{"report_id":"fea1a8ad-63bd-40b7-ae1e-2a9a99287f76","version":6,"status":"done","tags":[],"date":"2025-12-13T10:12:58Z","url":{"schema":"http","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"title":"(1) New Message!","dom":{"size":100393,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ea10dea3cc0ce1690724c2b284fb3eec","sha1":"4b3a0c95d3afdf51155226001b7a6ae354d14b84","sha256":"67952cf33af21ce0b3772b5d381c51cd2d6303d9427f01fd1d70808f5b85f564","sha512":"744cb8ca3a978d2cd547e2ca526f1cd24e5f2722019c01e172388de4642c512edabaa8ba1c3bab5cc667be5b69bb00b65326b668abc8db2acec5fd152c5e4b00","ssdeep":"768:Vvusuy5BgjuZuzuXupK+ZMMeLwV7aJ7zVFYEMn46:5grK+ZMMeLwV7aJ7BmEQZ","tlshash":"10a388aa7e9109405b37472dc3df1f64673cd4634429adebf782148b8f87e6892ca247","dom_hash":"domhash354304df44e8d90d8d9ede1a27b74cfa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-17T10:12:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":27}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-13T10:12:37Z","timestamp":1765620757,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.2","port":54237,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-12-13T10:12:37.794766+0000\",\"flow_id\":2146224083116174,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":54237,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-12-13T10:12:37.794766+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-13T10:12:37Z","timestamp":1765620757,"ip_dst":{"addr":"172.18.0.2","port":54237,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-12-13T10:12:37.795251+0000\",\"flow_id\":2146224083116174,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.2\",\"dest_port\":54237,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2025-12-13T10:12:37.794766+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.colorless-round.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"kidsinstancesfavor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-10T06:40:45.682178Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"astronautlividlyreformer.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":52164,"first_seen":"2025-05-27T10:02:11.901601Z","last_seen":"2025-12-07T16:31:44.632948Z","alert_count":0,"request_count":4,"received_data":161401,"sent_data":3058,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.colorless-round.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2025-12-12T09:45:15.295403Z","last_seen":"2025-12-12T09:45:15.295403Z","alert_count":2,"request_count":2,"received_data":208214,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"displayvertising.com","ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":40391,"first_seen":"2020-04-29T21:21:45Z","last_seen":"2025-12-11T13:37:12.195883Z","alert_count":1,"request_count":1,"received_data":257,"sent_data":1749,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-12-12T12:25:08.23462Z","alert_count":0,"request_count":2,"received_data":990,"sent_data":865,"comment":"","tags":null,"fingerprints":null},{"fqdn":"protrafficinspector.com","ip":{"addr":"35.156.221.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-09T19:41:14.303979Z","alert_count":0,"request_count":4,"received_data":1328,"sent_data":1966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2025-12-09T04:23:33.451068Z","alert_count":0,"request_count":3,"received_data":107066,"sent_data":1293,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-12-08T00:16:46.100346Z","alert_count":0,"request_count":3,"received_data":3150,"sent_data":1368,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xq7nk3rlddzu.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-12-13T10:13:01.291178Z","last_seen":"2025-12-13T10:13:01.291178Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-10T15:40:22.980715Z","alert_count":6,"request_count":2,"received_data":171912,"sent_data":828,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-07T22:18:21.627912Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.mens1069.com","ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-01-10","domain_rank":0,"first_seen":"2025-12-13T10:13:01.308688Z","last_seen":"2025-12-13T10:13:01.308688Z","alert_count":0,"request_count":26,"received_data":1158881,"sent_data":14564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-12-08T06:27:05.192108Z","alert_count":0,"request_count":1,"received_data":6707,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kidsinstancesfavor.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":107484,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"xq7nk3rlddzu.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-12-13T10:13:01.316161Z","last_seen":"2025-12-13T10:13:01.316162Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2025-12-12T18:11:12.889754Z","alert_count":6,"request_count":6,"received_data":289702,"sent_data":3056,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2025-12-08T15:35:22.308633Z","alert_count":12,"request_count":4,"received_data":743600,"sent_data":1664,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":172301,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2025-12-10T18:53:35.033698Z","alert_count":0,"request_count":2,"received_data":8018,"sent_data":834,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xq7nk3rlddzu.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-12-13T10:13:01.287805Z","last_seen":"2025-12-13T10:13:01.287805Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2025-12-09T07:30:44.259068Z","alert_count":24,"request_count":8,"received_data":12274,"sent_data":7813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.pemsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":181476,"first_seen":"2023-08-05T12:08:36Z","last_seen":"2025-12-11T16:16:12.212197Z","alert_count":0,"request_count":1,"received_data":122870,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":3,"received_data":103169,"sent_data":1655,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-12-12T12:25:08.01521Z","alert_count":0,"request_count":2,"received_data":1121,"sent_data":865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":2,"received_data":30831,"sent_data":963,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.displayvertising.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":639069,"first_seen":"2020-04-29T17:59:02Z","last_seen":"2025-12-07T22:24:23.568111Z","alert_count":1,"request_count":1,"received_data":42502,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"jcdn.tsyndicate.com","ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":65259,"first_seen":"2024-09-05T14:47:10Z","last_seen":"2025-12-09T09:33:16.748635Z","alert_count":0,"request_count":1,"received_data":389,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-12-10T07:11:03.744597Z","alert_count":0,"request_count":1,"received_data":1792,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-12-09T05:31:12.100355Z","alert_count":5,"request_count":5,"received_data":18690,"sent_data":4126,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-12-09T05:14:37.205883Z","alert_count":12,"request_count":4,"received_data":88933,"sent_data":1884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-12-09T07:16:32.763904Z","alert_count":0,"request_count":1,"received_data":74527,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unrulypause.com","ip":{"addr":"88.85.69.212","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-21","domain_rank":1693281,"first_seen":"2025-06-15T19:40:29.454194Z","last_seen":"2025-12-12T19:57:17.410483Z","alert_count":0,"request_count":2,"received_data":39339,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-12-09T03:36:28.205074Z","alert_count":1,"request_count":1,"received_data":1780,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"31.220.27.134","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2025-12-09T05:36:37.690944Z","alert_count":0,"request_count":1,"received_data":564,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-12-10T16:59:31.038337Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2025-12-09T05:36:37.77139Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2025-12-13T06:25:53.273214Z","alert_count":12,"request_count":6,"received_data":82293,"sent_data":3000,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"994e510dbf9c6de27c8a888f5fdd4977","sha1":"31e19d8ea3bde0c4c90816cc8a577f712407879a","sha256":"58954fc9ac182e574527ee963ee228e83e5cf460c1868f40e77decaad7331ac1","sha512":"4d4d094f18eaa978cc439b2a09343283548b0ad5b5e314a310d3335ff8960605ae50acb0636c98781dbf1c4e889875459bd2b6da0970aec42ea492dfb6f97fef","ssdeep":"","tlshash":"531154543804616a61e21078007ed81d786590f692dc7a95f8ffc59526709c629abeec","size":957,"data":"","first_seen":"2025-12-13T10:13:11.438109Z","last_seen":"2025-12-13T10:13:14.629241Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-12T09:13:54.459314Z","times_seen":1365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5d4274e7fb81261ea718752764483ff","sha1":"f6f25db0d45ca46d8fb052b7e3e3a31fb54a02c9","sha256":"bb28a00ce7bdb5fb4d021e89b59aeff87a5e32dbe6bc6b1052b87a0dbd0f03f7","sha512":"0d9458d0ade28222d87395aed5a0aaa5e35bbdd3621a1b31125fab06aa15ddb50a3c880b9b5d079411d840d8cc3e4e05382bee3596a374daf9dfe89ad54c26e9","ssdeep":"1536:xnkoD7uFiT8yf1MASbLavt9dSziFidJPL6m2EvOrx2Cu5M0pai53Z08A8/PRRMpn:NnnileViOGF9mrx/0JZwSW","tlshash":"4f83e9c835dab81a0ba2e86f137f300bb52e6d947d6d7140d8b1c5f8796831e90b7d68","size":88634,"data":"","first_seen":"2025-12-13T10:13:11.440191Z","