{"report_id":"f459a9ad-2cfc-43a5-a724-99754c3cba80","version":6,"status":"done","tags":[],"date":"2026-04-20T13:08:48Z","url":{"schema":"https","addr":"waf4.shop/","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"waf4.shop/","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"title":"عالم وافي - متجر إلكتروني | أفضل الأجهزة الإلكترونية بأقل الأسعار","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"waf4.shop/","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T13:08:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":6,"received_data":199158,"sent_data":3303,"comment":"","tags":null,"fingerprints":null},{"fqdn":"waf4.shop","ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-20T13:08:49.421856Z","last_seen":"2026-04-20T13:08:49.421856Z","alert_count":0,"request_count":32,"received_data":1949141,"sent_data":15366,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-04-15T14:18:38.441181Z","alert_count":0,"request_count":3,"received_data":151954,"sent_data":1383,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":13020,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"waf4.shop/assets/index-BpEaWGPo.js","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d59965a13115bda26556d1cc81b6b0f","sha1":"ceecea2d5d4abfd2fd57d6fb03b33348b1f96f13","sha256":"459f5dbfda47bb4a0b772c8859535fc669d2985d23380b30ee98afc334304d01","sha512":"3820e04400ae67b21193ebbf56d6577985bc65ca9e2fc58d2e10f94539929945574799bfa8f7e556facc27e456a91a40207a0756cb609ba3ef5e0bedcd6e257f","ssdeep":"12288:RfAZzdPyhinozJmxMWVVesHUP3a7irjuJXgodRU5z7rAGzCdAQ24u:xAZzUMnexsHUC7qll7D9","tlshash":"3a156c84f191faadbaa749e5947f5004b03e1e15e62ec860f07ce8922ab01457677ffc","size":887902,"data":"","first_seen":"2026-04-20T13:08:54.996288Z","last_seen":"2026-04-20T13:08:54.996288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waf4.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 04:04:00 GMT\r\nexpires: Sun, 18 Apr 2027 04:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205466\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-04-22T00:40:47.945109Z","times_seen":1945,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":169,"dns":1,"connect":22,"send":0,"wait":8,"receive":1,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/favicon.ico","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 17 Apr 2026 09:06:54 GMT\r\netag: W/\"186b-19d9ab17559\"\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6251,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"68e25293ed9942c36799522442a6a208","sha1":"e039b2f9d24617a1051cd10dd16eafb63479c5de","sha256":"b5c181b6e349272431e568d75801a24626b609ddfd3db6899725bd0b0556120b","sha512":"f4c0613130a1a1e19d16fac28419ce4dfe8c3bfc15aa9c9864e6d37fca7acf6d3ba534664c0fed045c6177a0d4d3229595dc76cf3790cb331284bf8a7c42db66","ssdeep":"192:7xbeqVxB+xygxhhizPIf5jiv6PxWc1Kiyr2u:lbeqrBmH7rI6u","tlshash":"63d162d36a948c11175186a8d2e27258ce38dc13cb0dfe69719e166e4fc7893839b6bc","first_seen":"2026-04-20T13:08:54.988161Z","last_seen":"2026-04-20T13:08:54.988161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869272_145.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869272_145.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"161a-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 5658\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76afed697db123409777881c2aa04f8d","sha1":"a4817591142e93930e3e053482e4c24bddf9f2e7","sha256":"bf7a75c6c80ba7bd807951d12cff2f15860892d9d0f31819e6086e61df2b3c93","sha512":"01b219a063248b8273836d95e7c729a4a3127e4a729598e7a4d5491a4fe751517f8b40a0c0f164c1ba97734b42844386cb738222c92f2608d0997d1d02c9dd0c","ssdeep":"96:oUdz7A/XYdPYUATDe1HwPjT44dqJYQ6aX8lEKElboMVhLv6evrOxR:oUdz7AcPAPoYHzgXXboMVBtvr4","tlshash":"35c17ec395f6cdfb4ef09477156a0425346e4fa5d07e9b402730974be0af5902ec1da2","first_seen":"2026-04-20T13:08:54.990451Z","last_seen":"2026-04-20T13:08:54.990451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868391_210.jpeg","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868391_210.jpeg HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"29be-19d1e5c7120\"\r\ncontent-type: image/jpeg\r\ncontent-length: 10686\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 230x230, components 3","md5":"8cf85323bda7a12373fe07efe79dd1d9","sha1":"2b685c7bd1ecc4435fae51260868c0e0b53f446c","sha256":"9f0154d59e6a9033a974a5ae2347215cfa4a9457733f266c3b6c16d23a298f75","sha512":"0ec2ebb8f16918d932c3dd351686d7e53f7a89e89d260f9729d4fae599df50e845c81c6907ddcf537a434b07c0403fa061b0d721550290506298422abdda9639","ssdeep":"192:3FVdM83t3nae+fLT3OyZOIaXyelHjp8XysyvLofkjR6Jb:3FVf9qZzT3lZOI+12XgzJR6p","tlshash":"c722ae7ae3c3c3c07357634e051e2c6313ed5aa1248a668329dfba218426f40d19b87e","first_seen":"2026-04-20T13:08:54.991876Z","last_seen":"2026-04-20T13:08:54.991876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869549_934.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869549_934.