchn-013/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24646\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Tue, 30 Sep 2025 17:07:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGudglMZENpbQb3Fx7XUSCN2SChLqhSBmMcltGztK7cVnZEWUHxqWDlZlvMjAAK2nGmP5xUB1xUjF1dDGHzSix9TmMkh1DgoW0fZoA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9e9df59569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07f93f6988ffaedf80a545f8b950c8a8","sha1":"72ae3a2a2cfe21dbd7ffc0ebf923d964814672bc","sha256":"2f5653abf9f65f404d521fa74eb8bbc9eb5884b202ec0616a30309f33880c9aa","sha512":"af568bd6d386223e2cb2279b79a37737d51d1c41f54f2c5c5dc92eef72e43390f9ff94b808118cf0dd3d273718a79f3f9992ab5ffa27b174bff1e351af7e71ec","ssdeep":"768:+XreNl27sIzJtbznLYHyAcLFqebIhcpOI21eJwkV/yU:+XC+s4DIQhCmpOIRzyU","tlshash":"e1b2e1a73f8879eb7426dd7193cfa76038640bb8673a1b3497ac163c9b354c18660a5c","first_seen":"2025-10-05T18:28:30.099174Z","last_seen":"2025-10-05T18:28:30.099174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/99/383reiw-122/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/99/383reiw-122/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23840\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Fri, 03 Oct 2025 14:31:04 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nIL8O2Wk8Is9d6Q12Jd7mP7XzNmaiwgdh6mxdC60C5TXWUZ5xCKeEXF7E6P6IZm0HCry%2FdBKMyIEI%2FtbtfUREfyCcnZfLvF3xSovg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9ea2f5f569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89d54a6dd272f2adeea47935a6127631","sha1":"b1d489b004f60b4e7474e68a55ee50932a17949b","sha256":"61e0f3a08a6158e3818be5ebe07d0aded540e79cbcd14f079caaee6fe2a93fd9","sha512":"04a6d6a82037bd3cb0157fc705a31846967be913b4c323dc06bb3298afc5c1ff7d444dcfceff65e087c2d80976016a5d061961c80a3d57fd64107c2e90af69e4","ssdeep":"384:oJuOdG+0JJrwJWGtwe+Mc6Gmd5iHGMN3ulWa+5PhPbnvLGeJKGX9L9HFMJp:oi+CwsGtwu9Fd5iHGMV8+phDvLG/qHFc","tlshash":"22b2d00a9a22564ddecc622584bf5170293c775d2f0cbee30ac05b70c5a9bf83ef6506","first_seen":"2025-10-05T18:28:30.10163Z","last_seen":"2025-10-05T18:28:30.10163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1759688340/186175301_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/Universal?thumbsMargin=20\u0026gridRows=1\u0026gridColumns=4\u0026responsive=0\u0026hideButton=1\u0026hideTitle=1\u0026userId=fa9f31cca2991e278350e668ba0ea491a0b2061f96184b421e5dfd5220d4b65e\u0026tag=girls/chinese","date":"2025-10-05T18:27:59.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1759688340/186175301_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\netag: \"ee62dc8c0ead0fade944e31c155a69e1\"\r\nlast-modified: Sun, 05 Oct 2025 18:18:23 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 496\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 989ef9e608c7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee62dc8c0ead0fade944e31c155a69e1","sha1":"9591c19372ad3e3a6d601e8c96c555c029e264cb","sha256":"e97fe170bd9ecf84a1f6b4a77abb081846aea9dc26e25f9c10e65375682adcea","sha512":"30740b85cf6f65692692143b01b2f23b7f834dcebb1f6b15a852291cd6db1666d0f823c7646e34794c792106f793ebb943d68d6cd66df88af0c70953cf04cf96","ssdeep":"192:+csHxw1DPQO3JfEnsvHenZ7mXUJUUZKMWngpMAtPBId/ns5Ah:iHxcQWVPWb7S6MAtPBId4Ah","tlshash":"ec22cf31ebf0bc95725def1e6283239441e08d43f023e249dda5509ba672cbb4977e06","first_seen":"2025-10-05T18:28:30.030706Z","last_seen":"2025-10-05T18:28:30.030706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/9d/fstc-003/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/9d/fstc-003/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98110\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Thu, 