last_seen":"2026-01-01T22:13:52.180115Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/on.js","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1fcde5c14c1de212a82cd09998bd4f6","sha1":"0e36c26f9441b479a51537a72130d70f0c6562ec","sha256":"d11811a60546352b551d0072a7ff5e6b9cfcb71ef9acbacf82c6168421952d42","sha512":"7c7f07ebbd2658db5d08d5aaf51f3ab9a3098e9f7720325344f9e7a848733b44e7788e7ee845e97ca03fd55873c45c08ded0cdb103ac6823469a4220b8976e3a","ssdeep":"1536:gAZfgkms1HLfZF6eobm17Oj4QX/nxKReN9fVi+9cm4PFVkX02CKM5GJb2f75rt8:bZfhLBFiWMX/kubX02CK7YW","tlshash":"1ee3a58cfec66b334e13b0ada92f3a1fb136e4e1ad4d4e00d467d185697470ad132ab5","size":153607,"data":"","first_seen":"2025-12-08T11:58:51.14599Z","last_seen":"2025-12-15T09:55:52.028354Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-08T23:13:02.903713Z","times_seen":23252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-12T13:26:31.628608Z","times_seen":13850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/get/2070307?id=2070307\u0026jp=_clczbwlmyrznctrtgsbiji\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.645-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=j_YMuxNPIdLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XmPWit0aHR0cHM6Ly93d3cubWVuczEwNjkuY29tL2FyY2hpdmVzL2NhdGVnb3J5L3ZlaW5z\u0026afid=3774886419110912\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1920\u0026rlp=%5B0%2C20%2C324%2C270%2C24168%2C4638%2C1011%2C3872%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f40178daf2b447a5a93d110609c80d2","sha1":"655ee288a41f1186ea15711cd7f7e287db9e0b39","sha256":"5848a0bd8cc5049766ceecb6b443003afffbc7b54d665c14372ccdd112b87fd6","sha512":"e17f473187b1c76b1856d58243ad887352ef07a9c0cac66419a30157b81b34ca61f80224e48071d038a086fc9faecba75bdd2acbfa6174df2bff722d41dfc516","ssdeep":"","tlshash":"2961636679e7e4d25db66e5607aa0f2de08b062e5a2f64133cfc01d8c7c31f206a6c13","size":3321,"data":"","first_seen":"2025-12-13T10:13:13.30922Z","last_seen":"2025-12-13T10:13:13.30922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-11T20:41:31.240314Z","times_seen":23241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","size":122357,"data":"","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-12T12:52:19.355942Z","times_seen":2220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88023c1f00335d2c929530f9b2250fb2","sha1":"d78137e91506a934c6fda6259bf68c7f143aa74d","sha256":"9a3fcc333240a4f44a503be3c72e2c678cde0f2d2a1c73571d14bebf8bd161e7","sha512":"de6dbd7fd42ea5cdb430f0f6dd9b39e35145d04422f713486c10cdab242d332fd3eb2e5bc846005e19815ef3bd8fb13d37e70f074c24348d993ada78973ea2a3","ssdeep":"192:F4+vqmUo/gEKY8/3Vn16FuUuzKnfdo8E9wqpbztyksr6aBvWDGO:NvxUo/lKp/Tcdnfm8E9bzskU6ZDGO","tlshash":"690209b22282e46d83a50ced657a6868f07a0941348bc294f0fcde533c27547d6f2ebd","size":8529,"data":"","first_seen":"2025-12-13T10:13:11.442713Z","last_seen":"2026-01-01T22:13:52.184189Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/nqkndwtihetas?qZQknPlI=BQOCAAAAAAAACZUAAkogceUlVDt2C2S5uc1UGQOwDTaMJy-RWmUs8L4ytA1M5EY069lYXMuZhe-FF2s47UmvlHwgEUF36n2leRFSKxnTrBaBgYTgTCCuyiXLyoXKh8BJa3l6hImmgly3badAELS6tynvIcN4ukUwRKk6Ae7AJJzDWh_IdeUY-Qz0geJHKJArjBkjf7wsR-IQoKsJ8YxJ6pQopWT93FHI21t9PLInh0fsOXBytsRPPXlIf-Dc-VCf4Em0iKgUTypnEJP3HzWKHd8MubtV2gJ3hsAKCRbyVVcGHBD7420yorrQHm-IG7do0Vhw4U2VQcaZl45EZbqeekpbxuYttpS7aEY_UtDQA84QxMRRQ-d7K7J04I5H-36oyX76ax-Cw0ACNxC4IccJwKbdY4IFMlId7laATIY75CZKSyF5L0tBSPouh6YB7s6RYJKxcY6RWg_QhSCdf-7V77esGcEGV6R-e_5Es5r2wUHnk7oQyHG-ogO32wQPUqXOf8PTTzpxICfw9TxaCV_0xuTlfTpz5eWbSMkRE1b6nBUoL5PU3Ofjzh-v0q4FiOU3hCPM04tneN32lR0KcodXlcP0ln2kg3JHpIJSM8NMruzB39sk83XCdVrgxcpRTwKcZStyxFUDJ6ckEo7hMMnpqJC7J45BeYSy_PZBKe5UXZ-a4YlRUT7EExolkvj1YppxZLI2cGpBpspcIjpk7bHY3pN3Vfm7KrYRjT0R2y9iUQOepQ0j2w3pRjc6GLfOsWYa2UrLEH56wfcqIjJZef8qMy0iI9SHjZ2ZZhFYIiev8Y4TQAGnJSCr04tLngmCpEWGH-oe5tKHh8PZ2xrb18AQRTrvEtlQoGwamSu-u7hkQ1iW5F6b0m37txpT9vSemIBYYu84wEBp_3vjsm1DDqTDz16mIe4PYqF3hEcJJdn7loWUEKxAPDDIh_FJQL5gYb33mHykeYRKj9G_I6wXIjUd6CNbM3lZfjCkchK_rKnnxaItcHQkmb5PNMrWcNDPe5j7p6BPQSyl1FWdAGBbqsCNCA1ltrklQ2yb2GHp7I-kikIzunyCQAN2zKm4L9k-KBRe4eAePI8KEAC_JksVclaVwcNURYocJ7DFf9BBDfT4i3LqHo4NWNNOaFUYJlmw7ev-iWEgNFzWq5nVtd2qNvTMMzljzwMlGACiKpLEFiGpftgq32jsvdgI4-3X4reL\u0026uWVTAtej=4\u0026GyLEvktf=4935018\u0026ZSVfeWka=\u0026tJLepMvW=0,0\u0026qfjldLhQ=\u0026oNwrRMKV=\u0026lERmZSIY=1280,1024,1,1280,1024,0","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-12T12:51:58.265399Z","times_seen":23240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3b8774b533d4311dae55c1da663d5ae","sha1":"697fca4262531d35e047f79a690b743536b07e1e","sha256":"0aa9e29d37e29e2d98a6b894a9dda8296fb6b02296bf43aa4c5a2719db2eb344","sha512":"0333628037e77b06c954b04c1009e8b40ca77fa64cf93e30a338646fe18ad5a83f6594cf7e78771ce674fc4291e4839b307ddbb2afffd0975ab8758a5a29d594","ssdeep":"","tlshash":"0ea002bbb986503c443273f41329768dfdaf091487a12c586b016630e0753db5605049","size":64,"data":"","first_seen":"2024-08-20T20:23:14.991759Z","last_seen":"2026-01-01T22:13:52.185502Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482966Z","times_seen":21540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-12T09:13:54.453293Z","times_seen":1198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/newsx-paper-lite-scripts-js-extra","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ffad9da94fd2bc6f8d8c5d70bf5387b","sha1":"08bb598246c1629d99ba762e4ecb09ee5682288e","sha256":"8f551f920b171b84b58f2cdaf7f82fc915fdf3aecdf1c451de461eac3cba76fb","sha512":"8d0decc2d023b61156f567ebc890f5e764a3751b0ad30a72acaeb7881ee47b400cce7cb4d4035656407c86f3ac8759f3fe86088b87f16c4ab0a439bbb78b0ee1","ssdeep":"","tlshash":"9511a79be7d8a770aa0638b39407342b290c5f01e0c01506d71501485420181cfb5b84","size":1087,"data":"","first_seen":"2025-12-13T10:13:13.375813Z","last_seen":"2025-12-13T10:13:13.375813Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.508546Z","times_seen":22393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unrulypause.com/cfDb9e6Pb.2/5cl_SjWPQv9WNbj/IeyHMaj/ITybNJSk0D2PMHj/I-yiM/j/IS2p","fqdn":"unrulypause.com","domain":"unrulypause.com","tld":"com"},"ip":{"addr":"88.85.69.212","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9718d55050346679c512da8f3c38747","sha1":"88534b421c348b511bd221ee02018ae4ba472986","sha256":"20a5509949440801e2f6ceaf1ffe05898f0310275a9400e7ffc1add536d4123a","sha512":"361e8f4579a7a9aae35eebd4e90a832a78c899be79fbac4cb87b6c4e6170d87c8ce58d8ec9e41598de9149abbf1ba67405ff669f1ce472995625401e18cca667","ssdeep":"768:bZhdZg7J05MLfTF9dFaQNp8JY29c6SboEBkleZ2YoOcLhbbPTgLgooDMiG82IGJs:bZ1g7JFLqQNp8Jr9c6SboEBkleZ2qcL1","tlshash":"5303a6c871c3642642eb507d713b7208723a54656429f028bc79c8e4bcb9e9f8677bbd","size":38035,"data":"","first_seen":"2025-12-13T10:13:13.330171Z","last_seen":"2025-12-13T10:13:13.330171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/68/5e/91/685e915dd72cb02cb4dbfe93f922478b.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d32bfc69064ee6f6da5dca2c94e93ffc","sha1":"60592f7d066165201fd994b54d1ea1775a74b301","sha256":"807dbb9f60ecaa7a38c6084cb2faa45a1d27e60730bb12ff85b036815920c5ac","sha512":"a24662c32774cc88513fabe7bc8f985b7d5a7d0ff2600e705691c795fb4739d26f84ff9ed42583d65356b37db344dc3a5c0308f9063b4113f21803d8e5f5b9d8","ssdeep":"1536:k9yUBg8XFOUGbAVTesz3WArOwlNyBv77NzxpQ2jFFw3PjIj:k3B91cmpUhxpJwbIj","tlshash":"887309487f82b15b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","size":78810,"data":"","first_seen":"2025-12-13T10:13:13.320931Z","last_seen":"2025-12-13T10:13:13.320931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-12T13:01:38.146247Z","times_seen":143664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ab84766a371a99a8b1ac4b480cdcf2c","sha1":"16a0f1eb57fb5eb6cde68546ed48e2bcefd028c7","sha256":"cacde01e443a99503887dcf3aadecbd66dfa8864285248d58529fcfb2540a4ba","sha512":"76c33cc54da2b836bd91106a13997e79ecbe79d3437be00c434734802d9f6705110ca803fa2216ae251ba0646fcf875a55dc48d3d58c16d61f9fae3fdc1dc6fc","ssdeep":"","tlshash":"52a002b7b582113c442271b81319798dfaaf09248790285957056634a0b13d75a0505e","size":64,"data":"","first_seen":"2025-12-13T10:13:11.466241Z","last_seen":"2026-01-01T22:13:52.187504Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"79e4de5cf38edcd4b7c755db0ef384b1","sha1":"da412cbebee2bd569818a15b635fbf3590da48a2","sha256":"d7b494d7721fccf38811e17b5bc389694da850f45f562728703d32595b9975ff","sha512":"b9873b8cc870c18b027ea88d19ea5ae1a9ab9417f7284a437d89caffb637bdde63fd3429c9c79884cf2dc09eb392e9bf063cca7c3e66b70be8ed51da2296db0b","ssdeep":"","tlshash":"bf50003000300000000000000c0c0000f0000000000c00c030000c030f00300c00000f","size":11,"data":"","first_seen":"2025-12-13T10:13:11.473286Z","last_seen":"2026-01-01T22:13:52.179072Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.9397951388287353","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/p.