{"report_id":"f610b334-597c-489d-9beb-42c97de5dd7a","version":6,"status":"done","tags":[],"date":"2025-10-05T12:56:56Z","url":{"schema":"http","addr":"wcbnl.adultpages.nl/624af228086a8c0001e7288e?sub1={campaign}\u0026sub2={campaign_id}\u0026sub3={creative_id}\u0026sub4={device_type}\u0026sub5={device_type_id}\u0026sub6={site_id}\u0026sub7={os_id}\u0026sub8={os}\u0026sub9={category}\u0026sub10={geo}\u0026sub11={keywords}\u0026ref_id={click_id}\u0026cost={cost}","fqdn":"wcbnl.adultpages.nl","domain":"adultpages.nl","tld":"nl"},"ip":{"addr":"88.198.75.39","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"title":"WEBCAMBABES.NL - De Camsex Site van Nederland"},"submit":{"url":{"schema":"http","addr":"wcbnl.adultpages.nl/624af228086a8c0001e7288e?sub1={campaign}\u0026sub2={campaign_id}\u0026sub3={creative_id}\u0026sub4={device_type}\u0026sub5={device_type_id}\u0026sub6={site_id}\u0026sub7={os_id}\u0026sub8={os}\u0026sub9={category}\u0026sub10={geo}\u0026sub11={keywords}\u0026ref_id={click_id}\u0026cost={cost}","fqdn":"wcbnl.adultpages.nl","domain":"adultpages.nl","tld":"nl"},"ip":{"addr":"88.198.75.39","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-09T12:56:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"wcbnl.adultpages.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"wcbnl.adultpages.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":2593,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ts.webcambabes.nl","ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2003-04-08","domain_rank":0,"first_seen":"2025-10-04T12:56:41.897267Z","last_seen":"2025-10-04T12:56:41.897267Z","alert_count":0,"request_count":7,"received_data":325699,"sent_data":3895,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":1,"received_data":13083,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wcbnl.adultpages.nl","ip":{"addr":"88.198.75.39","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2005-06-04","domain_rank":0,"first_seen":"2025-10-04T12:56:41.895836Z","last_seen":"2025-10-04T12:56:41.895836Z","alert_count":2,"request_count":1,"received_data":67107,"sent_data":720,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"77eb86e4a8019e56df50daf115c04b20","sha1":"ccb42a84da5fd16a18d76d62492266a44bdc9745","sha256":"5717fe44de2d1edd4bd209deeee3b13a84f3cf9e6ee5045c1aa7a26e64f60aef","sha512":"c97620a3c75be382da0ddbd8023734e69c72cd89a47b217e19700f2191e4e9e689e955688dd4246979a837c3fc96a77b478311c3b3d564594b7829bc45e127a2","ssdeep":"768:9GVki7Whq9puLMiD5wQNqoKybZxKU7omPVBpsJ2tA74sQPjRM98Vgolmm85QtNrh:EJ+Vp4Wthd8rGZhYGXhDlwK","tlshash":"0d535cca71d2787107b35af6e07f4182f23610753589c8a4b39adce528e98d96272f3d","size":62930,"data":"","first_seen":"2025-10-04T12:56:45.667172Z","last_seen":"2025-10-07T14:44:58.792595Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/landers/LP1/script.js","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"43b9a1b98a46f9855ecaf315bb00c8d5","sha1":"2972d2f86ce2e214b5edf7ba47302e63d16ef585","sha256":"81bc71b2f079887700895b22b31118d002d831436c0233068aac7377b225026e","sha512":"654874930e9190a030016d003e51058303c21df2732e9dfbab3c30f4240e1df3dfb0345e2e0b3fda39f806375ce3d498668eb358948244acb1432df8534fd569","ssdeep":"","tlshash":"8e21ab3ef9e46a77443324fc0d3ba58c6db235273842ed0494ddc8b96d6ceaa1876d10","size":1420,"data":"","first_seen":"2025-10-05T12:56:59.038959Z","last_seen":"2025-12-07T15:34:15.246833Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"616e9e758a699b757f43191aafa99779","sha1":"49f4854d487482a42528abfbc9219d2805e77bb1","sha256":"d11b0c3284d832208743cbd265ebf6b8cea7c7e13b580937eb51cfb64d0b4abb","sha512":"c841bb948cef7e7ee2a90409ff67d3973f6015bb4e250f13765a89bd63a21d35a93e8bd54bc4f33ec7e04c6d07b02615534e6726a723ede5a7735a794e7b2d68","ssdeep":"","tlshash":"dfe028c5f2b700f4074451cf22c7c49c311efd0c0cd600c2ea1742f0253507961c1510","size":326,"data":"","first_seen":"2025-10-05T12:56:59.050767Z","last_seen":"2025-12-07T15:34:15.249418Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-27T16:20:08.485473Z","times_seen":122221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Oswald\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 