{"report_id":"f0db0997-68ff-4e1d-b350-d6b3d56918a9","version":6,"status":"done","tags":[],"date":"2026-05-28T07:38:49Z","url":{"schema":"http","addr":"ladydosug.live","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ladydosug.live/","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"title":"LadyDosug — Девушки и эскорт, индивидуалки Южно-Сахалинск","dom":{"size":22607,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (526)","md5":"e0064c27db25fdc2c9f97f62101432f1","sha1":"4f4652a8a6ce9bcc5fefa89a8e52e5874744d42b","sha256":"79122126dba747f0e7c69075cb6b2563b5c7ef4e0a8c1f202f21299acea92c2e","sha512":"9b48f59d3535664e0fa7327dcf2505e560147cd3966d1a460d37d96ba1d25f3e3ec9c4c6dd312847ff6164eeaf9f73778dbcef47ee78b4f353e6a8b3bb1bf40b","ssdeep":"384:2qp2t3epaP8vNxSAy1MtJBOojf5uRTNnHvLpxQoxLZjyPu9ZbZjj6Sl7Yf2mSBeF:APuNRoMtJVBiTNHvlxddOP0NpmSw2moI","tlshash":"76a2416160e568670252e0a6ea596f0a7cd140bfea5a1a0172bc1ebf7ff3c14c52734a","dom_hash":"domhash1a17cbf530443ca3decbec2d6d0136b0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ladydosug.live","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T07:38:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ladydosug.live","ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-28T07:38:50.289411Z","last_seen":"2026-05-28T07:38:50.289411Z","alert_count":0,"request_count":10,"received_data":294371,"sent_data":4894,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-24T22:36:44.337416Z","alert_count":0,"request_count":2,"received_data":261413,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ladydosug.live/assets/app.js?v=19","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"07b4bdfdb5118bd70f4811375a7c2554","sha1":"4b0f6f6d0d772fc4d443dc65a028e9bfc31324f8","sha256":"8542579312c468a96d38709b1585d0b20b7dcc5d265722e09efd9e4efa83d30e","sha512":"c1b7930d100fd8754b3ae148df244208622e1ed514fcdba4e628e2f98f6b27f3fc9cc2c9195f186d68f40c5d9550ae0a68affbe90c0c3906f77184925e8d541c","ssdeep":"384:xaihzulh5nE/q1Z7uzxgfe3JtgzRHBUz5E4c0EueOcwphJi0YvZgcVwc99:0lh5nEy1ZPW/uUI0l3pNYva1c99","tlshash":"c003c75d76bf2036003761ba9bcfa1596235a107344ac9943eac4a883fc197497f3fda","size":38018,"data":"","first_seen":"2026-05-28T07:38:54.80307Z","last_seen":"2026-05-28T07:40:15.928405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ladydosug.live/assets/app.js?v=19","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /assets/app.js?v=19 HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 May 2026 03:40:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a17b936-9482\"\r\nexpires: Thu, 28 May 2026 19:38:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"07b4bdfdb5118bd70f4811375a7c2554","sha1":"4b0f6f6d0d772fc4d443dc65a028e9bfc31324f8","sha256":"8542579312c468a96d38709b1585d0b20b7dcc5d265722e09efd9e4efa83d30e","sha512":"c1b7930d100fd8754b3ae148df244208622e1ed514fcdba4e628e2f98f6b27f3fc9cc2c9195f186d68f40c5d9550ae0a68affbe90c0c3906f77184925e8d541c","ssdeep":"384:xaihzulh5nE/q1Z7uzxgfe3JtgzRHBUz5E4c0EueOcwphJi0YvZgcVwc99:0lh5nEy1ZPW/uUI0l3pNYva1c99","tlshash":"c003c75d76bf2036003761ba9bcfa1596235a107344ac9943eac4a883fc197497f3fda","first_seen":"2026-05-28T07:38:54.80307Z","last_seen":"2026-05-28T07:40:15.928405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ladydosug.