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2926f345fb4641fde74661235b655468","sha1":"3e836fd79a6cf73b85570e5845ebba198eb995fd","sha256":"b3cd4ea4dbe8bcb473b7056e3b9705d5605a61060ebe6fd855377a1c06e4db72","sha512":"3605af943a37409c2899801241c51b7e699d814ec87f76199c2c287ef2517970289bf99ecf81371062156bde7c60628efbda7fcc1c49307cb68f40add3f19dd4","ssdeep":"384:phuEaLKr2ld+l2jzM8EYyzjfku/pCgpLYPQc6vn4:psNLK8NnxyvrpCgp0Mv4","tlshash":"287219dcb1c7b0615367a4b6857f6117ba3a6a14284c8845e066f6c23d3cdc6d237e39","size":16094,"data":"","first_seen":"2025-06-22T14:24:34.344756Z","last_seen":"2025-12-13T16:30:20.392365Z","times_seen":831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.495091Z","times_seen":20840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/masonry.min.js?ver=4.2.2","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b3fc826e58fc554108e4a651c9c7848","sha1":"76778fd446e2ff2377588a7b4ac4d79f258427c9","sha256":"e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb","sha512":"ae192d8d804f7dafd8b7a95220ceb66c0c308a51cdf42c172c20f71f50052e4529b01f8781c5f305e1e0d6c5367d9678f1d908ee4273db594fbb650c56a9f61b","ssdeep":"384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"b9b2848f73407425428bf16696af020fb137655c7a4790acba6ad8db1cb984d2037fbd","size":24138,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-12T13:26:47.985213Z","times_seen":66290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-11T20:41:31.210607Z","times_seen":24292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-12T13:13:03.209209Z","times_seen":11630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-12T12:51:58.283525Z","times_seen":67737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/check.html","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kidsinstancesfavor.com/35/ff/2d/35ff2da05680fc57a56c63dce8032bfb.js","fqdn":"kidsinstancesfavor.com","domain":"kidsinstancesfavor.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7965932c1a7abf0c787026fc49c490","sha1":"557263bd51f98d1b4cd1caf167630841abe77a15","sha256":"bf0176286158c80c692f40f3b87e72de0d4589ede83e289c1345836dd4e13e89","sha512":"ba673ffa9477125959c39411b1825cc5a1e9a4d02056520327a81d5b4796b6e04f18aa27829d7af04c26c1c7f0f5dd5a347baa3c04c17f3bc140a92f247aa069","ssdeep":"1536:EpOvTY8Afd1ow5ZEUjHzQSF63R2LbqKYmEqMTd01yLVH2WQgPrNQCld5h4s9imfD:qXLD33COgu+bAKAS","tlshash":"3ba3c9d97f40f06d4271607a113fa00af25b0e46688cd59ce117f6a42fa866fe57ef28","size":106636,"data":"","first_seen":"2025-12-13T10:13:13.340929Z","last_seen":"2025-12-13T10:13:14.624934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-12T13:13:03.209209Z","times_seen":11630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/js/ticker.js?ver=1.2.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"713b48f26bc87130e2f0a9c490dcdafa","sha1":"d1d247b84ab6eac2f8fee1813756efa33e454aec","sha256":"7b03ff0224edb6094db4bcb2a81fedfda9e74fc38539a1f0ea68b9294445a324","sha512":"06e5f26eec99b0e0e85d2249300f4399f13f2478ef0a18e21343d1544eb36e1fe65c58ef5d6cc2a716e3317dfd15893bc91273420a3020266a28e11eda94c74d","ssdeep":"768:hNdIwMjXE7Hg2njCuSFZlPnXSTxi+jjnZwXoIg8sYCppsQsesDtx7/TnHJcQ:BIwMjWHg2njCzZ5XSTxBjjnZwXoIg8sS","tlshash":"dbb2988da7ee7011473720388a9fa08a797d5427144dd977bc9d81a83fd493843eaef8","size":25210,"data":"","first_seen":"2023-03-08T08:25:10Z","last_seen":"2026-04-12T06:41:35.304645Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-12T13:13:03.209209Z","times_seen":11630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.488245Z","times_seen":22614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.displayvertising.com/kpostal.min.css","fqdn":"www.displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d1c111cc5b3f49bec25b9fdaa0744b9","sha1":"aa5e3521dcb4732da0bc356baa3160325bcb6b96","sha256":"1d305691d12bd3a0b7c2b597ed92936bf4e3fec3e44741e67dc4a853f04b2057","sha512":"e3c521ffc3e9c41499ef3b89f3bd626cd89a6eb2402dca627ec1254584597980e02bab60c32e9ba98004e3632ef28276da62b2566cb5a2cab0a7826c95eaa5eb","ssdeep":"768:bt9rqAYKKeZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC/HCntlqoMA:bbdZzFQ9JsTgZvfzmMzhYrTscpwZ+","tlshash":"51133aaab286282601e742b9513eb316b23305167812d458fcb9cdf96e3ddc5127b7fc","size":41949,"data":"","first_seen":"2025-12-13T10:13:11.399565Z","last_seen":"2025-12-13T10:13:14.622543Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-12T13:13:03.209209Z","times_seen":11630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-12T13:26:31.628608Z","times_seen":13850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"df616caeb320789e7e91f20de85561a9","sha1":"7f5459bed1a8bda033a6b47e3c588e304967ab4c","sha256":"d44c3ae858aa027a52a6519a3c479ec2629b7750a805fa4f2099c3f8b2079570","sha512":"e65a44d6ec8a6bc4f26ef211b7a9c17c53fbd3d914a983f24503e5ed67d3ede9af81b018ca70a504c5ffe9c06653c8f379df0f4090c56bc127f2ba185d723ad9","ssdeep":"1536:mamTvqgUtfwOpstcUn9tdwQYCLE9G7+3mbkU:mamTvqgU0+QY0H7DX","tlshash":"9f6329763151b03c42b120f9557f570af0fd4fa12945a0a1a7b9c6e03c79eeb833ab5a","size":73325,"data":"","first_seen":"2025-12-12T12:30:12.987628Z","last_seen":"2025-12-28T00:20:34.799997Z","times_seen":900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-12T13:03:06.117747Z","times_seen":11837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.519336Z","times_seen":23027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bee41f348c249bd0ba4b121452c55522","sha1":"2526d5e26c0a74bb013f30048afdb5da8bed2d85","sha256":"96955683fe15711bc2de54b8e7cb32e706e7a4a674e077cbb9fc462eb9ff6b6e","sha512":"7e16c02a2b0006f9395e7b1d1ceb4c77cb8f33cb9fca44b3275b9a3f3ff579d5099d048fb0d44c07c0d57c4c89adf7a01bc1ed6b5573a5e1c9f3832e8a43f2b1","ssdeep":"","tlshash":"aee0ab19a9e7063c0cf93d441039ca3d30f868609a73d017506cc82cca3afc40c10aec","size":427,"data":"","first_seen":"2025-12-13T10:13:11.500296Z","last_seen":"2025-12-13T10:13:13.514178Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/js/scripts.js?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f801d0d74d2d65ee704657770eef09cc","sha1":"1c0dbb46eff9c235193e6324b2ec8de54cdd1567","sha256":"106cdead8b3c9a78c43c60f3e11825c52cdbb5105640c1e013904ab21ccff85c","sha512":"3171454e73ed863270157b07ecaeb3e31b4efde47e70ebcd5ba288db0045e741e1567776253ebda22bbf760c54216c472226835117e4f70cc2092ee2589d53d3","ssdeep":"","tlshash":"55710fab771200f4fd72226bbb3b3248ea344077b5009185f45d8ab4af719989561edd","size":3784,"data":"","first_seen":"2025-04-11T01:51:07.767831Z","last_seen":"2026-01-01T22:13:52.149185Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-12T12:55:17.875505Z","times_seen":151648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.507418Z","times_seen":21973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.486771Z","times_seen":22174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-12T13:03:06.117747Z","times_seen":11837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-12T13:12:42.511378Z","times_seen":80036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-12T12:57:47.44358Z","times_seen":656748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"979fb5d208d063dc6c560825ec1fcee8","sha1":"e835893d091de2cd29c6f63e2792efb340ff9f55","sha256":"7272f52fbfef07f583d231c955bf20b81da2a904259ba019abfdb9cef148d5b9","sha512":"7f14e9b5eb634adccacc580b6d77c9c3b4848b9ea9d94b5fb808654c894c126d6ab2d1a1b42e8887bea7ada4a34754fac59d076fc9683916c9c460f0c53de00e","ssdeep":"","tlshash":"f3d023aa287585316299034760bbd39c27a131607b11b34581dccc2fae11ed348b165c","size":217,"data":"","first_seen":"2025-12-13T10:13:13.4005Z","last_seen":"2025-12-13T10:13:13.4005Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.colorless-round.com/ecc874/2f805e3ccb65.js","fqdn":"www.colorless-round.com","domain":"colorless-round.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efb9dd7fb09e546727f040ecfe891ba3","sha1":"ad8080ccd91b597323ff3c1f84c0e456e2704033","sha256":"69a6ba9ee975d24fdc7a2285beda6553b775b73d68da86a3f5e96842dbb689e6","sha512":"2f1960929a5f9b411b3fafb50fca1eec9c5efb5f1774e9ab783e08aac73f5a27cc4cff05df97efc9b15ceb1af6912e8c9e2d43b3c104262ce152d2220bb03110","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvY:OijxEQq3P5Enne9zkWHLS","tlshash":"02a33361350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","size":103676,"data":"","first_seen":"2025-12-12T08:27:45.511757Z","last_seen":"2025-12-16T10:24:59.89006Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e66517d3b08807c606026f5c7597bc3f","sha1":"291a85d383fb791b5e900e33c2506a446cbaa513","sha256":"1c82db5b05628505080952437a7fd64f03942b6e8ec97f799f4f867eaf492134","sha512":"cb7279f3c8bb8a2ddb57da5449b12edd229474f670eb6773a3ab9093bc1079f5ac8bb9dd438c17f54456689e844ab0155328b9b40468de914b9b3ec6886f857e","ssdeep":"","tlshash":"0280000800002c82002e80232e02e2003203883888a800808200083028f808b802e282","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-04T22:56:11.787523Z","times_seen":13605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6119458c10980c5637a312cac743d5cb","sha1":"bb2efe14cc35877dd5a1dee6f3a9cb8e9cbb5ff4","sha256":"9c9822afbfc81c153a59af850c1fd044734104b5b05fbf8c3fe6a5c3585d5fac","sha512":"6eaf0327b99f0b660d197afbfea102fd7fd42096859679b159f2a9289a1715d2ab271000aee5c9c989c5bdf9163df761f2cb9d95879e4611fb8f6678ae82ddfd","ssdeep":"","tlshash":"a7d0a79ba7d8a7706a0638a39007342b290c5f01e0c01506d71501485420181cfb5b84","size":213,"data":"","first_seen":"2025-12-13T10:13:11.502257Z","last_seen":"2025-12-13T10:13:13.518599Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/a5842ff4e92f4196a08ae4959ad8a5ad.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-12T12:57:30.713982Z","times_seen":571707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f7d8de347c01a7e2db152a61112076f","sha1":"e48b6f598f5062a06fa472688e88234460a2574b","sha256":"1c6e5b1d5f996230de764c01d78d57f784080d11b67c05aaec814eb2b1b9260d","sha512":"0d994494619e40e32658cf6deb875dfcb58ce22054dec98a24a6f3be17f002771bcfbe7f4a777091c9fccd59a8f2f553543602123e87430ef972ca27f23df672","ssdeep":"","tlshash":"a7f07d76ff54ca318f7fa365c19b2bc6a7744449c0086796fa2c23860c72a30d0976a9","size":619,"data":"","first_seen":"2025-12-13T10:13:11.455068Z","last_seen":"2026-01-01T22:13:52.183181Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/js/mobile-menu.js?