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"da4-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 3492\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67fcb638f4c0480f6988771d9e1e864a","sha1":"5c141352d2f5ebb2fc3e829f9d56e4cc67fb71f3","sha256":"3a2dca1197b10901b445b94bfda08cd6b3523edd42fac2200599bb3f3e6de343","sha512":"8f89285ef15cbbed14ac3b0800b78af0411b9e88f08aa944c413bb04d097aabc70c9d073f8bf1536badac2e32ef288bf98b985217c44389ab9f42b3ea0ff3b85","ssdeep":"","tlshash":"7a717b28d4be6528eecf036d1446bc2e8c5d615484a29d9729ec1e0c1fc6b4fd22e8ec","first_seen":"2026-04-20T13:08:54.993347Z","last_seen":"2026-04-20T13:08:54.993347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/KxPUDoO70BxFISsUtYZMm.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:37.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/KxPUDoO70BxFISsUtYZMm.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T04:09:27.367407Z","times_seen":14044227,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/FHUtXNYJAMPAp5VMzE_Hf.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:42.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/FHUtXNYJAMPAp5VMzE_Hf.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 04:57:35 GMT\r\netag: W/\"1c1c5-19d1e349218\"\r\ncontent-type: image/webp\r\ncontent-length: 115141\r\ndate: Mon, 20 Apr 2026 13:08:42 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115141,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1400x500, components 3","md5":"889dcde8346852ec10c6a5d9b009e2d1","sha1":"b22fa1d1a490cff86fb2c3a580a3bddd54005605","sha256":"277f20e7743bec6add160350b1156e233e70be2376bf8f2047511da631ff9ad5","sha512":"7faab4c100511c07c939cb2b48d2e82e86654e4d6094e798bd8b8b91e55b45777b4ac5fabca28f9d8c4eb3cb604e6fb25ebde8feae8b22788eebb54201459d79","ssdeep":"3072:xFjkFwJyNVlkfP/OM26DQ3DfdYJ+25ktpCIiMsap7R:xZkFKyNVlkfP2Mq3BYJ+2SX3Cs","tlshash":"d8b312633a1ca5716eede66fe6039a880a376970e9c31e5c7f000d82266467754fe298","first_seen":"2026-04-20T13:08:54.995021Z","last_seen":"2026-04-20T13:08:54.995021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/assets/index-BpEaWGPo.js","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /assets/index-BpEaWGPo.js HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 17 Apr 2026 09:06:54 GMT\r\netag: W/\"d8c5e-19d9ab17559\"\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":887902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d59965a13115bda26556d1cc81b6b0f","sha1":"ceecea2d5d4abfd2fd57d6fb03b33348b1f96f13","sha256":"459f5dbfda47bb4a0b772c8859535fc669d2985d23380b30ee98afc334304d01","sha512":"3820e04400ae67b21193ebbf56d6577985bc65ca9e2fc58d2e10f94539929945574799bfa8f7e556facc27e456a91a40207a0756cb609ba3ef5e0bedcd6e257f","ssdeep":"12288:RfAZzdPyhinozJmxMWVVesHUP3a7irjuJXgodRU5z7rAGzCdAQ24u:xAZzUMnexsHUC7qll7D9","tlshash":"3a156c84f191faadbaa749e5947f5004b03e1e15e62ec860f07ce8922ab01457677ffc","first_seen":"2026-04-20T13:08:54.996288Z","last_seen":"2026-04-20T13:08:54.996288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/api/trpc/categories.list,settings.getMultiple,banners.list,pages.list,settings.getMultiple,settings.getMultiple,products.sections?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%221%22%3A%7B%22json%22%3A%7B%22keys%22%3A%5B%22store_name%22%2C%22store_logo%22%5D%7D%7D%2C%222%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%223%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%224%22%3A%7B%22json%22%3A%7B%22keys%22%3A%5B%22store_name%22%2C%22store_phone%22%2C%22store_email%22%2C%22store_address%22%2C%22store_vat%22%2C%22store_cr%22%2C%22store_whatsapp%22%2C%22store_logo%22%2C%22store_description%22%2C%22store_qr_code%22%2C%22store_vat_certificate%22%5D%7D%7D%2C%225%22%3A%7B%22json%22%3A%7B%22keys%22%3A%5B%22store_whatsapp%22%2C%22store_phone%22%5D%7D%7D%2C%226%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /api/trpc/categories.list,settings.getMultiple,banners.list,pages.list,settings.getMultiple,settings.getMultiple,products.sections?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%221%22%3A%7B%22json%22%3A%7B%22keys%22%3A%5B%22store_name%22%2C%22store_logo%22%5D%7D%7D%2C%222%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%223%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%224%22%3A%7B%22json%22%3A%7B%22keys%22%3A%5B%22store_name%22%2C%22store_phone%22%2C%22store_email%22%2C%22store_address%22%2C%22store_vat%22%2C%22store_cr%22%2C%22store_whatsapp%22%2C%22store_logo%22%2C%22store_description%22%2C%22store_qr_code%22%2C%22store_vat_certificate%22%5D%7D%7D%2C%225%22%3A%7B%22json%22%3A%7B%22keys%22%3A%5B%22store_whatsapp%22%2C%22store_phone%22%5D%7D%7D%2C%226%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://waf4.