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156400\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-262f0\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1835613\r\nexpires: Tue, 18 May 2027 07:38:28 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVnXL6JL%2BZab09%2Bq0L633JlFnNy3b7W0AydPZymHIjzICuYLSh7ZDxpA5W96QfpRGzibd%2BMDPB7XByz0DZqHFjlmA32fgO3oP4OzIP9v1XZ9vQUtGcjGgTFXlTIgw9rocf0u6rWf\"}]}\r\ncf-ray: a02b9996fdaec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-06-07T08:02:21.037426Z","times_seen":12069,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/assets/style.css?v=21","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /assets/style.css?v=21 HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 04:12:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a17c0b5-c6cd\"\r\nexpires: Thu, 28 May 2026 19:38:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50893,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0575c8c086a4e873b8426b10772166c0","sha1":"4970dab4a94a20c01eb40dc5ae21f886a96b2824","sha256":"38df78b85113b3cc4b6b3ee0c525df838605e670d00bec09ec635ebbbc17c061","sha512":"cedb77746a83b5e7169a426118a28db58c36e9b0df93a5cb14d20b6c8fbf0e7aab668ab1322e6e1c09b94bb03b3f1d9add13b9ef5f38a4168daf92c760b29ee8","ssdeep":"384:ASHIxnNGkrKFEAn4MAm3lyxqulkiiVLSZlNZ12LABsAisrj3mlFIAjI72Klell1g:6nrKVdVzxVLSZlHQcxiOcFnb++Xuj","tlshash":"f933a82767344124f06baab87e9ae7dbb32d6103d10496bcade4501cc6cd2f856b2f49","first_seen":"2026-05-28T07:38:54.810648Z","last_seen":"2026-05-28T07:40:15.933527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/uploads/7_782e40cdfddc.jpg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /uploads/7_782e40cdfddc.jpg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 27 May 2026 02:24:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1655c6-4dca\"\r\nexpires: Sat, 27 Jun 2026 07:38:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19914,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 88\", baseline, precision 8, 600x800, components 3","md5":"c490dd954cd611ad2466ce18f78f936e","sha1":"89d6701a7b706b013fe8d28c988740d2dc0675f7","sha256":"2957eff487f9fddb97ec6f5943bda28625acfa3eaeeca28858e43bb1385e0acb","sha512":"a2787536300066ac15b17b9b4f35e594a10c002d7b4f66d59db92d1a42b7754c8563737b9532a6863053a2dff93ecbf4856216a84b44dcde369c08ff333ac017","ssdeep":"384:I1mx5vgjjy4sT+DUQ5XGGb6FeN7G0O8IYHFXFLW1zp+iHSsxmLLY:InjjX4+DU07MvMXFLcp+kSsxmLLY","tlshash":"8092d8838d55c2b3ba674250b857c5882f325b2aecda3df4b157dfd2b4906c10a9e4d8","first_seen":"2026-05-28T07:38:54.813809Z","last_seen":"2026-05-28T07:40:15.934688Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/assets/favicon.svg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 May 2026 03:50:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a17bb9c-4a0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a86c248e92004dd977b932f9faf6a8a","sha1":"1755a9ef8d0aee569430c6e2d84ad8fbc3e360df","sha256":"e1df6ccfb0ecc568ddc4aa71038d22660dcc36ca20a04e7423eef385571ffb14","sha512":"912fb6812f95b36544d969eb5bc497beb736fce933a4e51217b0235ee35e30eb956010719d977fe9cb746cbafdd6115fe2b06df84a41a3e3e6634d22b6caedd2","ssdeep":"","tlshash":"f6218c3ad6fd47b2a177e358c7508860252a9ac7015de100f66ecf9f3f140de8d8a7a6","first_seen":"2026-05-28T07:38:54.815834Z","last_seen":"2026-05-28T07:40:15.915255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/assets/favicon.svg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 May 2026 03:50:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a17bb9c-4a0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a86c248e92004dd977b932f9faf6a8a","sha1":"1755a9ef8d0aee569430c6e2d84ad8fbc3e360df","sha256":"e1df6ccfb0ecc568ddc4aa71038d22660dcc36ca20a04e7423eef385571ffb14","sha512":"912fb6812f95b36544d969eb5bc497beb736fce933a4e51217b0235ee35e30eb956010719d977fe9cb746cbafdd6115fe2b06df84a41a3e3e6634d22b6caedd2","ssdeep":"","tlshash":"f6218c3ad6fd47b2a177e358c7508860252a9ac7015de100f66ecf9f3f140de8d8a7a6","first_seen":"2026-05-28T07:38:54.815834Z","last_seen":"2026-05-28T07:40:15.915255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T07:38:27.