28 Aug 2025 18:37:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FiB4jN7QmA527cRoNIqqhHpXNzcdJqOJr2V5l%2FfBKwT8gkPs3CiNDOaAYNsitsz9dbOY4XKos8IScZxRejVIYFEgd%2B%2BAMqDOaR%2BAA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9eadf6b569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"217121faff20692f1da8f612f836d9a7","sha1":"a7b16d9320021ebca761935879459c8312229f30","sha256":"ed2085f39f196365ba901e57b314cf3895df2b658fd21c19f76e1b8e6dbe51bd","sha512":"270c30dbbe840c4f8c0ac1a5a1bd0926a544f036c5720db37bb05720d223f8b248277399ba1eb952b67fbbd9a9c6343b09a93b7dd4dbee457093b6b3e2bbf26e","ssdeep":"1536:XXDbwJf1w7kipc/wB1OB4oU+ZjMzZ+lYsxobqGI9XEx7j/+RRCv55ksQplgHZGSJ:XX/4die/wrOB4oU+m+Y2obDI1EZ/SC+I","tlshash":"18a312426f6324f0c63268710eb5ddf5b554cd626c99f0ba36727bfa8a8a53ca1f110c","first_seen":"2025-10-05T18:28:30.104094Z","last_seen":"2025-10-05T18:28:30.104094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn.javxx.com/img2/6d/ss-146/cover.webp","fqdn":"icdn.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:59.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /img2/6d/ss-146/cover.webp HTTP/1.1\r\nHost: icdn.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_16VEEYG9GR=GS2.1.s1759688879$o1$g0$t1759688879$j60$l0$h0; _ga=GA1.1.1664138401.1759688879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 123882\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nlast-modified: Wed, 01 Oct 2025 16:04:50 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23X2RuvZJUyL%2FVn65WRzl27c4bVR48QHAMCIFSngU89C1xwXEOYQMmRrmGVOfW8uJbOz0QHL%2BehWB37miuTecnvpz34QH2lbhsh8ig%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 989ef9eaef6e569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123882,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55a98f2f29d978e6fee1116dcb81f769","sha1":"2232811add31b0a20524954f56b0826a217f3756","sha256":"b5c86407d0a3ad7f62aeed8b0c32048c8431844ef34554f08623da8d85acecd9","sha512":"4b31d6fb79ce4bfd59e3137958b0c27c7ccc2f0dcd1b42904735cb5b7d31821d7bd892e0c84ccdfcff7dcfa22ba12b680f06eb0adce10ee725e9a3cfad494717","ssdeep":"3072:JvfUR9SpZdcBZM3Z+S2TB3jIWxydSMDVniYk1t6JTTqFQ:JvG9SPGsZ+z3jTAMWnm1t6yQ","tlshash":"3fc312ca8c353595ae696d28b92c82c28c05c8e71496638fa34e45c37b3edd1f637743","first_seen":"2025-10-05T18:28:30.107337Z","last_seen":"2025-10-05T18:28:30.107337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec3.javxx.com/detailviews/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/DBNK-080?timestamp=1759688880\u0026signature=6750b540","fqdn":"rec3.javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:28:00.