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\ncontent-type: application/json\r\nvary: trpc-accept, accept,Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":218158,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (56479), with NEL line terminators","md5":"b1322b6550f3cb311545190017a5909b","sha1":"99fb7893db1e882f97d5dd6e03bf49c0616194de","sha256":"5a9bbeff5183a941e037cd71975bbc8d747335f82236fb72ba159ebfbe8eb0a9","sha512":"b4c92e51f3c44a46defabc677ccde578c5bedfa18964841b484493b78070bf6a9c457d8bdcb48bd6a3a4792b144328688333fd074ffc45a83a81f9a8844507c5","ssdeep":"1536:JZFdPvOW9unZ99NSGuvW1zB65D8qhQkmE/392LEcMvBxDIG5Bop0Evvv30OE1PJo:aA2tMNKVpMjNU","tlshash":"113410aacafb596c493910e384c23ae47c6e202917d94f73bbbddb04827452116dfc76","first_seen":"2026-04-20T13:08:54.997611Z","last_seen":"2026-04-20T13:08:54.997611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/hicJLWiVu_ifLnyTpLrdv.png","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/hicJLWiVu_ifLnyTpLrdv.png HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 03:41:53 GMT\r\netag: W/\"dd25-19d1def43e8\"\r\ncontent-type: image/png\r\ncontent-length: 56613\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 115, 8-bit/color RGBA, non-interlaced","md5":"1438eba7413105868266641406f507b8","sha1":"29a51933fd001f7a147edb18c2f28e00cbe39030","sha256":"512c7f94e1886755311c927e4c3c7735d1122caaf418d50fabd79074ed07723f","sha512":"d98d6928160b8db3a20ed834c8b57d8a71607e6e60b96aad61cef27c04f4229a1c6a1b3f1716bd2bfc62ed5295dd512aa9d515ad745b279dcdeeca2c22fa2266","ssdeep":"1536:89rAcV/DwAlK13lVbCE5RG9vzrsxeN7rlSEi:8vIVbCE5RGVsatSr","tlshash":"3743f2df9a835f0c9c6e253a846d822c9f0f977c0ee6f1a0ddf4d6041a54ca4999a3e4","first_seen":"2026-04-20T13:08:54.999027Z","last_seen":"2026-04-20T13:08:54.999027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/7bmgOLifwhuAN3BlZliDI.png","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/7bmgOLifwhuAN3BlZliDI.png HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:05:54 GMT\r\netag: W/\"406c-19d1e3c2f50\"\r\ncontent-type: image/png\r\ncontent-length: 16492\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 248 x 254, 8-bit/color RGBA, non-interlaced","md5":"39eac4a76c9e9792a147f150534103fd","sha1":"bc51d3058bcef9d31fff5e68fb5206ac2a370e09","sha256":"0fbc804387b309e1790b7c02e30a92554a9303ec062b4db7c3631aad7ceae821","sha512":"e374f9d74fb32f0b0d588930aec57c0045bf849568885462ba2719a136604169266156c903fad11118d5eb53f75d276d37f9e06f5f49fd253d36d3cc96390965","ssdeep":"384:PXnkwwL61bGGGzXyJR2A1ttZklVEjalq5fUufAjHm4dhscW:vCvGUXutZklqalq5fUm8s5","tlshash":"c672d0c4a7049d72a65b54883cde0d8b4a238d19def04ed2bdec544349b09b89c6afc6","first_seen":"2026-04-14T14:36:39.527098Z","last_seen":"2026-04-20T13:08:55.001367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/ge9adyI5me4BY11R5xsU7.jpeg","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/ge9adyI5me4BY11R5xsU7.jpeg HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:05:57 GMT\r\netag: W/\"4a83-19d1e3c3b08\"\r\ncontent-type: image/jpeg\r\ncontent-length: 19075\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 200x255, components 3","md5":"2e25a99edb2a95688209f270f53c1a81","sha1":"190165d0256e48035b9c2ebb99d0e00c24899984","sha256":"7868a5410534128122f6632264b4f581dbf2d572e45fdddaeed9c36d6ca3d06c","sha512":"11bc9339aa4612a0ee988a7fdc3cef12508525da0cb8fd17f087ada12504806fedf46179452c22247edf3954668ba99d4ec2175d76ea105642eee67663c6593e","ssdeep":"384:nwmU5s5+5b0jf5QsbSpxBMhEXS22CPIoAye6zV67h6a:wmU4G6SpxehEXfPIBye6Ta","tlshash":"a582d00faf0794a0fd2554366def196dd3002978c0c8e289bd0598bc7da988a8edc2d8","first_seen":"2026-04-20T13:08:55.002579Z","last_seen":"2026-04-20T13:08:55.002579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869570_378.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869570_378.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"da4-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 3492\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67fcb638f4c0480f6988771d9e1e864a","sha1":"5c141352d2f5ebb2fc3e829f9d56e4cc67fb71f3","sha256":"3a2dca1197b10901b445b94bfda08cd6b3523edd42fac2200599bb3f3e6de343","sha512":"8f89285ef15cbbed14ac3b0800b78af0411b9e88f08aa944c413bb04d097aabc70c9d073f8bf1536badac2e32ef288bf98b985217c44389ab9f42b3ea0ff3b85","ssdeep":"","tlshash":"7a717b28d4be6528eecf036d1446bc2e8c5d615484a29d9729ec1e0c1fc6b4fd22e8ec","first_seen":"2026-04-20T13:08:54.993347Z","last_seen":"2026-04-20T13:08:54.993347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/assets/index-_Fq7-aHt.css","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /assets/index-_Fq7-aHt.css HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 17 Apr 2026 09:06:54 GMT\r\netag: W/\"23ce4-19d9ab17555\"\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146660,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8d6e266f6961a090f8b7388324d98da4","sha1":"c7e876258d6ce8978e41bc42cc8078f6f574c72d","sha256":"672c0acd8b375e21e7f7274fc25eec935c00b4cbf6a6edecbeec8f242b984994","sha512":"837be0616abcb4cfd889685a7d54091420ee0108e8720137eb81c5b7fefd2ef7c3905b6b3fd9ca85249553d54c7925b5e7da22bcf27041c9dc505ee2220cbf2b","ssdeep":"3072:7esjEIBhQR3iuuI3hsyY8D+IxZ0kBtYjZ9NgqtTMq+WDhKAClD:7esjEIBhQR3iuuI3hsyNBtmZ9NgqtTMv","tlshash":"58e3a5a0b239e53fbc2364f9938ce88c9119b0c1dd2947edfe12a12217c7bf69d66514","first_seen":"2026-04-20T13:08:55.003698Z","last_seen":"2026-04-20T13:08:55.003698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /%VITE_ANALYTICS_ENDPOINT%/umami HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 138\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T04:09:27.367407Z","times_seen":14044227,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/A8alwEP-LGHaqQykGbziR.