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=h4o1bouel81ot03hoed68nolji; expires=Sat, 27 Jun 2026 07:38:27 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (526), with CRLF, LF line terminators","md5":"e45cb6b260ef28a1b781b3fadfea59a4","sha1":"6c74a11244877b7fec0ceeaca387367eec7598c2","sha256":"2ff5a89cb1d484e4032901da857b10a2591bd11fe318a36c71f72a8878f91b3c","sha512":"d81f80023ca5e11b2a084a76caa0a1e4182d63ee348087533858e65e96da44384946c07ff8d72f8b20c2f81a2782577ba1d87cea8fb971a487e5fe6a970ace30","ssdeep":"384:wqp2f3epaUovNxSAy1MtJBO8SK59RUNYov+2xRoxLmjyPN9ZbZkj6Sl7Yh2mSbe9:6USNRoMtJ2G7UNxvzxAKOPLN2mSC2mOu","tlshash":"b2a252a160e568670252f0d6ea596f097cd150bfea5a1a0172bc1ebf7ff3c18c52730a","first_seen":"2026-05-28T07:38:54.818205Z","last_seen":"2026-05-28T07:38:54.818205Z","times_seen":1,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":193,"dns":54,"connect":67,"send":0,"wait":162,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ladydosug.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"660cc074-49fa\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1328918\r\nexpires: Tue, 18 May 2027 07:38:28 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbog3%2FmyfzbCw0%2FiZAmjCd4TWEivyE8wjORAAqoBIV4xXe%2BZmi10cpN%2Bbhd8gZ3h4M1mmXkq7KhFnS%2FX4MPDFmMuUFe5tjzVLgi2obJT48Ys%2FtAYC6iKhrHVR6cG%2FACCTVX60EXX\"}]}\r\ncf-ray: a02b99964a9ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103009,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-06-07T09:58:41.794539Z","times_seen":10803,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":49,"dns":42,"connect":1,"send":0,"wait":9,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/uploads/6_5a1d619acd8c.jpg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /uploads/6_5a1d619acd8c.jpg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 27 May 2026 02:24:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1655c6-54bb\"\r\nexpires: Sat, 27 Jun 2026 07:38:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21691,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 88\", baseline, precision 8, 600x800, components 3","md5":"64fde22e3d5e8ca7333ff85c34bd8f65","sha1":"56e480de0213e3941c1c5538e2ae86869fa235c4","sha256":"0a06d9cb2c23de3e146405ed64cc173d20429531ea2e63ba2af3d99d607a550c","sha512":"d9a4762b0e349ef5f79821eec811298f83618b4dbde2b3a9cbc9c80fd18b7895ff7b638d60181d47f2ddde9601bffec157d21ee23f21d067695c4a725b03e8eb","ssdeep":"384:IGjjjjO/ClYwjdc999TPwZYbQae2x4jMvdBZne0s6ZpHec7v5bE7BChMT80Z6Z1p:IGjjjjOUjGGE1e2x4jaTeRALvq7BPT8D","tlshash":"74a24b039c6e1497bc239148c339d54b2c93bf6b76481c9a95ab6fe07d246c429e8f83","first_seen":"2026-05-28T07:38:54.821773Z","last_seen":"2026-05-28T07:40:15.92081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/uploads/8_3712aed368bf.jpg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /uploads/8_3712aed368bf.jpg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 27 May 2026 02:24:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1655c6-5214\"\r\nexpires: Sat, 27 Jun 2026 07:38:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 88\", baseline, precision 8, 600x800, components 