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95079801e103934b5400827b58f81a20","sha1":"76ff8f501132357db688426f68f48057c9ec76be","sha256":"d980ce158727574d15b234ffbe8d27c8e2136eda5ae1854376a434ea27274290","sha512":"d784f65c22788b3f49d23b629840c000c0e933ab7527189bc7ddd2b2062f4a0375130ed2b528c3d857b8d3d12fb279d24a307976171b05a1742acac729d81f09","ssdeep":"","tlshash":"a3717568f63812371dfd61e37bd62aca7a320069bc82587a34dacd481c518c151efaf9","size":3521,"data":"","first_seen":"2023-03-08T08:25:10Z","last_seen":"2026-04-08T01:21:40.857446Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-12T12:57:22.767625Z","times_seen":331790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-12T13:12:42.511378Z","times_seen":80036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96ca62e4024786e3252b965b6b7f0e95","sha1":"c39f49387f472380a5ae8230f8dc3d0fc7c6d3d8","sha256":"18490fe6c173b0561225e8b9136b04689a27328edbaad4da82beda9db3a001ab","sha512":"ebda4b59a43679b3d89bb93c0ab1c3ad8d18a7af5bb2d16d9a3de55620d785512e17e99a84a0b995bba20eae4a8de913f1dd984a67347955963b0327024b046d","ssdeep":"192:wbu+HF/bSuZPXPJkusPuaHezwlp7XlG212dClQplYtyBEqupbbJFkEgP:Sxu6XzsWa+5G2+L/pbbJFkNP","tlshash":"1022f85dfcc53040424d88d50c3bb8c6582d8ea254d954abeb12f5bbed3d66ee34ae0e","size":10317,"data":"","first_seen":"2025-12-13T10:13:13.313472Z","last_seen":"2025-12-13T10:13:13.313472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75f5f2a4d3d27f856321f4258d59a86a","sha1":"e2ebd61550923132b284b8c840b5f6ea5665b2e3","sha256":"66c74e385467a398055b444e6bc66fc2a180e9ea879e46d040cf9eb45484698f","sha512":"ec51ce7d2e638cf1fc97a29ee651664dbd12065153b51ef9928ef48b06e3ec3d285b21e32017c80022bffa94ff882d36864ac2b30e51805f7d5b7227ee5ddb4e","ssdeep":"","tlshash":"d51100793a2a1634c6c5418b317ee7a83e3220317f02a185c26ccc299d18e8714efdbe","size":902,"data":"","first_seen":"2025-12-13T10:13:13.405545Z","last_seen":"2025-12-13T10:13:13.405545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-12T12:57:47.473952Z","times_seen":705614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-12T12:52:19.355942Z","times_seen":2220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-08T23:13:02.900214Z","times_seen":23635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/puengine.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87781e1d7683222115078304d2414b35","sha1":"8bf54dd8a67d75a6f38ab240d47007c12c6e2fdc","sha256":"37cf30c764c95d5900378ec4e56d09a6088a8b90ed7540c0b7cd3abebba37459","sha512":"64b8288978b5e509878a3f527ea8c9fe86fb762f3b09c52e1521a3adfc1bf78f6a262e78cd9bea6eb574acc270ff52eb2647c0d05ea2ca0715a7e330a192b043","ssdeep":"1536:v9zsfUK2AHAuaEGDoXhLAknqLULh9/S1dHWyRj:v9zsfU5mGc9A2qLULh9/SHHWyl","tlshash":"1b93d65d7093604961d2f6fc007f368a686ac850f45e8caa6674d3c2ec7c4ad84e79fb","size":89562,"data":"","first_seen":"2025-01-15T18:31:30.651098Z","last_seen":"2025-12-13T16:30:20.429188Z","times_seen":1461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f0a4a940f35056a791b9f9112d16ee","sha1":"e383bc92370ff8150fe9261e0307c08f4427204e","sha256":"8f99b79612c72262323a42adbf0213b1e1256cb1df6b3b18ba183d879058d8eb","sha512":"5850cc9cc2c2ef08d21d75ad261e2f7ba6ee07ccac784b2e47fa5f3dce0b1f26614b30ce5f6b8ffe6b8859cbc1e8a931f9724596ca1df599bcf8217b43fd7526","ssdeep":"","tlshash":"b681969ae77638dfb2f900f2697a0d47eb614435d6c8d038c9bea3141cb5893c274a46","size":3851,"data":"","first_seen":"2025-12-13T10:13:13.408835Z","last_seen":"2025-12-13T10:13:13.408835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-11T20:41:31.231661Z","times_seen":23592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.506782Z","times_seen":22784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"sourshaped.com/pixel/pure","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"OPTIONS /pixel/pure HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.mens1069.com/\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":87,"dns":0,"connect":91,"send":0,"wait":93,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QUUpDMRC8ihdomN3sJpt++62geIA0r0o/WqFPSoU9vEkqombIErIzmdkwWDfEG4p30C3xNmYvFAqCcCAVf3h8ciE/7k8rIZXQ3o8uYqLkOcMG3SSauGY1puQKc6WcDXBi6SIUdoFHRwdrFBmnAPQn4C/P93NTB3sErqxdOY2d4TI6bLgSeArbvnLJcRkp2lIUqnlvuYFyMi6djr9xcUOQbDpN8IPNIEeSyD1UX/B5XdfPU3P/RRzQ7xEwLf53b7hFHNPRKJEmF76GY31bz5cZiKZVoDIEnp2kf8+lng/14/B+mu2hcdshRVlS1mp1l5bScmq8mO1SXF4rfQHkXJ+mvQEAAA==\u0026cb=e2e_693d3c1570af78.33873786","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QUUpDMRC8ihdomN3sJpt++62geIA0r0o/WqFPSoU9vEkqombIErIzmdkwWDfEG4p30C3xNmYvFAqCcCAVf3h8ciE/7k8rIZXQ3o8uYqLkOcMG3SSauGY1puQKc6WcDXBi6SIUdoFHRwdrFBmnAPQn4C/P93NTB3sErqxdOY2d4TI6bLgSeArbvnLJcRkp2lIUqnlvuYFyMi6djr9xcUOQbDpN8IPNIEeSyD1UX/B5XdfPU3P/RRzQ7xEwLf53b7hFHNPRKJEmF76GY31bz5cZiKZVoDIEnp2kf8+lng/14/B+mu2hcdshRVlS1mp1l5bScmq8mO1SXF4rfQHkXJ+mvQEAAA==\u0026cb=e2e_693d3c1570af78.33873786 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: __uvt=s%3A32%3A%22009bf2abed67db7e842a6924845633a2%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/favicon.ico","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; cf_clearance=Zuw93k_6ORBwycdhlpielyTfV44RBoF3OoVwgaMJ060-1765620757-1.2.1.1-soY8xxjrEw939.2TCnozPam4akwS_u3ludZncEafQfUWFnjUO07RYCWgkrx8MQGzuK_OTVs91lr9Q2L9.XThGJea_fDULpG0jDieXYH6exSFdbfP97APS1ekourJrcMXN5400OXr8jV8FnYtOKRrS1hYrKfVVpfUAqIJg8WYHsmwIVykSlQA0UvrfqEQ170wrAgI.4_sK6eDADFCfGm._3uCFYoYIlHX3ei9Ap85YYw; ts_popunder-cnt=0; ts_popunder=Sat%20Dec%2013%202025%2010%3A22%3A37%20GMT%2B0000%20(GMT); dom3ic8zudi28v8lr6fgphwffqoz0j6c=be211d8d-9863-469e-a82f-4484c0ecbccf%3A2%3A1; pp_main_35ff2da05680fc57a56c63dce8032bfb=1; sb_main_685e915dd72cb02cb4dbfe93f922478b=1; sb_count_685e915dd72cb02cb4dbfe93f922478b=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=realizationnewestfangs.com; _popprepop=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 17 Sep 2025 13:10:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncache-control: max-age=172800\r\nexpires: Sun, 14 Dec 2025 01:38:01 GMT\r\nvary: User-Agent, accept-encoding\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\nserver: cloudflare\r\nage: 117277\r\ncf-cache-status: HIT\r\netag: W/\"0-63efef5137323\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLD0%2FluesA7%2Fdfco6BjGpDZPiSFIoK10mT9MgIXkCQ4JbTgRciE4APVaZ2PmwgwKRUhwbRETdmwC8v8M68hG8cK51PkdeZ%2FZTyJFbt59\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9ad4af31682f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 1263209\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrHa7x7uQGBo47LaH2bJtz5qHQ9t0q6SelTXQxEcMcfhmd6XaK2LFUNniI4Qq7FFRvvLgTuDz2UeA8t%2Bpan59zDuhDh2K3%2BOBfmW1XvIKEs%3D\"}]}\r\ncf-ray: 9ad4af31fff0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-12T07:09:09.814407Z","times_seen":10640,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":57,"dns":33,"connect":1,"send":0,"wait":8,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 13 Dec 2025 10:12:37 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":76,"dns":2,"connect":26,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/pure","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"OPTIONS /pixel/pure HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.mens1069.com/\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":298,"dns":2,"connect":91,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/24e71bfa55d5a8de099ac18a0c8b235be02b215d.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/24e71bfa55d5a8de099ac18a0c8b235be02b215d.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 24780\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-60cc\"\r\nexpires: Wed, 21 Oct 2026 20:43:35 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3tUpFAAwBuUwKDAH31QAAAAwBT3/Y+AG3FQAAAA\r\nx-77-nzt-ray: 2a494a15e461c79b3b3c3d69a9e46b0b\r\nx-77-cache: HIT\r\nx-77-age: 4541109\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-24779/24780\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":24780,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"01933e536028bf3c6d6bc3f96f1e42d7","sha1":"24e71bfa55d5a8de099ac18a0c8b235be02b215d","sha256":"23a856178a03cdcdebc21613461032abf4d4303a2850e282d5c6457a3e282147","sha512":"80f0383afb3359484bcf3a6fa8b49acd6d4086d0c6f19b9f9ecbcc717ead8de6eff23d1d9e1f6bc7a967f2beddd7c224accbc17cabb1cca39d0615c66103e0d3","ssdeep":"384:4xCXKH0edX3Xb6HOT+XzOmaD8hf/iIldpLIB6loY72B1EdOj8zJxhEku67:4xCcfdX3kzVtfpoY7AOdEuR","tlshash":"90b2e0afeaa14456f379823932d84b423613f1353a9fe2369e23b950e519870cc8361f","first_seen":"2025-10-22T00:34:07.170017Z","last_seen":"2026-02-15T16:32:05.740065Z","times_seen":299,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"15601-63f5c5a3185c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 02 Jan 2026 21:11:15 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 824480\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3y%2FETZmNEE5OPgvMR9ro%2BCmYvr6oBLIR%2BzjJCBhg6SpLdwVdDp4T2KS%2FBxj1BgY8DUas4QRewpm2wQk%2BXUzs6kCdIz2CjfZp489q1Lz8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad4af1c9f5156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-12T12:57:47.473952Z","times_seen":705614,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"1590-63f5c5a3185c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 03 Jan 2026 15:55:33 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1814\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 757021\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHCvB6m%2BnYt9BHJI44jl%2B3ocZTbqogsQSVxzQAbYABb3bLJglSIizGvlsUTbBDH4IIHzEM90RmNpxrIl3dPVNV8dlPKFubd0GdtpFvEc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1cef5956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-12T12:55:17.875505Z","times_seen":151648,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/p.