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/A8alwEP-LGHaqQykGbziR.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 04:57:08 GMT\r\netag: W/\"16ed1-19d1e3428a0\"\r\ncontent-type: image/webp\r\ncontent-length: 93905\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93905,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1400x500, components 3","md5":"dc7d21bb38e9a4dbe271f3c59b173391","sha1":"23eab488917746962719dbf5a2c357fc59dbdfc8","sha256":"b87ad92f3816b0286437e0bca3836d98ae26aabe70d6b33ff3fa214696078da3","sha512":"ea5ede3be577021a4934d33f14f0af5dd1236344581c574147b9d233617acbfb650bac5d2c0bdbf5f08604a21e6849007c47644cd8351d95b08062e54141e46c","ssdeep":"1536:qp0bC8fG6iute95gxVZDzImUzkLMmsWM+L1zHUwZale3Jx7cOtOaAQvZM:HfGf8e95grZDzILuMuVHUtleZxf9AUM","tlshash":"0993e00399054783c16997d83e1b6bda2e50eb3c8ec56cc748671d8e3f94a626e8f14e","first_seen":"2026-04-20T13:08:55.004783Z","last_seen":"2026-04-20T13:08:55.004783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1517336714731-489689fd1ca8?w=800","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1517336714731-489689fd1ca8?w=800 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: f546da1c77df42175008e95ceb8c08b7df0784c3\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 18 Apr 2026 03:26:39 GMT\r\nserver: imgix\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nage: 207707\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230225-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 61135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x640, components 3","md5":"700c5752f3c39fd18485b8fbfc52f43e","sha1":"d8726b3b5d41d54fb4d575f92e06521bd5f0fe27","sha256":"69f951e95bedd7adf802e0f82ae89fdd62addf12c11c6e26018785c566788c69","sha512":"5ea65bcd4ab87f051a994d36dcfde55408292062c1f2b436f71f1d6de0c310626e83a09732336496c9253c68ddb769cc0b673de98dd281f096d83a30171c9012","ssdeep":"1536:hmH0k5uZXbh773P/FFXEJaJlJepRRe2qItIK7p:hmH0k5uZLDF+KuRRDfI2p","tlshash":"ac530258a9038077f8f8f27d9c7273e1b68aba149b85a9433d82c5cd3d4c9a171dcd58","first_seen":"2026-04-20T13:08:55.005963Z","last_seen":"2026-04-20T13:08:55.005963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":53,"dns":23,"connect":13,"send":0,"wait":15,"receive":17,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1525547719571-a2d4ac8945e2?w=800","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1525547719571-a2d4ac8945e2?w=800 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: ff16f198e9aeed9096d0966c3ad5c815c858e138\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 19 Apr 2026 02:15:24 GMT\r\nserver: imgix\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nage: 125583\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230029-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 89055\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x1000, components 3","md5":"814749393c72d93229e57a96a834f95f","sha1":"98137b631ad1088aca5d962f2f05cdcb81d4d7b4","sha256":"9755f2383060c8a361beac26f016099ac8d17962782f3f8c9973389a515af720","sha512":"d9387ccda9a55055c4a46cfa76cf70b73df5c7bd68989c36981740beb101435c6e5791e190f96672637c07a6f731b45774b286d8f4113944f15c83834170e85f","ssdeep":"1536:hCbnwiSSACfZw1C9yeSondL5cxDz4mbAX3ARRHpX6f8hiv4AM7GrBveTIS+:hCELSACfG7ydFmDUmwvhbFrNeTIS+","tlshash":"2c93023466d9a4b2d9b9d6fd04ac3f8093d2dc059b99105e4dc98c8caf7b96c8d1f20a","first_seen":"2026-04-20T13:08:55.007348Z","last_seen":"2026-04-20T13:08:55.007348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":77,"dns":23,"connect":30,"send":0,"wait":40,"receive":14,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869565_696.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869565_696.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"c5a-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 3162\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b5b7f1e6c02f9e425a6800198f06fa90","sha1":"8b7845845fee298f999b260f8163638305c40fc8","sha256":"f611959e5bf83a19bd533bd17231aa66e58644f6a592ce58c9d2f4c90e1d148f","sha512":"1fc9fc001747e14d022074d06f69e83ceb8d70028310b622317bfc3e8d1768d83e8f9affa7d534dc47ecbe29b939115d3be155f35a6c6bb86289c74084e0b515","ssdeep":"","tlshash":"0b515bcc4c62469f7a7897afa3a363649a135eb4af218654860c201ca2437193749362","first_seen":"2026-04-20T13:08:55.008727Z","last_seen":"2026-04-20T13:08:55.008727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868985_409.