3","md5":"84782bbe4eb71718f0741056888a0abe","sha1":"bac369f66456d1fdd6ba5c60229ff237620734e7","sha256":"9af5dd1cd22ceff4587af379f91fb9baa9bdaf6a025f60364b433c800ee58024","sha512":"3c4c4ab973f3c8f3eeb05bf0e4cfc9ccf7892b11aedf933c417e656a323dfc5ba669fbf914373fe95d0bdd3891c8364b1a133244cfa9feb284df30749e4d9898","ssdeep":"384:IGrsWjjjj95ZG+W0nflrwkSkO3Ojfd7rQWkOJx1MSa8tLLWR2:IUjjjjtGv48CfZrQWkYKSaGLLWQ","tlshash":"80922983cc60d273be5b5281b012c1182e559bebf9d52dd1b21bcfc2b9a04e5229ecdc","first_seen":"2026-05-28T07:38:54.823126Z","last_seen":"2026-05-28T07:40:15.93561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/uploads/4_f5c7a57f7dc84bf1.jpg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /uploads/4_f5c7a57f7dc84bf1.jpg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 May 2026 03:47:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a17bacd-16f29\"\r\nexpires: Sat, 27 Jun 2026 07:38:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93993,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 88\", baseline, precision 8, 882x1280, components 3","md5":"b3c5009b4bc78b807c20bce99d39014e","sha1":"4408a3aefbdfefacc62c680505fc2a314a8cf839","sha256":"b316ebf6ccf1c9b03c14a215651412d3d1986a8a473d09930780d5d97cefeffe","sha512":"84e29135ea1fa4d4e33e17f2f8e53c1709814d4128bca0f4a1b0af681e6c2fbf392288644de53ffb5f345ab4cbe4c33488fde8a3e1b8ed3801b29f351e58ca1b","ssdeep":"1536:DyICekihMBWFFzv0XlN/E+TOjaMWK+pO9MrZhyzsTa6WVQe+:m2kuLFlMMKOjaMROO9MLtTafQe+","tlshash":"649312d0d027ad5bff6d78b5c6dec2402fda6bed11836138d610c28f22d8e97252521e","first_seen":"2026-05-28T07:38:54.824425Z","last_seen":"2026-05-28T07:40:15.925979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladydosug.live/uploads/9_7a65f1f46531.jpg","fqdn":"ladydosug.live","domain":"ladydosug.live","tld":"live"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladydosug.live/","date":"2026-05-28T07:38:28.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladydosug.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 03:09:39 GMT","end":"Wed, 26 Aug 2026 03:09:38 GMT"},"fingerprint":{"sha1":"C7:FA:51:BA:0B:00:D3:6A:AA:AB:10:EE:AA:36:2B:C1:4C:81:F6:F2","sha256":"5D:82:DE:A2:33:3B:FC:FD:75:38:82:53:72:A8:5E:A3:8C:7E:00:49:5A:3B:69:D9:6A:5B:EF:BA:A9:50:01:13"}}},"request":{"raw":"GET /uploads/9_7a65f1f46531.jpg HTTP/1.1\r\nHost: ladydosug.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ladydosug.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=h4o1bouel81ot03hoed68nolji\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 07:38:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 27 May 2026 02:24:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1655c6-4db6\"\r\nexpires: Sat, 27 Jun 2026 07:38:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19894,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 88\", baseline, precision 8, 600x800, components 3","md5":"aec363b3177df0f3f2dbf835149d0396","sha1":"9f5491cdaae41a753f8aaab589822a777f8375ab","sha256":"28eb9fe924a2dbd4f2f379e5790e437ba6dd4168c0f0d374bc45a4aef726e6e4","sha512":"aed9ced78af54f9d43eaf5644e1ac1f6b0ee7932864e7281f0fc04a292d579b686b430869e8c2c7e6cae433237ea86ca063d58fadac15b40a86d52fc45b176b3","ssdeep":"384:ID4FCFjjoJZ6ZOjjjmnOojZqzjjvlvbKqMcidK6qE/tjj2xzhfjjEZVajGlm+tEr:Ixjjo7AOjjjm/jZIjj9vbadKVE/tjjUp","tlshash":"fa920b078d1d8092e426a9c67c47c54f7b73f91fad8e7e94501aabf23c306903e9c949","first_seen":"2026-05-28T07:38:54.825687Z","last_seen":"2026-05-28T07:40:15.929589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}