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/p.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 20 Jun 2025 12:52:21 GMT\r\netag: W/\"68555985-3ede\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 15 Dec 2025 10:12:36 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16094,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16018)","md5":"2926f345fb4641fde74661235b655468","sha1":"3e836fd79a6cf73b85570e5845ebba198eb995fd","sha256":"b3cd4ea4dbe8bcb473b7056e3b9705d5605a61060ebe6fd855377a1c06e4db72","sha512":"3605af943a37409c2899801241c51b7e699d814ec87f76199c2c287ef2517970289bf99ecf81371062156bde7c60628efbda7fcc1c49307cb68f40add3f19dd4","ssdeep":"384:phuEaLKr2ld+l2jzM8EYyzjfku/pCgpLYPQc6vn4:psNLK8NnxyvrpCgp0Mv4","tlshash":"287219dcb1c7b0615367a4b6857f6117ba3a6a14284c8845e066f6c23d3cdc6d237e39","first_seen":"2025-06-22T14:24:34.344756Z","last_seen":"2025-12-13T16:30:20.392365Z","times_seen":831,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":43,"dns":39,"connect":19,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=560","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=560 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.9397951388287353","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=86400, immutable, stale-if-error=604800, stale-while-revalidate=604800\r\nexpires: Sat, 13 Dec 2025 12:29:18 GMT\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Form-Factors,Device-Memory,Downlink,ECT,RTT,Width,Viewport-Width,DPR\r\ncritical-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Form-Factors,Device-Memory,Downlink,ECT,RTT,Width,Viewport-Width,DPR\r\nlink: \u003c//adsco.re/\u003e;rel=preconnect;crossorigin,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\ntiming-allow-origin: *\r\netag: W/\"32FsrrMgeJ5+kfIN6FVhqQ==\"\r\nvary: accept-encoding\r\nage: 78198\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ad4af240beb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73325,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (801)","md5":"df616caeb320789e7e91f20de85561a9","sha1":"7f5459bed1a8bda033a6b47e3c588e304967ab4c","sha256":"d44c3ae858aa027a52a6519a3c479ec2629b7750a805fa4f2099c3f8b2079570","sha512":"e65a44d6ec8a6bc4f26ef211b7a9c17c53fbd3d914a983f24503e5ed67d3ede9af81b018ca70a504c5ffe9c06653c8f379df0f4090c56bc127f2ba185d723ad9","ssdeep":"1536:mamTvqgUtfwOpstcUn9tdwQYCLE9G7+3mbkU:mamTvqgU0+QY0H7DX","tlshash":"9f6329763151b03c42b120f9557f570af0fd4fa12945a0a1a7b9c6e03c79eeb833ab5a","first_seen":"2025-12-12T12:30:12.987628Z","last_seen":"2025-12-28T00:20:34.799997Z","times_seen":900,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/all.css?ver=5.15.3","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/css/all.css?ver=5.15.3 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"11f9a-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 20 Dec 2025 17:12:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 1961987\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FymICfqwi75X2t7in%2BHfMQpqfXYrfs6ZjNIMaNaAgpXj7cDR0CszpKLXWw79MsXUT0VPtj6ehux45KPCF1GJP%2Bwl6rlyOQMjQrIz2id\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad4af1c7f4a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73626,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5a82ca7f5a4d65c70356ef899bd2090d","sha1":"f12376b08f5a3a03cf8b7f61b55c5071a43b3f0d","sha256":"f7a251575e7b416eaafa887b45d7968dda9ebfd16ac6cf9e642e0d544c7d932b","sha512":"db78331fa4cf778dee9bfa203bca5748b204a95f6acd96fa0d31112d7b2d5f0c421e7786a3b14f151a36726bc209f46049f1667a429356a9302e25ff7e2af73b","ssdeep":"768:0bUiiiukQWIsj4oCSsPcTpsTO3DNnYumL/0ePburmbknH+:0giii1IoVCSicdsa3DNnYueXPKcWe","tlshash":"dd73ecfee1ff10944311e4812743e2e4b329b62cec8a4c98d2a67d9df1d165ca186bdd","first_seen":"2023-09-24T20:35:33Z","last_seen":"2026-01-01T22:13:52.161314Z","times_seen":11,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4cd.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 19:44:42 GMT","end":"Sat, 24 Jan 2026 19:44:41 GMT"},"fingerprint":{"sha1":"FD:D4:B7:E9:AC:7B:28:11:0D:96:A9:CC:26:88:07:21:A3:BD:51:DE","sha256":"E6:36:0F:D2:9B:17:E4:A8:11:A6:86:BE:23:8C:5A:3E:36:6A:2E:39:90:F1:28:C5:6D:5F:8B:4B:3E:FF:1B:12"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4cd.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 277\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"304f17a447dd859533f5b41c0f2464f0","sha1":"1cfaddc961f5f6ff7981a27dec441d4b65d9d2e2","sha256":"adaeabf73cbaaec23155f6a4e50cbe06fa22e25e62a42b2a62611410809b35cd","sha512":"6feda360e0515f16b507d2836aaa202a0a8eab2ad293144713eede03e8e2c637403154c6f60070e5e38927d2b26922efda61ff5f263d508cf70d2ae9db8e750c","ssdeep":"","tlshash":"c0d02b98603ce7418c44c618457bbc8552da60475e144baab1931c1d75443d73841b75","first_seen":"2023-04-07T03:19:52Z","last_seen":"2026-04-12T13:28:32.358147Z","times_seen":2484,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":39,"dns":26,"connect":10,"send":0,"wait":11,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/437080dc4aabae1f7511560c159c11389da0454d.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/437080dc4aabae1f7511560c159c11389da0454d.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35001\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-88b9\"\r\nexpires: Wed, 21 Oct 2026 20:43:32 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3TatEAAwBuUwKAQH3M6AAAAwBJRPCLgG3IgAAAA\r\nx-77-nzt-ray: 2a494a15e461c79b3b3c3d69497f9122\r\nx-77-cache: HIT\r\nx-77-age: 4500301\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":35001,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"44645e48a0a1cffe8ca724d077a7fa5e","sha1":"437080dc4aabae1f7511560c159c11389da0454d","sha256":"ed657f32f3084fcf1131c4685088da565ff1a0e95b838bf8c16b76dc8c6b1ff0","sha512":"f6f9e46ef76e7422a1ecd9294bf60f033816b3da1f9868f7a8a5e78cf7cce7b5482171c57fd6ba5fd7f038be18a6a94f2b309b02e6f8fc780fd9036c953394d5","ssdeep":"768:vSzBxpINwHdJ7ecafSnS7Ves0yNSPB+22yf8NQfGDjKlIA7k4:KzBxpuw9yaNsbaftoKG34I43","tlshash":"d7f2e1e2fa6162eee9031ab18d4f67c6876688291c9db8183951c9fb36e0104ddd3f53","first_seen":"2025-11-15T18:26:14.476843Z","last_seen":"2026-04-11T17:48:40.818067Z","times_seen":383,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1SSz2skxRvGq7Ob0_fw1XVZTwsj7EHBTPrXTLpdNZhdo8GYhGwkhz1IdVX1pEx3V29X9_RkEAkGlj14mL0JXjrPJBvUIO4fIISJt4Cw4ymHBHH_BGHPMslA8D2879N8-vC8z1uPd4tz4qCgpyufq66MIjrdqJu1t9dlwlWpa0trNcusm3dr6zJpundrnVHL2u9Zjls336l9ItimmrZNyzQt06rNy0yEqjN9QSHTQ9-q-2bdtetWw0Un---3LgxoaoC3z8kNSD78_8vwISQbIIl_vS_0Zq7Sdz-Oi4jmKkObH3yRbCaqTBBfyTAzECYH47-h9JCQ7yegkoPxBlDtvdEGCOSQTNw6Q5AcjG0iaO9fOg0iiAQB_x_K9gAiGkDSAZjageQvCMA4lpaRxM-WVFbSrUtKR3RIrr_6B7IckutnN5HEv8xFslN7oKIilyrR6IQVZGcA2RogLY6Rdw3I8hgs_xaS_0GmXy0iifeWdaQg-emdQNiWxT0-5XtNZ8pt-mKKenY45bqey0zBAsbCi4hkOADVEyi0gUIaKEIDRWog5qc11_RcZlGnGfqczZgudV0uAtP3bNOkPptBwUbee8jTHljUA8u2kWbb2JRPXzRuICuOoDcqaG5A5wRtXqEUBKUmKClBKQnKnKBsV_s80raunvFIF4E1nvZ4OlVf5a1duq_ylkgIaNZDxqs9mT7SO2D5tX431LyvRo0GedWnAa9203Py-ihZ44fvJrEpTmtNryF8q8H5jM0C02aBy4NQ-E7o27Y74wXQsoLUE6DaQFcOyVtfLyGVQzJ5-xECegwdHYPJ10CL26BlBbpRoZscxiLRltn060zF4KpCml9HvmXsRufkjf7q2tzRxYG_3PkGgp3MvnQuCiyrkGYVvpK_E7SiJ_1VVZK9VVVq8nw5zWUsu3R0_Ac5zcW1nz4TW6XK-MJ93fvxIzYCI3m4JnS-SBMuk5YmP89JzkU2rzImyG8Lel0EK4XemCuypEgXV-7NL8RpJrSWKhmAyiEhzyfB5JDcvPfhxcNuem-CpdvQ6cns3zcmjx7fOYNWBEFqIJJD8unDvxCJK0aDClqckHEhuNK7-glamQGa7yCJK7SzCu2oAo160MW1fp5mJ7N_jrMIIqMfRJmxF0RZ9PQyKy1Pa6EjbGaa3kzTcrxQWI7LWdjwXJ83qek4Arkeyg_ev_VvAAAA___ziI5qfwQAAA==","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:40.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1SSz2skxRvGq7Ob0_fw1XVZTwsj7EHBTPrXTLpdNZhdo8GYhGwkhz1IdVX1pEx3V29X9_RkEAkGlj14mL0JXjrPJBvUIO4fIISJt4Cw4ymHBHH_BGHPMslA8D2879N8-vC8z1uPd4tz4qCgpyufq66MIjrdqJu1t9dlwlWpa0trNcusm3dr6zJpundrnVHL2u9Zjls336l9ItimmrZNyzQt06rNy0yEqjN9QSHTQ9-q-2bdtetWw0Un---3LgxoaoC3z8kNSD78_8vwISQbIIl_vS_0Zq7Sdz-Oi4jmKkObH3yRbCaqTBBfyTAzECYH47-h9JCQ7yegkoPxBlDtvdEGCOSQTNw6Q5AcjG0iaO9fOg0iiAQB_x_K9gAiGkDSAZjageQvCMA4lpaRxM-WVFbSrUtKR3RIrr_6B7IckutnN5HEv8xFslN7oKIilyrR6IQVZGcA2RogLY6Rdw3I8hgs_xaS_0GmXy0iifeWdaQg-emdQNiWxT0-5XtNZ8pt-mKKenY45bqey0zBAsbCi4hkOADVEyi0gUIaKEIDRWog5qc11_RcZlGnGfqczZgudV0uAtP3bNOkPptBwUbee8jTHljUA8u2kWbb2JRPXzRuICuOoDcqaG5A5wRtXqEUBKUmKClBKQnKnKBsV_s80raunvFIF4E1nvZ4OlVf5a1duq_ylkgIaNZDxqs9mT7SO2D5tX431LyvRo0GedWnAa9203Py-ihZ44fvJrEpTmtNryF8q8H5jM0C02aBy4NQ-E7o27Y74wXQsoLUE6DaQFcOyVtfLyGVQzJ5-xECegwdHYPJ10CL26BlBbpRoZscxiLRltn060zF4KpCml9HvmXsRufkjf7q2tzRxYG_3PkGgp3MvnQuCiyrkGYVvpK_E7SiJ_1VVZK9VVVq8nw5zWUsu3R0_Ac5zcW1nz4TW6XK-MJ93fvxIzYCI3m4JnS-SBMuk5YmP89JzkU2rzImyG8Lel0EK4XemCuypEgXV-7NL8RpJrSWKhmAyiEhzyfB5JDcvPfhxcNuem-CpdvQ6cns3zcmjx7fOYNWBEFqIJJD8unDvxCJK0aDClqckHEhuNK7-glamQGa7yCJK7SzCu2oAo160MW1fp5mJ7N_jrMIIqMfRJmxF0RZ9PQyKy1Pa6EjbGaa3kzTcrxQWI7LWdjwXJ83qek4Arkeyg_ev_VvAAAA___ziI5qfwQAAA== HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:40 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+d47e34007ce31b6f938cc3520c48128a=6259582; expires=Sun, 14 Dec 2025 10:12:40 GMT; path=/; secure; SameSite=None\niprc_l:6259582=1; expires=Sun, 14 Dec 2025 10:12:40 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bc18c445543b209c7d909a59964d82cd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/bootstrap.css?ver=5.0.