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868985_409.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"161a-19d1e5c7120\"\r\ncontent-type: image/webp\r\ncontent-length: 5658\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76afed697db123409777881c2aa04f8d","sha1":"a4817591142e93930e3e053482e4c24bddf9f2e7","sha256":"bf7a75c6c80ba7bd807951d12cff2f15860892d9d0f31819e6086e61df2b3c93","sha512":"01b219a063248b8273836d95e7c729a4a3127e4a729598e7a4d5491a4fe751517f8b40a0c0f164c1ba97734b42844386cb738222c92f2608d0997d1d02c9dd0c","ssdeep":"96:oUdz7A/XYdPYUATDe1HwPjT44dqJYQ6aX8lEKElboMVhLv6evrOxR:oUdz7AcPAPoYHzgXXboMVBtvr4","tlshash":"35c17ec395f6cdfb4ef09477156a0425346e4fa5d07e9b402730974be0af5902ec1da2","first_seen":"2026-04-20T13:08:54.990451Z","last_seen":"2026-04-20T13:08:54.990451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868989_154.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868989_154.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"1b54-19d1e5c7120\"\r\ncontent-type: image/webp\r\ncontent-length: 6996\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bad1193e62b49bb21ae87ad330146d88","sha1":"79d17d11e527392104739a0a57e72979b67dbde0","sha256":"eb1548a571860584fceb3d032d35c4c5ec5a12471e2de1e93fa1317ab1314003","sha512":"a25bc8eb0a9ef8146d32f779eef782dcfbd7984867f96efd9afca974e33f33806e884b59418a04c9016ce8c13650595bda1c3322bcdbd187d927cbf146b3ba7d","ssdeep":"192:NokDaqwkEu/8I9oyE222cse+agodZ77CajLqi9QX:N8qwk78IZ22cs7ly2aQX","tlshash":"ace18eba4198448f400932290d66d765318e9578a3b8b0a0b0d87df7cebf4f0211fb7a","first_seen":"2026-04-20T13:08:55.010143Z","last_seen":"2026-04-20T13:08:55.010143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/B29BAOEoJJdmspTZKl7Ly.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:32.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/B29BAOEoJJdmspTZKl7Ly.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 04:57:18 GMT\r\netag: W/\"14ec6-19d1e344fb0\"\r\ncontent-type: image/webp\r\ncontent-length: 85702\r\ndate: Mon, 20 Apr 2026 13:08:32 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85702,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1400x500, components 3","md5":"6281bf7da4ded405047ec7d65ebb23b3","sha1":"fdd78b40c60e2ae662c31870d04d269a39c3e4b4","sha256":"fae33cae44bfa44f118e2eb36a4aea9be53619adcf410aeaca77a6f27d9e46f6","sha512":"ae0f1df954193885ec9e39c95e7a58f6bed5aad5d3a4e5788e711d44d801035695eca1cd2166f08639e48d31b88f1c6b694c5b9960e9d25f114bb39990e170ba","ssdeep":"1536:qL5vhMu8KjrQMOPuM3uyVLEuxyOymdS+eIBHCdnpqRUAF:W5CuIwM3PVLEdOylnI8rbAF","tlshash":"d9830293cc055683d22947bebf890e9997060716dcf53fe7a0642f8a7c106ea2d0b67d","first_seen":"2026-04-20T13:08:55.01143Z","last_seen":"2026-04-20T13:08:55.01143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cairo:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Cairo:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Apr 2026 13:08:26 GMT\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12334,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"0a48f1f01a35140a85ab5b69cfcf0c29","sha1":"d8f8d53073eafa9fc2d82212f3fd1a764bf34208","sha256":"cfa12002c6cf21d40794bf41bfca801577cb8f1b18b69eb2fcdb486b97fa2ae2","sha512":"a193881f73b1ec450eaa80e5b52c47ac7f2ae790d4f3e6707506921c0553c7824aa3d66ea12a8f840974558a1b807420b88aaa4f316fce09fa60021da2289b5c","ssdeep":"192:zbClb3UlbCl63JGbClp3aDbClw338bClX3QZbClW3VqbCl132O:KlzlklJlClflolp","tlshash":"8842add00c1e4184bf475dc2638d6e23ee0ee1956494886cabfd2b8b9cabc27739575c","first_seen":"2025-09-17T13:16:45.867583Z","last_seen":"2026-04-20T13:08:55.012824Z","times_seen":104,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":152,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waf4.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:52:34 GMT\r\nexpires: Sat, 17 Apr 2027 18:52:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238552\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-04-22T00:40:47.948695Z","times_seen":3469,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":130,"dns":5,"connect":15,"send":0,"wait":12,"receive":4,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/44AAM0MnFPbHgVtYvyz_J.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/44AAM0MnFPbHgVtYvyz_J.