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"POST /detailviews/917540ab-b84c-4dc6-9398-1b0b1d52fb5c/DBNK-080?timestamp=1759688880\u0026signature=6750b540 HTTP/1.1\r\nHost: rec3.javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 2\r\nOrigin: https://javxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:28:00 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeDJMxQHBQsG5Id%2Bfp4jCpyE4x%2FVJop6iTPqRRhGk894qOLBk8u4zerUIUPEiV%2BhAh8wikattMV%2F79DykdRePK1Ir9DXp2TAuAutIQ%3D%3D\"}]}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 989ef9edaf98569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"application/json","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-05-01T15:24:18.266911Z","times_seen":108496,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/assets/dist/11/script-BJVrg1r_.js","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /assets/dist/11/script-BJVrg1r_.js HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Sep 2025 11:54:49 GMT\r\netag: W/\"68bacf89-34487\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nvary: accept-encoding\r\nage: 953174\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FNQ8oFz8LbcLT3Yevxlf2%2BwjxoiYzWWmQpTjK2D7A9r93sUr75lnSQ2k2xnKw4jGbkSwXir7s%2Bx41Nuov%2BHHjGXCgigH0Mapw%3D%3D\"}]}\r\ncf-ray: 989ef9e0e9c38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1514accf062626a9ba86bf5b7052d63","sha1":"2d3695e346964f7e7e1955b43f1d0158563b880b","sha256":"927af369760ce1f2acdaeb9e2f50f48ed0797d4d58bf7eacb8f4e7e9edbcc421","sha512":"bc8df0160d9f841d1ab0b36a972ba0838bca88a8b0737338093485141d1d28832a997e9bdeecd9c9f6a16c7a71e405282c6ae92d892d2b31de2c9112c7e20135","ssdeep":"6144:3lezU9Bi6TqgKRyE4rScy6MV6ftCGI4F0+:3lezU9BDTBKRyxmcy6Lt24F0+","tlshash":"05243b5d694ab0e81712a0b3306b606bed5d8d459c8ce8f4fddaf66c7c34149f07b9a0","first_seen":"2025-09-19T15:57:47.05519Z","last_seen":"2025-10-17T22:59:30.886987Z","times_seen":17,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javxx.com/ja/api/user/info","fqdn":"javxx.com","domain":"javxx.com","tld":"com"},"ip":{"addr":"104.21.94.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javxx.com/ja/v/dbnk-080","date":"2025-10-05T18:27:58.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:22:33 GMT","end":"Tue, 16 Dec 2025 05:21:10 GMT"},"fingerprint":{"sha1":"EA:99:EC:AB:39:B0:92:20:7B:74:04:58:97:A8:08:F0:0D:99:A8:90","sha256":"EC:17:BA:8E:8A:4B:A8:80:AA:0D:A5:CB:17:F2:16:69:7F:37:25:65:E7:8F:D9:CB:C8:DC:A4:A0:9E:CE:62:5F"}}},"request":{"raw":"GET /ja/api/user/info HTTP/1.1\r\nHost: javxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javxx.com/ja/v/dbnk-080\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Oct 2025 18:27:58 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDsf4GJlLpbIHi8jBfXHkPjAt8hDw6b3U%2B8GLZihV99hZ5dy9d%2FVT18N6Libkpta5QSPdJDkvIekqor9%2FtJIjISf%2FPTfqFc%3D\"}]}\r\nset-cookie: session=ll6j8RaNXmNak8Bglx5B1lfsXp7CP69hRA49nNGz; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Sun, 05 Oct 2025 20:27:58 GMT\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 989ef9e1dec5569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"23943817294edfda84589432fb540a33","sha1":"b8079401dc502e72b1a6b09f7c93c896e71f3b7c","sha256":"466fa48ea2e4ab643a330f4cfc72899e626b9eadcb0dbad19a533068ff2b3453","sha512":"2a4612d95e38ca37248c3a33efa1e2b80dba4c4d21df3f62533142162f5ef5ab24a83ff90dfb392dc73e1e5af9955fcc9cdc812afe9dd4f9675af6be87ed1ee6","ssdeep":"","tlshash":"a1a002645d11596469441e415d8338531e5db52b091d0d90401c0f6406e14b4771d916","first_seen":"2025-09-19T15:57:47.167136Z","last_seen":"2026-04-23T18:33:00.257795Z","times_seen":36,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}