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/css/bootstrap.css?ver=5.0.1 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"322ac-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 11 Jan 2026 02:46:05 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 113190\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrL3itKFwQYbGHyGtfFRKomUwmPNnKX9P%2B63UL89wm0LyozHb5SgXjnrb7OqZ97y4rHt6%2FCwl3Gt31QeVInpQd1rDqGk%2Bkz5zPXBcqW%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad4af1c7f4956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205484,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"346152dfe092ca2554e4c1c31817461d","sha1":"1a414baa3e3a9d8ffaec9b440c6931d5a5a20f2e","sha256":"a3e02c7c21e3ec0d4ce57826d6426666218422f31013342aad7cf6d3bd869248","sha512":"73d37f5ead27e2b41dc825c5e1182b4580003929cd243a7c35620bb12531fb7df35b268c6d75efa9a8e03b4517c9b45d4c6569c6adc506b706c1a6e45ac4fc38","ssdeep":"1536:QkwVPq/pcLZII8RhiHr6dHvXF7AC2LdQVUaSyWrdFZKOl9IO5Mq8d/ALfLNL0:QmcLb8d/ALfLNL0","tlshash":"1214325dfdf11808345785a864dbbbf57b7e8082d60ece7ab5e23264cf493c15c62a88","first_seen":"2023-04-25T03:44:16Z","last_seen":"2026-04-11T17:41:14.697906Z","times_seen":255,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/webfonts/fa-solid-900.woff2","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/all.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"13174-63f5c5a3185c0\"\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ncache-control: max-age=172800\r\nexpires: Sun, 14 Dec 2025 01:38:06 GMT\r\nvary: User-Agent,Accept-Encoding\r\ncontent-type: font/woff2\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\nserver: cloudflare\r\nage: 117270\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHSnLoZD23HDREQawR1nlFgIYxumUUt5AI10PEuzA2wZTXy0fpr8Ef458uvdPPoLWN1DhlzG7DC2HCjmwuNMWxKnMTzNZqu2aHX2KbHI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1f4f8d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-04-12T12:55:17.858292Z","times_seen":123085,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA1VQW24DMQi8Si8QCzA2kO/mt5VS5QDbzW6VjyRStopaicMXO+nLY8nYDMxgAiorpBXmByhrpHUWN0wGiSlhYX963jqjH6fTglAtjeejq6mRughooytnZWcDBFBHjEzFCoUcqTIqM3js7BCgkplblADQBXz38uib3dYxYQ29+0Hu2LWdojhiJIUPBOq14zSQSd4zK497K1CKTCojoFQlCzr8dww3JCSJJH3fA6vGzciZwlYs8P48LJ+n0f2HdvPspU9BrUGr8z+NfqF3sZgvFEtngi/pOLwtl2v3g10qobVGzRC2T7oOl8Pwfjifer4VxfTzK2itdZaZJPNMLFJ4tjwa24RfsZsVgcABAAA=\u0026cb=e2e_693d3c15708054.32964139","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA1VQW24DMQi8Si8QCzA2kO/mt5VS5QDbzW6VjyRStopaicMXO+nLY8nYDMxgAiorpBXmByhrpHUWN0wGiSlhYX963jqjH6fTglAtjeejq6mRughooytnZWcDBFBHjEzFCoUcqTIqM3js7BCgkplblADQBXz38uib3dYxYQ29+0Hu2LWdojhiJIUPBOq14zSQSd4zK497K1CKTCojoFQlCzr8dww3JCSJJH3fA6vGzciZwlYs8P48LJ+n0f2HdvPspU9BrUGr8z+NfqF3sZgvFEtngi/pOLwtl2v3g10qobVGzRC2T7oOl8Pwfjifer4VxfTzK2itdZaZJPNMLFJ4tjwa24RfsZsVgcABAAA=\u0026cb=e2e_693d3c15708054.32964139 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: __uvt=s%3A32%3A%22009bf2abed67db7e842a6924845633a2%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/main.css?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/css/main.css?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"4fa2-63f5c5a3185c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 11 Jan 2026 02:46:05 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4254\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 113190\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZW7pUkGeAMz2AVLqmHtv2KX0N4AOhubDDs%2BXxODzFSUANl5oTPr5q%2BRnYk6J7qrwn74YDtuh6AZtwAshxajdyecvFMW1TwgDQhxoWPpQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c8f4d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20386,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"a324cbf0e64e95cf9b1996c93c26c45d","sha1":"37d8d9f20a6abbd2b525f3146fe9adda39e993cc","sha256":"42afbba0c24ac8ea17e12583313b3b9d91d2cae7862eb86ad17c9c5b4b7d6331","sha512":"a096b85b424e6ae708c5ca92dd24a6c5bacd07f3f4ec01e7712c4c64a91d129aaea4a9cae80e6933fcf9ab5055324889a3152da98c28c7ce39a76015bd0c7644","ssdeep":"384:kTdRmw6rpO15ZKo0jPcjwwQQkcUtUC4S6I06:kTdYwmpObooWHCkcUtUC4S66","tlshash":"42924298d216624515339f79fbd196297bfd80638e0203a97ff54105a3cbba812a3fdc","first_seen":"2025-11-28T23:37:40.275208Z","last_seen":"2026-01-01T22:13:52.120352Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/js/mobile-menu.js?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/js/mobile-menu.js?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"dc1-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Wed, 07 Jan 2026 16:58:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1135\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 407627\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xU40aW%2FWP8HPL8Js%2F9Cx6YjK65zrKOFt89xspynkW1MRiFYZZcZ6AjxBB%2Bk9gKKo5g7qDMCq6vPhK4oottgjrqo%2BBCy82VKL%2BH8GZ2Eg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1cff5d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3521,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"95079801e103934b5400827b58f81a20","sha1":"76ff8f501132357db688426f68f48057c9ec76be","sha256":"d980ce158727574d15b234ffbe8d27c8e2136eda5ae1854376a434ea27274290","sha512":"d784f65c22788b3f49d23b629840c000c0e933ab7527189bc7ddd2b2062f4a0375130ed2b528c3d857b8d3d12fb279d24a307976171b05a1742acac729d81f09","ssdeep":"","tlshash":"a3717568f63812371dfd61e37bd62aca7a320069bc82587a34dacd481c518c151efaf9","first_seen":"2023-03-08T08:25:10Z","last_seen":"2026-04-08T01:21:40.857446Z","times_seen":175,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unrulypause.com/YL2Mx_p.ZOWP5Q0RZ-GTFU0VYWT_9YyZcambl-kdPeTfVgi_NiWjVkilM-2nNokpMqD_RsitYuzvV-lxOyDzFAl_YC2DREhFM-GHYIzJNKj_kM4NYOWPZ-lRYSTTYUw_","fqdn":"unrulypause.com","domain":"unrulypause.com","tld":"com"},"ip":{"addr":"88.85.69.212","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"unrulypause.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 12:56:00 GMT","end":"Sat, 21 Feb 2026 12:55:59 GMT"},"fingerprint":{"sha1":"76:B6:43:77:B7:83:C1:EB:B5:87:32:59:95:8E:DE:A8:AD:33:03:8F","sha256":"C5:7A:24:CE:7D:F3:A6:FB:E7:F2:42:8B:E5:21:8E:E8:31:AC:D6:D2:8C:46:42:B2:48:4B:1F:EE:52:58:F2:74"}}},"request":{"raw":"POST /YL2Mx_p.ZOWP5Q0RZ-GTFU0VYWT_9YyZcambl-kdPeTfVgi_NiWjVkilM-2nNokpMqD_RsitYuzvV-lxOyDzFAl_YC2DREhFM-GHYIzJNKj_kM4NYOWPZ-lRYSTTYUw_ HTTP/1.1\r\nHost: unrulypause.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 73\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":73,"data":"ref=https%3A%2F%2Fwww.mens1069.com%2Farchives%2Fcategory%2Fveins\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-length: 0\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=be211d8d-9863-469e-a82f-4484c0ecbccf\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=35ff2da05680fc57a56c63dce8032bfb\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=be211d8d-9863-469e-a82f-4484c0ecbccf\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=35ff2da05680fc57a56c63dce8032bfb\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7963d6ea96c1c66b02b1bb2ef4ea6b31\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":283,"dns":0,"connect":92,"send":0,"wait":95,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/archives/category/veins","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-13T10:12:34.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /archives/category/veins HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://www.mens1069.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.mens1069.com/wp-json/wp/v2/categories/590\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\r\ncache-control: max-age=600\r\nexpires: Sat, 13 Dec 2025 10:22:35 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VADYcQW8aNE1kOHYRmvzRNFgaVY8AwcyOPOfWKo7uW5oSfLjzWCXqFhUDrg7KT2Pm%2FEKZCHxl2HAlWbSiE6350iAyD5SExgkQ%2F0y27d6v9U%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=739\r\ncontent-encoding: br\r\ncf-ray: 9ad4af16d8e35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":201876,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13363), with CRLF, LF line terminators","md5":"fffa030c86f0ca6f6bc42e3ef7cb943e","sha1":"e398525a6144336f24f39c0b1368a0f44d86973a","sha256":"b5ac0b01739c011fee020c72c8b1efcc8fd1ed4d4d2c6758d9d7c445c0fc1760","sha512":"fdd80d15e8b9382c63e8a932f6c81d111a0ef5ddf56ddeb51bd6ea2188374d5030a4b419001b3542daaa4f750c910d97ee1c7ece3f76c36de1d9fc5e4a85e78e","ssdeep":"3072:h8NK9GN6xnnileViOGF9mrx/0JZwS2tYd6zczHmuTb+RKY4:hficLzx/0jzd6zcY4","tlshash":"93143ba634def03f1b91f8d9267bb10ea4335859ed48a6c0a1f1c9acf950f560077a6c","first_seen":"2025-12-13T10:13:13.295332Z","last_seen":"2025-12-13T10:13:13.295332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":747,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/default-style.css?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/css/default-style.css?