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:53:27 GMT\r\netag: W/\"6436-19d1e67b7d8\"\r\ncontent-type: image/webp\r\ncontent-length: 25654\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25654,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 500x500, components 3","md5":"400401002c1cd71e8c61d91e470b84da","sha1":"b42ecf6ae20aeea75d21d3c5a33b36d0e18fe6a9","sha256":"aa59d304dd0bc2f7d9051f8d28e633485bdc3edefdfd97047c39e1f5e271a9ea","sha512":"7906487ec2aa415248ec8afcb5d9910732af02725ed8eecf77c7989ecb5f285d3cc22239bdfa3ac50f127ab2cba8743d31fe76cfebe9c24e2bf1a0c63556e460","ssdeep":"384:qziECEPvfVPrB4k+Ub+CNjLG5mle93E9q/rxGLZ8ceTnjERUvyFFDKfCk:qWExiY+am3Km4V8cenEeEw","tlshash":"0bb2d0130824b3d6601196b3bd179d8b3f65babda8e1326d34d34ec774627324c6e92e","first_seen":"2026-04-20T13:08:55.014389Z","last_seen":"2026-04-20T13:08:55.014389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869829_480.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869829_480.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"11e8-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 4584\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"265b5687e919190623377d44e039bfb6","sha1":"4e2f54abf139e78076ab8270ad703c2cc5f06aa9","sha256":"df1ae75988ce5815ef5ee00a1e9645dbf90ae012f2dfabfde9b02b00baa750a1","sha512":"06d4ae7fa93a95b7d0d50ac5d47f27a69c731212029840590ea9024188ecd48f2c938ccd0624e244ac07e7288bef3096cff249de73177214d59533cd7b55d122","ssdeep":"96:4dU1TMRBux9ZhoJqPKMn5RRoQedHXmSLMQfPckgn:oUJMRBu1iJqf5RRSHXJRcln","tlshash":"ea916d0287d0197bf3b32cd3bca1f95af75e6d8c702569c444627b29f641336027868a","first_seen":"2026-04-20T13:08:55.021973Z","last_seen":"2026-04-20T13:08:55.021973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868964_276.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868964_276.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"161a-19d1e5c7120\"\r\ncontent-type: image/webp\r\ncontent-length: 5658\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76afed697db123409777881c2aa04f8d","sha1":"a4817591142e93930e3e053482e4c24bddf9f2e7","sha256":"bf7a75c6c80ba7bd807951d12cff2f15860892d9d0f31819e6086e61df2b3c93","sha512":"01b219a063248b8273836d95e7c729a4a3127e4a729598e7a4d5491a4fe751517f8b40a0c0f164c1ba97734b42844386cb738222c92f2608d0997d1d02c9dd0c","ssdeep":"96:oUdz7A/XYdPYUATDe1HwPjT44dqJYQ6aX8lEKElboMVhLv6evrOxR:oUdz7AcPAPoYHzgXXboMVBtvr4","tlshash":"35c17ec395f6cdfb4ef09477156a0425346e4fa5d07e9b402730974be0af5902ec1da2","first_seen":"2026-04-20T13:08:54.990451Z","last_seen":"2026-04-20T13:08:54.990451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868665_957.jpeg","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868665_957.jpeg HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"283a-19d1e5c7120\"\r\ncontent-type: image/jpeg\r\ncontent-length: 10298\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 230x230, components 3","md5":"b734b07e955e0bf4428ccc7533f3dae5","sha1":"ef443ac0ab352f53b8c64c8bf5ae1c60b503a04c","sha256":"881253ac065f72672dd955f03c917ab53a1710408714b2f5889810284e75c033","sha512":"ea4daab8b72aae10f221abffdf3bc042c4c06808952c938d5dacdc27a66c0509c764d868a674470dc7c677affcb2bd79bc7076a2f1578f777f9a7983729d9270","ssdeep":"192:3MJa7yIsHmGymWE5eQzwYyS/8EtxnxDunQVzsG3dy:3z7lJGym1VVySEmxDunQV33dy","tlshash":"22228ed9d787cae1731300311e6dbc4b9be5a0e24bd2217a95d344a0c7a2fdc5516abc","first_seen":"2026-04-20T13:08:55.024289Z","last_seen":"2026-04-20T13:08:55.024289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waf4.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:52:34 GMT\r\nexpires: Sat, 17 Apr 2027 18:52:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238552\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-04-22T00:40:47.948695Z","times_seen":3469,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":140,"dns":0,"connect":7,"send":0,"wait":9,"receive":9,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waf4.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 04:04:00 GMT\r\nexpires: Sun, 18 Apr 2027 04:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205466\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-04-22T00:40:47.945109Z","times_seen":1945,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":216,"dns":1,"connect":8,"send":0,"wait":8,"receive":2,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868971_119.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868971_119.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"1b54-19d1e5c7120\"\r\ncontent-type: image/webp\r\ncontent-length: 6996\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bad1193e62b49bb21ae87ad330146d88","sha1":"79d17d11e527392104739a0a57e72979b67dbde0","sha256":"eb1548a571860584fceb3d032d35c4c5ec5a12471e2de1e93fa1317ab1314003","sha512":"a25bc8eb0a9ef8146d32f779eef782dcfbd7984867f96efd9afca974e33f33806e884b59418a04c9016ce8c13650595bda1c3322bcdbd187d927cbf146b3ba7d","ssdeep":"192:NokDaqwkEu/8I9oyE222cse+agodZ77CajLqi9QX:N8qwk78IZ22cs7ly2aQX","tlshash":"ace18eba4198448f400932290d66d765318e9578a3b8b0a0b0d87df7cebf4f0211fb7a","first_seen":"2026-04-20T13:08:55.010143Z","last_seen":"2026-04-20T13:08:55.010143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868977_753.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868977_753.