12:56:34 GMT\r\ndate: Sun, 05 Oct 2025 12:56:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0c56012af167c9c64cb553f4c67193ca","sha1":"aa04e60e172466c3da118fee96f59f1096311d40","sha256":"01612d0ed3d9a676c32ac4b2fbbe5c3d945c45358f335b6de733184b0f6c3fa6","sha512":"feae29d7c330d56ef53fc8f7a8e8c8a71839d5fa43085a07cf98168db5d23369fd70977505d6c1b3997dd6e633170b408bf4e17fe51593b1094af340ad08282c","ssdeep":"","tlshash":"fb41db92482b9480af4b1cc637df3e36ae5e62162414c5755ffd18acdcafe221319b4d","first_seen":"2025-09-11T22:11:43.540402Z","last_seen":"2026-04-27T10:10:33.615449Z","times_seen":1525,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":99,"dns":0,"connect":9,"send":0,"wait":18,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /tpl/mob/wcbnl/ts/lp/ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=0\r\nlast-modified: Sun, 21 Aug 2022 11:30:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=3600, public\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;\r\nexpires: access plus 1 hour\r\ncontent-length: 30677\r\ncontent-type: application/javascript\r\ndate: Sun, 05 Oct 2025 12:57:39 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-27T16:20:08.485473Z","times_seen":122221,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/landers/LP1/script.js","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /tpl/mob/wcbnl/ts/lp/landers/LP1/script.js HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=0\r\nlast-modified: Sun, 21 Aug 2022 11:22:42 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=3600, public\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;\r\nexpires: access plus 1 hour\r\ncontent-length: 594\r\ncontent-type: application/javascript\r\ndate: Sun, 05 Oct 2025 12:57:39 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"43b9a1b98a46f9855ecaf315bb00c8d5","sha1":"2972d2f86ce2e214b5edf7ba47302e63d16ef585","sha256":"81bc71b2f079887700895b22b31118d002d831436c0233068aac7377b225026e","sha512":"654874930e9190a030016d003e51058303c21df2732e9dfbab3c30f4240e1df3dfb0345e2e0b3fda39f806375ce3d498668eb358948244acb1432df8534fd569","ssdeep":"","tlshash":"8e21ab3ef9e46a77443324fc0d3ba58c6db235273842ed0494ddc8b96d6ceaa1876d10","first_seen":"2025-10-05T12:56:59.038959Z","last_seen":"2025-12-07T15:34:15.246833Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ts.webcambabes.nl\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:40:24 GMT\r\nexpires: Fri, 02 Oct 2026 12:40:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 260170\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-04-27T16:11:20.146824Z","times_seen":9069,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":47,"dns":0,"connect":8,"send":0,"wait":9,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/landers/videos/vid-8.mp4","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /tpl/mob/wcbnl/ts/lp/landers/videos/vid-8.mp4 HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nstrict-transport-security: max-age=0\r\nlast-modified: Sun, 21 Aug 2022 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3940790\r\ncache-control: max-age=3600, public\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;\r\ncontent-range: bytes 0-3940789/3940790\r\ncontent-type: video/mp4\r\ndate: Sun, 05 Oct 2025 12:57:39 