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"1cb0-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 21 Dec 2025 03:27:31 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2112\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 1925104\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbCVzlu1tIEQyZxS0yYlIaCjGEICcYh8jymjI47Ym6%2BHHlSfGXFcBBBqeqw3FonDQv1a9xPlKwzVdk9NoUCHidO8U1bkSU2FKUMIT0Ic\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c8f4c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fe2cbea6bb563712bdab551922cd31d4","sha1":"e2bff9810e525855d55748fd4743171b20891b22","sha256":"363d016c838656d59283fe634b63e3476d3fc15fca2bd57f320e60d92f51f88f","sha512":"41378f0b247d48597ece12f9153342715cabc3d77c02007a4c2e5bb3b14315aad65ae8ffe174f4e8573efe8f879afe5f45516b00a6033d7b2455f3a7a3aa6bb5","ssdeep":"96:OsLyn8jZDS36Cy7nOiLSrDsNw3BKltKL+89aiPNu9s/TFvDVFm:3+8pSqCy7nhNUN5/TFvD+","tlshash":"b5e161352e602d45913fe268afcce722da6d81238f4e5efbb8454408c78db5411eeb5d","first_seen":"2023-09-24T20:35:33Z","last_seen":"2026-01-01T22:13:52.168281Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 18:32:18 GMT","end":"Fri, 06 Mar 2026 19:30:50 GMT"},"fingerprint":{"sha1":"9A:CB:17:6D:8B:24:6D:0F:99:B5:FD:4A:00:CB:D3:DE:2B:8E:84:93","sha256":"3B:72:94:40:4C:CD:DE:97:5A:DF:6C:E1:90:81:0D:BF:33:9E:10:3C:16:3A:61:15:FF:65:B0:6B:5D:34:32:21"}}},"request":{"raw":"GET /sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Jun 2022 15:37:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByLzgtEW1fn2CRScAQi1fdd1aYCxy49Zm075gPrBILD%2BweuLwnc80Dg0YCMpNhqOGrIRALt3CczUfi5%2BUadBVU0yFL4mLfdqAZdfatc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ad4af308bf3b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3069039fb65877459a52e10be8c00f66","sha1":"15fca88fa2ad1344333421bd691cb4345923c214","sha256":"6bd6d71714163cd6c64ee6f1f318b16db90f93e6b09d6ea925a54a1dba92851e","sha512":"ac070d5917627b1a4ccea03d7005f39b36fd3548ceade646c7313dcd370cea680410f8e963445aedadedf4178eceda028030782b547c8ad3d008d11329a935f4","ssdeep":"","tlshash":"64114c252ef8c4b300969090bb357f1fec80e283984f6940b3bc45659f9ade6cd9380b","first_seen":"2023-04-06T22:23:51Z","last_seen":"2026-04-12T05:18:53.647231Z","times_seen":1378,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":119,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2005\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8500-7d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1834522\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aV4qh6STpmkbzyQXrLZFx6JBHe8Q%2FoRFyTduraVV%2FYG3CwB00U7h%2FOKL7qfi2mx1nsA8i5ZbUvaWxnTiu2OEstdwjjjrhtEbWFHNKZvqZgg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad4af323d245fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced","md5":"2cecae5111d5ff932a996679215ad573","sha1":"f4c63abb5dc373aba5bc144c3831d98516cc7cc9","sha256":"31f6aad6a88eca32f245dc6d0e030ef422f306b4f8479855b30e59b6dc134ebc","sha512":"f1a62cb77df45c07d203b3e4a31964e8267371a6bac6fe45be07cd178c5e1e1815ab4a3586626b616355d653365707eca6d2a2d950614227f017b854f5c1e072","ssdeep":"","tlshash":"ed41b407fba09d106a9df9827de822532b3b17809ac2b542fddd485398f00fa8b5d1c2","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-04-12T05:18:53.588784Z","times_seen":1554,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Thu, 11 Dec 2025 17:46:43 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3ExQAAAwBuUwKDAH3BAAAAAwBWd59LgG3jgAAAA\r\nx-77-nzt-ray: 2a494a150b479e87393c3d69b8642e24\r\nx-77-cache: HIT\r\nx-77-age: 5139\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/js/scripts.js?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/js/scripts.js?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"ec8-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 08 Jan 2026 21:58:54 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1270\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 303221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jYIb%2B6zaniBnSA%2FKj8ZPjlHwppom6AXpglYRfMgxE4qU60148mQScWX8lBezbi5B5d2qFVLTLJMRPN6DFdDtIuvFY11kQwunEqgXs%2FW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1cff5f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3784,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f801d0d74d2d65ee704657770eef09cc","sha1":"1c0dbb46eff9c235193e6324b2ec8de54cdd1567","sha256":"106cdead8b3c9a78c43c60f3e11825c52cdbb5105640c1e013904ab21ccff85c","sha512":"3171454e73ed863270157b07ecaeb3e31b4efde47e70ebcd5ba288db0045e741e1567776253ebda22bbf760c54216c472226835117e4f70cc2092ee2589d53d3","ssdeep":"","tlshash":"55710fab771200f4fd72226bbb3b3248ea344077b5009185f45d8ab4af719989561edd","first_seen":"2025-04-11T01:51:07.767831Z","last_seen":"2026-01-01T22:13:52.149185Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/8328113056b1/0.7571677091266907:1765617771:jirvafj9mM0spynnimgORdC-1LKZ1_JGft7VWIlzZbQ/9ad4af16d8e35ebd","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/8328113056b1/0.7571677091266907:1765617771:jirvafj9mM0spynnimgORdC-1LKZ1_JGft7VWIlzZbQ/9ad4af16d8e35ebd HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12192\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12192,"data":"pMeK2Yj0Rk8BjBjyTO$O82HYO1eOIOAKvdJKRCOHKQhRohsATqOGKphYdsONOEEOCqsVOqDR$o2$JRTTg$JO$nnCYKj4UgNhj9kOJMKT9qigejX5upfw8PxKOEHQ2JJYdrOhtlnVTOj-wl2mAUO5EWU7AavOVu5DjpO2eKo2Re16Yh1n1OCmAW8kVBdKOmgYdFZkX+p12pjpDOytxO2DjlePkOqm-$bSO$4x3YLieYWo7QL9DOyZeO893hiG$dVThONKLd1SSfOKOAgskDhHOOamPxpHjdnJOf5zGHUqMd1ZDOlZeD5YSFTayTPMT5sOAvVgeCSxDOjry7kgeO15qn5ZnvONygO5X16vORgK+w-QvrCvOmZH$gPWPRzmbPmbeaHy2P-n3kgq3pjkNgx2PdXDgCoOeOKBmYrFyKOrk$Vz5MD$MOvsV$nwv1oskSzn7w0u$4GvO0JAeOO9k2X-9Up70J6ZJOyR1DuAYsmh9-0-akIIg$wv1sn75iIz1PzkKjYeytIHRSKpPxoevJAi8F2YypXMGjouHkpjV-4YUKg0Pbh2rkZBO4WDWSpjzZSHiPjB3v-lQ28dqpOOMz6AS$io1-+biKF6JX3BH9k6gytbOlDydrnywAgH0nHvEyjisWsfJA6JGZgKN8MSPULduTl3jaeFWwT8VkUvyCDUatdRWVOf5AkyG7VJCKh4uP55GK1XZ4S9+O1W6PgnvsZn1uIQk8jDXnp4mbbqFrHpm+IXZS2PrmSDXbCv5mwTVpKekKY5sOjfN7H8rqrfjxerH7hiHF9JAj5auyKDjkjDzj0U0nCwJFXRvsP9vBQHvfHbdfAskJg7OkSF5MgrIpNajCOM+Jts1UJrjkglfRxqrWjMeKCKR2DCYMgeoRehMOYxhJDC$nHrCvllpXDGPo8O87HAjNdxa1sjHKrkKPvY32FRRkjNzTnHfjWbtnu6NAz2xnHdv3kOqRR+Su7Ia9djMkrFRbg26ziiKxiE570AChJTCbnJ$x3u9o4vpigs$5DH4YQOWx$RLr4DmgVZtkKb8DyviOgMZY4gYAPi$p-BskQtGSVp-FsR$goS31SyNvrAFjx2rdCWAYXiIqrdjYItfuWCrzeiGeQKCdSgCI+iOv0b8VBjyzsRvh6vQOg8eGPICREKz7Db5hUrP5sU1nqD0rsm$jM2qBoh0kY8egAFjR47fYlszuEW0zgTS+ioRxeKDAjZ7NU1Rrp2i9rpexQ3DCgvzHRv$zMieRyxyE4P1zbh6Y8oeJqGvNYmqkGyV51O$eT$HMu8OjgnqOJxz4b2hKYE5KDRI0xf8OerG7R1qdjryH7C1FeF7kWJD6YrAFoV9JZ8PtvyxYsND88$we3m5rrvskOFY6Iw0REgruRXdrF8PlwF5H53gRZsO6u0wHFOj-HJZ$qIJjd-D6AD5yYCheJywdfOH612HHY1l3TwLdoFG5IoyRR6U0Oj+KZv1ldqV-iJva$ATXDfATtnEATHnM3JSHx0egdmwB8VSFiJ8lhM2VQ3WmTOt+S51yWvyUr+FjmdRaWuFWDR+t+-K0kBrurOguuxnj0KD8D545+pWGFuqnDfQejjI0zOi9KTKsOFB4OOND0Ofj$RBMK5IAMNhXFZjbXh2klo3nxrA9pKOpHMgejYWrNr6ObpJUyojiAsAhOD+JdRXxSfgoCJDJroSkIBzaAN-Biv1Qz4hhJ3et8gmDRz6HPprglReCebjfPFAYjmuxQtenpPfykjMLKdmLrymo2umxdYIe-EvkM+M$mf5NQtr9hDSREMWkE5M3t1lFjICgpkLeGr5qM5jlR0lojezH2POzjlnl65mmiYuAlIHNY6ChjsSleOVzq2ekn1rzH$CCs3OPjIC0e6qgY5sMxxKdrKOQE-6SnHnrMONYgCKpnijWerCZZNnHU8HpYyO2KOkRLTJYmvweTewgqn1sJgJQZF8AvSBDhJNEwlmtXKdaOWDZOpjZEXbtkn6SEn3OJ2eV0AA2p6ZDNMI9sz2Q8l9jxztJODKL5RCKReorLmvjVqbdmtsOCEHj6jYzsinRneSplgLMn3oKCdoZV40KoqtZR5pTsVveAOPjiD-zsoDox1ysNxHJJ1IH--4Ndz5UJ8p6LkD$UxCvz4x6XHvpGkKj1PwmpiTsUd-JVH6ElJOgfy6mZ$dnSzdlkOgDbhFOnpzjJVSd40+2WQnEV3lSXyL+pfiioYTPZmnPYY65RGAtnVSoyLjvzHbjvRTNYGPzRbs0iTS4boyrUyXpGxh2JRGas-eAmJTo4gxrYxjEEUdVBeaZ1NzfequPuyfj8bvKlMBFs5lkNCvAynoaPuqyOmIe7rnez$H8Hqoj8HnXvleTJPFi1dmDeit$JJJI5CNlCMXg917RSvQVWE7gHZEiYo156wgBXnAkl9mKht0fE6XZVrvS1PzRyhneH4sgJhKOWknq1hOHRwlhgzZ$Rbb$Z4vOtwe9R2242+zgFqeL8H6trex+dq3hZzlkgPhDdLoImPxO2yC$tal+8NynvieVInF-F0Zn$xrSrn5CqyfOyw-lK58A-8IxK8XMRQmR+JSKtjHJTahxKC3TakZOe02iqkJX0lMGMUdIwRpefg$g4S5ZykNIqoC+dd6ORgvppz8SOleYva8Dd+eHlBwFEkb-JzWG1HdVKxm715bRxKf2nNCY9Onw8WXz80XD+1AxK51-WyqK4CeQOa2kPITLZxZKodVk-7n-kusYjjOfUVEmTlGe+Hg6IivwLyQEH+GMa6B7$OYUhwKyAVgspryv5JsopCz8UAwKRrBS1K75ugzhjHzp-wZREb1JMakx1nXLJDB2$gROOIvk4jpQHNvLkRYqsOF-6YBjtRV72Hmb-oxMsVg7ZwCa5XQig$SPJRsBC1dE8Y8BSR553TMgJ-8uOSbCfswZb5ChLH9zzAKrGWDpBrYCIhDry8bLp7VGDaP4RmTyJMjJMzLkAgt5B2rRl5EGnH0B9FtLLp6iE8R8YDrNL$A1CHYCGfSrl-OO8jJeH$jMCuo0Wtm9$Lqqx20K26iUQJdBMsiSp6B0hWsDxLWkpHO2JnQ1fIS$Btr2h3YoznJtkyjIFE9G4vNrMOgU134lrCpMqTYnBmyhSJJ7TSgIIOzmBBuWhkMq9gN$A9aEZHMDK+CG6HDPzX$LrsI4NyJDEut1bY56r6oylpD1Yg0oeKCV-DpAlJ3ndqLZzlkCvoG4VGvPuCGBIn9Jpj5fQivtH+JYaqOrZl$E-EukPwEl3a-fMkfQyY5EtOZ2nKEQRJb8NSM+sH5sb1eh5jd6sI0XokqzQJIpXthntwrAmUZ8oZpxDnJuU7EnP8U37bXwFEvSwVROZn52$BSgGwp9XO3ggADQbioMbdpv3l0w13PPdbTFDkz3FtkvTY8sf8qK34rOO9T$iwJjoDOx5dRNsew$LEDrVNB79LU62qS2TRHjU6u6vTLqFbZvDbWmShCRAgKjYRQRy6FOaqSUJjYlFmKjIRX5EjBR-NZCUp72EJQkSA0RZgLkKNC6JRKhvnZQtTGT8v-ZxR-JoTMHMZ8L8nKsSN-msn8OO3teL2-JbnE0EgghhJbvoGPmxmye-kTJ8mxlMN+CiH3QHvj0O+u6vNDAKpzvpqQqEjv6mbmlr6KAAvHHfTtqfyheKRIve8DhvkQZ$nu2mNAgJUKm$QtpKsGbZL8GOfKtynOdugK$OIZjHeLkU2Jrxmqnh2gC-5J43vFpQq2k$NvpugHh665blatkIRQ2kn4pYJ1RQ0vUS2KHgy9R+6$g+G5vGZ4Z6eSy5bmmFOPq$CvRaCTJQ0S0UTfpD1whQjO+dnDMKrTeKyJtvNZQlgk0eIQhQgxXwChsXNYle6$2KOKJh4qNe4ZQ8jBpD7DX4LDsOqr0nTHR8kmks0xDaRDFtA0HMb7ggZr8XlMlLvhwWZaTIHILKl+Gu0pp+5qAEjbHPkAnhRUn9gUeinvqKg26$G2eQblgnCE6MsGZxyJyz8O72NKA2muTYHGyflhrxQ2nvF8Opno5rvDy+p6yNlaO2nvCIJLy9yhaJblUdTOsUGgUfqswdprvvp-y9gGLeAO2ME+2JaMtLCikKpDftUtJLJQgUq$UhlKgJ5CmwJQ2mmYCik$OM-mNdRvOMuleuqTasrLUlpTGDJohO3vmp2z0iQsDnxKRKvWAMzznvOxFDvnUdmrL-eJmrGr8$l-nnIi5erJLMeyU9k9QsAN2KlKlMqSNrUdaEG0Z6UOXBe4nZR8pU2K8UTYeLkmkv7s3lvn5DQ+RvUfZr80ZgOKn5aJObhJqreMNLU1BKLxKugKA95M2ok$nuQlmryMgKLZHMxbj1BsYLnkMhfdlkInY8Gx2KNKLkYwZEeJfsXGRoe7LM0gQLHMJwaMkQq$OCa1BO5NTJbWqBEGyDBq6UesM6n0WtRQHm2KHQHEZxAjRvALkkXq0e0zC+k6pBopHvIvweAM2g0gCVVA57ZJdZCeFqC-55GulkEu67UrHdGMeLqAkJqBsnuVXOYvJhV1rvA-2JpvBrLMOK8+gphxjO$Kz8aVde7QJOuVBspKq0jYjxfVo+j+RYVg2xXIvdnBM5RB4TgBY5y0D1e$2JvFkmUbhDNYJ18ZpreDYxVIb3Rbq0BRiuRR9h-qmZbWTXHzLh9xb6IKaKLJandqys$TJ5nbQO2SRSJQbRrO4ih6LxP6ihRovJzikJfyRoR0+AvOvnbK2$lt++ZmAKj+b6+wvS6hoKb0XvsSO+lfN$Rqn+CoNT2