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"14ec-19d1e5c7120\"\r\ncontent-type: image/webp\r\ncontent-length: 5356\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04e02fef0277d950b47dbf15181654db","sha1":"5d9de2812b3a7f62d2aa3b0ae2072c24e81782f1","sha256":"933c7e09f8a714e7b9c7dbc3f9d7368bb615928e492623c09ab357086b41c744","sha512":"2a4e52ac94ef837d1e8414065afda823a6ad37d6e3118ecb1b598ae905879aff52a13725e7045941656639e7dc680b46872484f2a01c756bc3c3082bd512dce1","ssdeep":"96:zPbcy5Nfjk39pdJfC3Gm1DBEzpy9LlzDItDEVgYlT8r12Wmw0xFRZjZO/IjdU9b:L/NLktpXC3hEVydlzD4DMgYlTif1MRZ4","tlshash":"18b17dd318860921c3ac9537a58d30f25d0d79a074b02a3fb690c6b94926617631fbfb","first_seen":"2026-04-20T13:08:55.025624Z","last_seen":"2026-04-20T13:08:55.025624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330868996_183.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330868996_183.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:08 GMT\r\netag: W/\"161a-19d1e5c7120\"\r\ncontent-type: image/webp\r\ncontent-length: 5658\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76afed697db123409777881c2aa04f8d","sha1":"a4817591142e93930e3e053482e4c24bddf9f2e7","sha256":"bf7a75c6c80ba7bd807951d12cff2f15860892d9d0f31819e6086e61df2b3c93","sha512":"01b219a063248b8273836d95e7c729a4a3127e4a729598e7a4d5491a4fe751517f8b40a0c0f164c1ba97734b42844386cb738222c92f2608d0997d1d02c9dd0c","ssdeep":"96:oUdz7A/XYdPYUATDe1HwPjT44dqJYQ6aX8lEKElboMVhLv6evrOxR:oUdz7AcPAPoYHzgXXboMVBtvr4","tlshash":"35c17ec395f6cdfb4ef09477156a0425346e4fa5d07e9b402730974be0af5902ec1da2","first_seen":"2026-04-20T13:08:54.990451Z","last_seen":"2026-04-20T13:08:54.990451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869560_456.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869560_456.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"1074-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 4212\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0373855ef9a4aac2edfa5979a169c177","sha1":"a413df0a442fea85026be3e4cb32ea74ad9b8847","sha256":"49fdf794a10bac7c8bcd3766f2fa233d779b01c9377f09d4d8a10928ac673b15","sha512":"2815c04cdeebef676163521aa689ed2d85bb814bf75a09e3c1425dbf3abdfd4c78a7010ebaae013824d3dc7a61bd06ab2e92240d4a01bd45f9d061fef203bcac","ssdeep":"96:CSypbYcP+JrhfwtDt204r4KcVMumNIAFnShShqBf4YEK:CTtapwtDuEaukIZEYV","tlshash":"49916dea783ed7dee16689f9a90d5cbd310ed0a194160f512be214bbc1d24d8355883d","first_seen":"2026-04-20T13:08:55.026921Z","last_seen":"2026-04-20T13:08:55.026921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/KxPUDoO70BxFISsUtYZMm.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:37.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/KxPUDoO70BxFISsUtYZMm.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 04:57:28 GMT\r\netag: W/\"1b2a1-19d1e3476c0\"\r\ncontent-type: image/webp\r\ncontent-length: 111265\r\ndate: Mon, 20 Apr 2026 13:08:37 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111265,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1400x500, components 3","md5":"748c894689cb3a6ff7695daa20331d53","sha1":"d2c360285e8c91cf5bcf732dfea2871cbce62dbe","sha256":"6f562401f2cab2f77005484ba3b55651812e0cae9cb5a6ccd36b6887ff90c856","sha512":"192c9da1ac2fd3795b2e0c98ed4cd00555be5b1936c2919f87be7754d0816c89a63969a823a37745aa5f7b0267397a4e1c0e48b345b8d76fa631ed3e062da757","ssdeep":"3072:GNQQiYKxoehGlf/AOmZi2ZIWvIVUIfzavdHCZyn:GNQQBBesZAg2ZIWUL2vIyn","tlshash":"1ab3233e885ce277615878fe09b90e8ccbc0916d7e499418fe5bcdd8069890f1a19fdd","first_seen":"2026-04-20T13:08:55.028352Z","last_seen":"2026-04-20T13:08:55.028352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T13:08:25.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 17 Apr 2026 09:06:54 GMT\r\netag: W/\"186b-19d9ab17559\"\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Apr 2026 13:08:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6251,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"68e25293ed9942c36799522442a6a208","sha1":"e039b2f9d24617a1051cd10dd16eafb63479c5de","sha256":"b5c181b6e349272431e568d75801a24626b609ddfd3db6899725bd0b0556120b","sha512":"f4c0613130a1a1e19d16fac28419ce4dfe8c3bfc15aa9c9864e6d37fca7acf6d3ba534664c0fed045c6177a0d4d3229595dc76cf3790cb331284bf8a7c42db66","ssdeep":"192:7xbeqVxB+xygxhhizPIf5jiv6PxWc1Kiyr2u:lbeqrBmH7rI6u","tlshash":"63d162d36a948c11175186a8d2e27258ce38dc13cb0dfe69719e166e4fc7893839b6bc","first_seen":"2026-04-20T13:08:54.988161Z","last_seen":"2026-04-20T13:08:54.988161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":108,"dns":58,"connect":22,"send":0,"wait":24,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waf4.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 04:04:00 GMT\r\nexpires: Sun, 18 Apr 2027 04:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205466\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-04-22T00:40:47.945109Z","times_seen":1945,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":116,"dns":1,"connect":30,"send":0,"wait":15,"receive":2,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waf4.