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114547,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"73655bd47207af2cef76114f1538dbc6","sha1":"b77d5f05411b50600ed79011e22a600078816b1d","sha256":"8635cc6a2fc6d9583ca4cb06d31f9907d8c2312979fc1ba6e112a6b278e30cf8","sha512":"e832f940c55d48167aea7272c38070fff8784fcbda842415da8ed60da8a3784bb9108f74e68e9e3ef64c495dfbc0534aecfe3591d2190b1451e5fbb60b74509b","ssdeep":"3072:8gOzQkLZz9ZQ7wb2V9MO8njQFCUZLdOO+BCRyYL:bOMkJ9ZQ7wb2nMwFC8dOxC3L","tlshash":"fbb3d0eb3b94c9a9eb0091b1f88093a21735d94a4a5303f32dcb53042edf4976e757a9","first_seen":"2025-10-05T12:56:59.041239Z","last_seen":"2025-10-05T12:56:59.041239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/favicon.ico","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nlast-modified: Sun, 21 Aug 2022 11:10:13 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=604800, public\r\ncontent-length: 3358\r\ncontent-type: image/x-icon\r\ndate: Sun, 05 Oct 2025 12:57:39 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ad3b5f5557d7223d7c7788e7ecd3fec1","sha1":"8c63a1a611cc3161f76eaad7b534e9c75e490286","sha256":"241acd96d25a1f9a1a9bc4644ba9be2c8ca84cff25764db5080088c4a2665c71","sha512":"d8635660391468dc04c5f9f58a2e5cbd72ec96fa53eb3d8bf1b2777526c127d27d8b904fe69dbb452cef5be1039eb9d62d832011ddfa9256cf225bce8ea43c09","ssdeep":"192:THSAAHXA6VSfht2OQg7+rnGRFpuwZU10IJWm+h:zSAAHXA6VSH25rGhuwZLAg","tlshash":"dd6211571a32227ffb616b74de63745a8fd80def9f530e870a8839628933451a60706f","first_seen":"2025-10-04T12:56:45.659948Z","last_seen":"2025-12-07T15:34:15.241913Z","times_seen":5,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wcbnl.adultpages.nl/624af228086a8c0001e7288e?sub1={campaign}\u0026sub2={campaign_id}\u0026sub3={creative_id}\u0026sub4={device_type}\u0026sub5={device_type_id}\u0026sub6={site_id}\u0026sub7={os_id}\u0026sub8={os}\u0026sub9={category}\u0026sub10={geo}\u0026sub11={keywords}\u0026ref_id={click_id}\u0026cost={cost}","fqdn":"wcbnl.adultpages.nl","domain":"adultpages.nl","tld":"nl"},"ip":{"addr":"88.198.75.39","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T12:56:34.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wcbnl.adultpages.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 13:13:14 GMT","end":"Sat, 20 Dec 2025 13:13:13 GMT"},"fingerprint":{"sha1":"10:EF:1C:95:5A:B2:B7:57:FC:76:CC:80:2E:33:B7:26:A8:76:41:FB","sha256":"FC:9B:A0:6D:56:D7:9D:62:8B:B8:E5:56:AD:B2:79:B9:54:EB:7A:79:0D:F3:71:5E:F8:45:2F:AE:8C:98:6B:C7"}}},"request":{"raw":"GET /624af228086a8c0001e7288e?sub1={campaign}\u0026sub2={campaign_id}\u0026sub3={creative_id}\u0026sub4={device_type}\u0026sub5={device_type_id}\u0026sub6={site_id}\u0026sub7={os_id}\u0026sub8={os}\u0026sub9={category}\u0026sub10={geo}\u0026sub11={keywords}\u0026ref_id={click_id}\u0026cost={cost} HTTP/1.1\r\nHost: wcbnl.adultpages.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSet-Cookie: redcmps=W3siaWQiOiI2MjRhZjIyODA4NmE4YzAwMDFlNzI4OGUiLCJ0IjoiMjAyNS0xMC0wNVQxMjo1NjozNC4yMzUzNjU2MThaIn1d; Path=/; Domain=wcbnl.adultpages.nl; Expires=Mon, 06 Oct 2025 12:56:34 GMT; Secure; SameSite=None\nredhash=NjhlMjZiMDIyYWQ5ZTc2MTkxODU4MDNjfDB8NjI0YWYyMjgwODZhOGMwMDAxZTcyODhlfHxlOTQyZGU1Mi1jYzQxLTQzZDMtODUwMC0xYjAwOWY2YWM2ZjF8MTc1OTY2ODk5NA==; Path=/; Domain=wcbnl.adultpages.nl; Expires=Mon, 05 Oct 2026 12:56:34 GMT; Secure; SameSite=None\r\nDate: Sun, 05 Oct 2025 12:56:34 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nX-Kong-Upstream-Latency: 38\r\nX-Kong-Proxy-Latency: 16\r\nX-Kong-Request-Id: 32b9887cc9fe000101853c609244ba6f\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":66189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":91,"dns":0,"connect":37,"send":0,"wait":91,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"wcbnl.adultpages.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"wcbnl.adultpages.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T12:56:34.