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:52:34 GMT\r\nexpires: Sat, 17 Apr 2027 18:52:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238552\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-04-22T00:40:47.948695Z","times_seen":3469,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":125,"dns":1,"connect":17,"send":0,"wait":13,"receive":3,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/uploads/hicJLWiVu_ifLnyTpLrdv.png","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:26.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/uploads/hicJLWiVu_ifLnyTpLrdv.png HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 03:41:53 GMT\r\netag: W/\"dd25-19d1def43e8\"\r\ncontent-type: image/png\r\ncontent-length: 56613\r\ndate: Mon, 20 Apr 2026 13:08:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 115, 8-bit/color RGBA, non-interlaced","md5":"1438eba7413105868266641406f507b8","sha1":"29a51933fd001f7a147edb18c2f28e00cbe39030","sha256":"512c7f94e1886755311c927e4c3c7735d1122caaf418d50fabd79074ed07723f","sha512":"d98d6928160b8db3a20ed834c8b57d8a71607e6e60b96aad61cef27c04f4229a1c6a1b3f1716bd2bfc62ed5295dd512aa9d515ad745b279dcdeeca2c22fa2266","ssdeep":"1536:89rAcV/DwAlK13lVbCE5RG9vzrsxeN7rlSEi:8vIVbCE5RGVsatSr","tlshash":"3743f2df9a835f0c9c6e253a846d822c9f0f977c0ee6f1a0ddf4d6041a54ca4999a3e4","first_seen":"2026-04-20T13:08:54.999027Z","last_seen":"2026-04-20T13:08:54.999027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869543_970.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869543_970.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"c5a-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 3162\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b5b7f1e6c02f9e425a6800198f06fa90","sha1":"8b7845845fee298f999b260f8163638305c40fc8","sha256":"f611959e5bf83a19bd533bd17231aa66e58644f6a592ce58c9d2f4c90e1d148f","sha512":"1fc9fc001747e14d022074d06f69e83ceb8d70028310b622317bfc3e8d1768d83e8f9affa7d534dc47ecbe29b939115d3be155f35a6c6bb86289c74084e0b515","ssdeep":"","tlshash":"0b515bcc4c62469f7a7897afa3a363649a135eb4af218654860c201ca2437193749362","first_seen":"2026-04-20T13:08:55.008727Z","last_seen":"2026-04-20T13:08:55.008727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1588696144804-5e589bfb77ab?w=800","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:27.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1588696144804-5e589bfb77ab?w=800 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-imgix-id: 9d60ad8fcbfac3c3e1e41a0a2a2c6a2bfaa11f02\r\ncache-control: public, max-age=300\r\nserver: imgix\r\ndate: Mon, 20 Apr 2026 13:08:27 GMT\r\nage: 185\r\naccept-ranges: bytes\r\ncontent-type: text/html,text/html\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230031-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, MISS\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 29\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T04:09:27.367407Z","times_seen":14044227,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":67,"dns":23,"connect":26,"send":0,"wait":40,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waf4.shop/uploads/wafe4/wf_1774330869555_852.webp","fqdn":"waf4.shop","domain":"waf4.shop","tld":"shop"},"ip":{"addr":"187.77.64.30","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waf4.shop/","date":"2026-04-20T13:08:28.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waf4.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 08:11:01 GMT","end":"Thu, 16 Jul 2026 08:11:00 GMT"},"fingerprint":{"sha1":"0C:14:09:BB:7B:00:02:65:BB:52:34:06:86:ED:6C:DF:71:30:41:04","sha256":"2B:6C:5F:36:ED:EA:25:1B:06:58:8A:55:8C:90:93:7C:D0:70:AE:58:AD:4F:E0:75:66:AE:24:E7:97:B0:60:C7"}}},"request":{"raw":"GET /uploads/wafe4/wf_1774330869555_852.webp HTTP/1.1\r\nHost: waf4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waf4.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: CyberPanel-OLS/2.4.4\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 24 Mar 2026 05:41:09 GMT\r\netag: W/\"f2e-19d1e5c7508\"\r\ncontent-type: image/webp\r\ncontent-length: 3886\r\ndate: Mon, 20 Apr 2026 13:08:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x230, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"134febcb0111541fee27f9b4e2ce7745","sha1":"06ac45d0cf8927adbb9f18ff5054092d043244f9","sha256":"f84d2253ceed62f898d77c537b4a48b3087b79bac1cb79a11597cfc032dddd2d","sha512":"07f8a2e40c1f389b7d03896b4ffe4dc8bd5c3922e8215396689fcd9921e05d6581db3c1ae914645413d89aa6b9b3175e19868845e5f863bfa1ef4785c827b7e8","ssdeep":"","tlshash":"01816b17efd4981a34638d40f9b88e7116e9340bc05eecc45e0c16c4f7ab5c9d9ea1a4","first_seen":"2026-04-20T13:08:55.029703Z","last_seen":"2026-04-20T13:08:55.029703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}