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=2592000\r\npragma: no-cache\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT, now\r\ncontent-length: 23357\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 05 Oct 2025 12:57:38 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":66189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64915)","md5":"6f16eeafcc64fecb693d424bcd91d6c3","sha1":"e1876fa1079e8522827fb30cc139786c4742f6b1","sha256":"3e145af2c19e62188ead47d8bd7548c1a8a8958e8d52872b210e0c216af32fa7","sha512":"2231ea8e4c6d8a4bb902b7132a316326690f22dd24f89ae4563dc642e6eb01ea98c067a1fb92f72345051f5fe019d94c7d6255f5da1d6881f1edea0dc1353a0c","ssdeep":"768:cVGVki7Whq9puLMiD5wQNqoKybZxKU7omPVBpsJ2tA74sQPjRM98Vgolmm85QtNh:JJ+Vp4Wthd8rGZhYGXhDlwm","tlshash":"fa536dca71d2b87217a356f6e07f4142f23610753589c864b3aad8e528ed8d96233f3d","first_seen":"2025-10-05T12:56:59.045057Z","last_seen":"2025-10-05T12:56:59.045057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":82,"dns":34,"connect":20,"send":0,"wait":40,"receive":17,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/landers/LP1/LP1.css","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /tpl/mob/wcbnl/ts/lp/landers/LP1/LP1.css HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=0\r\nlast-modified: Sun, 21 Aug 2022 11:22:42 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=3600, public\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;\r\nexpires: access plus 1 hour\r\ncontent-length: 708\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 12:57:39 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f46e742a5e447cccaf926a863bd33dfd","sha1":"9950ac7685f7506873a353b882c697f374110b7e","sha256":"270ccfb017c876838184e235b65d6a1be4b413c7a5787d6fa626dc0cbde81627","sha512":"839651a5f818c24179718f96865f9d3e46479f39875765abb4ff7d04cabce84a19865c9540414ed7b84d59914ba9bd2f176e535ca51806da5dce7e51292135f4","ssdeep":"","tlshash":"47312653aa552949b20f509c9ee8df94471d84c1af0e4f1af1833478c6490d839b6bca","first_seen":"2025-10-05T12:56:59.046562Z","last_seen":"2025-12-07T15:34:15.243886Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/landers/images/webcam-transparent.png","fqdn":"ts.webcambabes.nl","domain":"webcambabes.nl","tld":"nl"},"ip":{"addr":"5.104.228.27","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag","date":"2025-10-05T12:56:34.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ts.webcambabes.nl","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 09:28:53 GMT","end":"Sun, 28 Dec 2025 09:28:52 GMT"},"fingerprint":{"sha1":"4D:70:2E:35:21:25:C7:2C:B3:0C:5F:47:D0:88:5B:C0:88:1A:D3:42","sha256":"E4:94:92:4E:C9:4C:75:17:F2:9D:86:58:B7:15:3A:78:55:AF:9A:3A:1E:24:EF:17:79:1C:0B:F5:01:87:8F:B5"}}},"request":{"raw":"GET /tpl/mob/wcbnl/ts/lp/landers/images/webcam-transparent.png HTTP/1.1\r\nHost: ts.webcambabes.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ts.webcambabes.nl/tpl/mob/wcbnl/ts/lp/?cf2=68e26b022ad9e7619185803c\u0026comfrom=632738\u0026cfsa2=zsmvdasdag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=0\r\nlast-modified: Sun, 21 Aug 2022 11:22:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35178\r\ncache-control: max-age=3600, public\r\naccess-control-allow-origin: *\r\ncontent-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;\r\nexpires: access plus 1 hour\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 12:57:39 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 346 x 346, 8-bit/color RGBA, non-interlaced","md5":"a054418a735de0dd1d7c394dbbfac8c2","sha1":"9f5e146aef5f73ba4eff5059d5fc02e13f6b1d4c","sha256":"b77380d1c5658282f71c78fb89af6481ce929789a2253c010504b3bb539356ab","sha512":"366337ffcbfd1b2360beda2c5349b8d5dbc4ed6443c3503135c7e85db3787ae383778d8adeb768b6c0868682f20959819835618e82a1d8cae1dcf9d3500bceda","ssdeep":"768:LclYrOAHPTgbJqrfLo8YH90pJEnLKgf7PFswqHjK1y7U5uI0z:LcirOA8qrfLGmoHJ6HjR7yg","tlshash":"47f2f2f1c176a816727a33e216d9a421e09389174cb05f0974cdeb677e2adfd88e74c8","first_seen":"2025-10-05T12:56:59.047742Z","last_seen":"2025-12-07T15:34:15.244899Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}