yH3ms-YsvEKFHgvmNU7OMB-aiAkVqkKdqykI9J8CvRt5Kyt8Q0iN5GxyMNhUJ0uH9QAqXT+LDRJ9Bi5AtU6W3UdC2p4AzNT0FAid9RPGt5+Ltfq2eb7QObQgjA6tvauRvPHUJah9D1vnW2ggpnDFly92tt1K3vp2kQv2D2KN7TJlOEp6yeLObF4vnNhAN28ggQx3lLe6KlRD5N0Kp5yeekTTXCI6kDaA2QMDfaO2gxi8GOs$W8MLeRljgOKpxFpeLme6xqKmYrglifAJgH-geZYMvrx6+qnVgdqR6WhfVulqBK8AgrOwxrRveTvEgYoJUjIy$Fg3ePb5-A$Xy5qe4eELxrbJJ5-OgdVM3MvmyJh+BaULJbCBmvhp9bg-lT-6nKg8xsSgnQelmTYBjhNvSe$x6rsFtHiu8lCHda4JgnCztGeGtGDCgjwl4jfeKJ+N$Gt4fAbBerI4D9kfy1r2MhqLuh0usY3YokmZAmyqYKYBmngXh1fRQQLgJ2Jj0Y$+xsUQ+RZyKkJvhghm3wenY8b-3D1J9TFJ1vsVokTQnsRI9LeAeIYtxSCmKRhdqOV-qy9OhJ8h8eKOJsBwUhkMhsDkhWfTXjolM6b9ryYZIvVWb19jX2ATsiKwxxL5S8oa92ewempO80FnDSCta2CBn-v$R72T-ve6goKl7Qh2akkYy2RD1dFnHJT8gIgiDo$HgMpGobmL+ZJbmTIESvioYO$UD1rjbjn1u0uATQzmkKQCgBxT3maa6kL5Iieq1m1ps$vMAjvCO$K0pgol32JbW6edZaujeuJS1u+Z$JIXMQed1B4jvKYusE-gvT1dLgpNWYfRZT-CuaA5bMk+dbodCyh2oQ3M3ir4YgnNNxYYQkvWJ0rQt8tsnmNGq2MLgyo0F8MyqGgq+kTeMVFCxdoZuZx7vB$mIYJ+J8A0HuyCKTJSiW-g0oKbCfEeiUE8ylv7gC5aVdQRvDvBTmxmx8MjZmynuNofC8j0CjJQPoabfQV1vnsBvy92mG3iJkAl3qSOMD8Qvgl0kGHKWsOeNIYGubHFDANq$5dgDieUhg8ULpDWPIMjvOm6IKvFPkTqBdM-xUBsjwC4y1rQlaN3$xk4gK$W$P$rqhofeLJaJNZntFzhkxH3jRKBisbFwH+p4NFmQm4G4LkBBs5UYV5ANnTeLN5j5OPh-2mJCoFOMzkYVxivqzJQJa6wnFzZglKbvIYulksQbfVsiHTgKn3ehADVTSCmynDijadnDzN3Hukwea7aalGmB7ed$nupoVFlJEYaJYDhojB$KtKTKzM8pajyJnyQoQt4g59lP1k41KoV980GYHdi9ADO5aVuKPsvWztLKUJu$fdHo3lL+6YKYPWMEZ82yL-nhqHzsNhx6D2Z$mhS2ajYHYdWJgdBqM07CMJkNsDLtItuSsdJySbAbbREtVF8o-oB$lAxL2xfAyYo50kUd$-UJyjYKHToNUn31x1WYiiFE$oY82EIYWX0rMIztSGjNRNHSSGnHyu2iLJeLTXeoi7eUp$K$-mMyK7l6VofwAgVXmxeLAmCqNqnJeqrgoYmgHGgB$S7QZ$2-JXkOznS$fQgKrbjMlMlKxHMx8YT14aO1dN3lhSrxOgBfqtwo1kxxKotH1od$x1iVrxe7eiln77jFHxDqP4jp8quYB5bBBsyaQqTB1kY6KjuC$47KIugMdI-XO-hTk$AW+mR3nJePsDGIoO1$1JeeGay9Tn$KHuLtdanvA40z2iAKma8Y6rXYNM8i98LMeI7T$vmHwpSMGdvN3sxo$EPy1SEKyDZBi4Id5xveGtbvvCz4ZDjyspfAqDYlWt$+ZJbd7j-jXI5j3WJZAE8-NkYahDChvDQ31uArfA5NWrwG+maSPZG$WpEbvy$8soBoe0rIBmJyMJNkVzZ6QdTpTHLt2hMLaou$9toKHdh4WJsnyaLtZvKXCdRWWm$duVxBDJwtM+T45pWGoZA4JDnuqAeKnHlobhOPzKoEe1I1zMK7AEeHXq5Z1N2VokrB28qxR2GYqlWRBubPdKggFKo4tF98FTeisSRqFMSI6I7PrSwxSkxmvmAlEHIqhKi8MP19TNi1ty95GqNZL$IpwYV+0I0raMeUgJLT7SieTEGXqCGe0Vtwei56WZhAiqMbd1Gl1xhDA-ts1r2nW3Q0P+R2wXs8XMbRu5Ozhm-Tr7SR$nYV-E2btqbqb4LpxqBs6koJ2Uh9MgrgRQRq+daEdfCFipe$QhZ$0ABYXNFMTlOouIKmng9ZN6fVftrZ+d-wU454alSO7MaNge5dQ6e6tHs6sFqB+JarYIj5LtpbvXDeF0yi3mhK+dIYVIxeUrDg2Px9kJUfgFdpweFebF$W$AjI2m5X+-TdHR1StDuEFHjMvFu5$SJk4JYSOoE9GD6rXCYm0EXvq7-7Fovz19VzowsjO76XSMjrborJe6$vNtm6RaBu8NYLieN3rJ5JF9m1DRtPwUUBeoSL+5eVf9jA0lfp8JYvNZQQpYy88bkmwspbUPR1EZ$QAYrBAOH9tizA13SeeLLBiyTn3JlndzCabWgn2DjJvgLtLTP7D4FZ7wZZ+t6ioHQZ+qZGAfiKpDKGZiyHWH-gHHfMOFogSM2-UBBF+rmGkVrBSBSGHX1uqBzZeigAhimSYl7GklxpMqqSBTQSOqlGGRx5Vi6KBnwxx$FuzuofsOmCzxlm79X+297SvYsGCPr8wWbmpDYUspL1dOrhwegtiU3LG$x$Skf7jaYAR2VSb9XqrJNxxJMi3lTyEt6KinxeqQFMQpnxo7-qruwVqrvoETlYhAKLeD8YuKZxCuaDwWHYBqPaHgOHY7DRDIyKGxOSfGrMVaCklA17RHS9$eFhWKQpBAY3wVl8OEX8rN8JYbr0xBzZqq5JeexZe1ClDliYtDlHN1iWs+JQjBOTOnjx6dn8h2grxDmeoMeWnwrBA6r3FfxWK8hQ75zhkBNCGTaOjBOCO+xDOdPvDNn7s5-OPOL18ys7OK9t82NskqiEvynvPJSj3JJqlSv726jXtjIaJnQOnJ$jHv$sgt5KRebYXmj3DkIk0OreeAZoOemg81$vj4JtgyKRCs6AR5PSDrnK6eH8aHRGOhreuJaQvNJZWHxrDMyeh27b7JDYJmB0Q2qKjjA84ItJDx0Ryvrk8xJTAOYingiCFJynSTjx0H$TKpj3rKeHxyKQ86h8ahIOY8ORjlrwsyr3DjJCn8OR7RtrJImxnFOQw8KtrC3kh4Rygt982txDnJ2p6zSWKtr68QVRKXxS-8HOyzkpQbanew8CrlDFtC0l2DSR0rbJdSQvNtAWKZefEnxH66lOkJrVFYGhAVeG7uOfr3DyYkeRrwsMYJw6ZgQEAT7j8XKjkZqARp1gjRljHeNv0XPTY3A3imQTtRYlsPxYNrorka8YpKeeYfxzJbLzTYgrv7MH3e43C7rWAPJjyt2AtNARlO8OCvmfvxhRAEYA8JxJANN8AOjOkYnnvtOnTB5bJNP61QKpCitlbjfd1hsxia5X$58YYykHDe9v7fj5Y8TNZQldRRkdYKRGr9C2QpqOSr-JxIDMmvTEC2eLeiHATaOq9O2lWhJr3Jg1bqtl8O7VTPDFDgCtlOg8ehzxtDTRQ76$YCKdxu1jEvTvrYDP9x9SA4Po6S8FtmONhk9Esv28-evrkOR$l8AZ81PAs25p$eYbE80PakeoKyeaMOK0nCM23kNCMjmYhHxDTD0xJe8OrdOav6xy1NPJyd8raJ4x0sl-dMjYoMhVP$Y9FRSHDTICnh0R2be4Yp1xxDDN6zfgb1ryph-K5yNzvKrUHLbgkYPCLvL7rDxDji8olLAvrEDmrUS8XvgvWD6VrhFhRzvUlJrHrN9vlzKj95NH$epJzGAdOKbARRkGbnnLeRxRBjwx17yt23DjOO6KlaORC7E6TRTlrDg0U7SkpLJD6UrRKjjKCXBRL78Pvt8RHaOjOXJ0i30ph$tsZj+jwDhKQOQD518p7nTYzQ68l9R53j1VgyHCCQvtHJh3eOJvDv7EVtB67xRkHXjSAa2ROWloOZ6pMAvsKOFYImUHRn$s$bVoM5QvfSL53ZJK$RlZyYYtEmhs4SHvKmzBwz1OQjQ6TOe+zoHS7dVgKYw6B4BPY7k6S0OIh5KhCUPujdO1iC$gLHPhTjGkW$Q3vd$BYT7kREOSOuVjDSHj$lklND6E8PqRjYKpv+JOORENKZeGKmhvE3aSFn+Ob1my7v6I1xR07kJ8Dry33nbhptQN5eQ6RIe-vuK70kZ7VzwlGjEtgvRKp1CHsaIVMrimJJPq1vq0LRgDqBAfqP0WSrJbS7VRvj8Z6Yf48iGQ9pLC8XK3TmK5XpxsyXrDMnwB0kQ7Zh0+JEXk2ESsd5nj8twxEgs6vqrjjHHse0og$2FR4ZaI+MDDO4gljvSHH-$AtggpojR1mxH+esC7OeR0PHH4hBqvFlXZkVCvZ1Ytz613v+OxJmS23LNsXMOrueNxYiJFeetYYKJeepB0NABKCevN3M$vnDCVKFl0qrJf0UeAzvQ6we6Uv$n65P$DKiqYh0kRSOSgzGlK+s88sMvkR4Os0hT6sLMgDenjyP15kTOR5M82JHO6xu1OkOmv7OYKwxYDpnPpO1j-KFDvSRR7Ts5HAOYhHixlR-vmP-e4DN2s1jrl3tFInBj2oFEx-CtMozky6oLNBYnOoqrnhtNeNybMj-erskTpqj1r3Jzq61NhgSvTOyDfq6MPDpAXQiotIe2OTDGUCBY1DxdoK2DRWtkMP9IYdnCNU4s8EBJQrM0itgRK3ZB6zqms2Kp52hKJDFK3bOoy5lOj39CO+BxlEa2TrFxzq-hDgpyQ-zpt5IQp0NTfQY7fvodUbCNjweLElOGNUSpoyG6Ls0JnBq0wwvwkr8ohTqF09J20AN3T9UsuQlIhhjYwr98OTBRDvw2CP6OijfEbtOUlPJi83djVW3vwlX-atZoHnGTT5lXSAJ+1JqkI2UenO7txKXslxjW6QENtUdhKbv2-NhOOgkxpCmN6OoX357+dIuHyQapOn8thA5dgWT5ehYen+kXs6JN5RG$6OQtNRrnuKosjzd3dLsypjLYG$R8Sd7s3tkat+zkjNxnr0NnB8Crkg2g6VSIbZIItEJNhWIgJOVCNPC90WxKTjrDitOMvsiF0YYmWYhnxsiAvRzZu+razweEV8B8rTZ7-AN9eqxKT3CxJKyOGtkneNHnwghYYhlAWzb1q+pvay7$hHYVNqSO5KzSkAbxXy2Z5HKM2zAlKQWT5ed75OZOgRsrHMuBKPPfAuYrNaJSVmCqvAfYDlnOB5sH2mhQ0Yjhzm$6j22vgTHWmdj6yrg1E2eVNJkjAE6YTK4YWj61OgmYtpr4Kmo8w27vHt3hCR-o8nuhartyOEIkZ5envn42dtWtkIgQkZhfxeC-Yu+zhBg-kD$EF0t7uBKKqoP7di$USyZvByx2BR-pHSbfNBrVt0R-imSGq5WAQkekbtSqqBi3n223d3trIjkSelrlmEE6M-5LQtO$Ofe5s0NTavNH4SiMGRddnirjJf9DdDeKKknoBrkj4OA7eeQVSOa4keAImmyEsj9PNtiOMJbCT5ejm5muAKnqBJu1DmzJUSXOKlynaTDJ2HKUok$j27qPggESXRtvBDClnJryPxKJEHLeSaU23dDVy2OzIBrKhpxZBdEhp68KSD0dwgrTUrp170gUrpREgufYT7AgOJJ0Ed0FNvrujIedDimmf8onCl0N2sRvJiSW5BHNe1e8+xY8CvBgarpsnyy7nEa-jQqlizxRhRia8KzAx6Wbyb-4mCqdSXiXhTbuutApoSNIkXZZ2ob3xaHdOu1AMCD9+egPK6S5iCuyjEg1bsbtyb2NE$bjeXGBDEs68Gzshrqwi-IyRp4mGDbOUBFNb$ohOU2HK$Vtoni47svg0XAb3JQ5px8NjRX7i9NJ5eLmqt7mN0omhw57DpitKXV04balZspitXwiWJ8ae2nd-IdrbFoykimmZi7ks3u4esuzmlOxEHiFo00Sza79PXsVB$eI-zzhBhHEtdThyilJQt7mSb+mGBuu96e8XLOTAAMipyz9tANbtWnfRmykifXGVxNeptpmQ9dO2V1FHWx+sFg2XsRfWnKnj5U94TB6D4bOBand-JA1RW8LOi5yJbQtg3SmbOuVmgi1AyJl1T3iDyg-Vp61eXvbi7$AixdPRSmbJB5Y0k0XERKGaHSshKbCAAMzp0D-D1feIA-0SmqDibMVgpt+Rw0xkQGyOgHALCBHqHSvIM8RXDKyHJPipng2imk$EH6jo39tpopwi-HZxS5Ag-FAnyH46ho+etL0j33iZGhoZzEt0XFY16YgoY3S2z05Co9bvuumnLOEyC+8hvBJIsLOE0RX9bvuJ1TLJE1CzpUvSkjDb7mt612q3Ed52YUX$6i2Zs4Y1hL6EEiYShIutySbYK-i7paLliy825pz6E2pNuGyAbthNt9bni4gfkPZpU6tqZox0IA-9Ev8h-Lmxoa1gJn7ysq637xKKLZErtx-HSuInnOpEmywqT1owA8bH4p6$-0D83Xpbth2y3dZEihx$OQPWitJAPv$vfYp4o1fVrypC8V2t0f$HKllokOGl74aNmWz3CaRfO3HHe84hhJKRlrYKXDkSJ$oVSfY4BxDGRrBOT7VO7WXw2nJueIjyHOlLRlvnS4V5yJ4I8192h$ij1DYMXQKGwH8xAyfYTI5J2gl6kZOojqsDK6OOO5xRG8vvzUXQIJ5rMOVMJvC4Co8y9aIlx2Kk$5uOeeEeCYbMNx$nYlrd1rK5Lp0CdI3eTeYhR6z$xOOv0DLBQORPjDl-KCD2tNMCze$rKo7rNipH8CC-YMJ4DbenSOi$ylpDioIBm-4DRejXKbOvaJOOSUO4MOOlJt3XGaOqxiXnZ8$j$OtvyfUh2OjvSAG2JqaJZopI$39G9oiK0ejAIhKHGjMvfJOCMHG9oojA5-$RP3HGbBCOgb54O$3-GeozFk7RxOvw1OjMpOOTCKOYwlvxD565kOlfJOnFloIfHW6e8FPDsYhZQbD8ezijU4aKQZp4nZRbOOO4C6j6CiwOmyKhAqovwfkOTFzJLOgq5wfZDrFSDHklJRvKkjOmwOnR5Ky58LZ3j$KtnRbCHHaMQTPYnRAq8UvWJUnYhynNCRwXnHneq0ixi-OpCE8P3sJh3b5Ndroebxp0HkjIxl1oOCKWBO+mdDHRKvZJlNrYCZovOn3iGrWY1lG6IRCOZJSDQ+y8o5IUrtFSx5QaPvJjr31OkOAOlOApjmrJepk-88mAB7hw0Oeg5zbpQQCn7JeDlJVx6pezrOx8O12JkDRepeCJOHszKRQK4R0CumSnTKwKO4878Xm$1HCyDkZOOjYGUHKmOKfb6V-bv127-ggvwYGSN9lCOLJRnwiG8JOzmb$LAHHrOjN$ixznIJv3xxwn1Re78vRTe9KOOaXBpOO"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9ad4af290ff056ae-OSL\r\ncf-chl-out-s: /d4rRTCnJLnjbY1G6RWRCQ==$DAVYrFxWc9S3iAayVePpxA==\r\nset-cookie: cf_clearance=Zuw93k_6ORBwycdhlpielyTfV44RBoF3OoVwgaMJ060-1765620757-1.2.1.1-soY8xxjrEw939.2TCnozPam4akwS_u3ludZncEafQfUWFnjUO07RYCWgkrx8MQGzuK_OTVs91lr9Q2L9.XThGJea_fDULpG0jDieXYH6exSFdbfP97APS1ekourJrcMXN5400OXr8jV8FnYtOKRrS1hYrKfVVpfUAqIJg8WYHsmwIVykSlQA0UvrfqEQ170wrAgI.4_sK6eDADFCfGm._3uCFYoYIlHX3ei9Ap85YYw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=mens1069.com; Expires=Sun, 13 Dec 2026 10:12:37 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wnrNBWplTIttQf6CXMw7jvaVtgg8P%2BErXU9onzPhDOnn0yN58D0tsN8VcosxSAy5w1YHUDwrCt2B%2FrW%2BVlt2PwM4bcCX4%2F3%2FV1TP0t%2Fha9lOVrLV7OYmIn6G1pu%2Bd2hEpZ%2BD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1379\u0026min_rtt=526\u0026rtt_var=761\u0026sent=517\u0026recv=78\u0026lost=0\u0026retrans=1\u0026sent_bytes=559670\u0026recv_bytes=22855\u0026delivery_rate=42641942\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=74314\u0026ss_exit_bw=42641942\u0026ss_exit_reason=2\u0026cwnd=70194\u0026unsent_bytes=0\u0026cid=12ccb89a6f2a997a\u0026ts=2167\u0026inflight_dur=154\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWClq8O%2FCMbM4ejTz49mO4xqCvQi4%2BP1jvEUjG%2BfrNmChN0ehq3E5rLiwVk1fFwvpNhCD1drw51D5P0pTk47SCIj6GenfGWullhPEcLBefo%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"65aa8500-194\"\r\ncontent-encoding: br\r\ncf-ray: 9ad4af31efe9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"abc278581baa24320b5dc93b8020a15d","sha1":"c150966236e6e7a96ffab93035d7b27200d0b228","sha256":"e3d07a34118c01ad2fb7a2a12307b6922224e5998bc92022fd280b5efe8b3557","sha512":"14248a8df9d7087e54b1fd9f9d94612cd8cb72c614bf1d25f7b4a261343dd986a151e30262bd008c0e2372823fc1228c1eb1db48c358ba63414645923a98dbc7","ssdeep":"","tlshash":"22e02b38a168527497b7e2a2629f2bdf2630425fd006464eb02c574e0de1fb622d1e97","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-04-12T05:18:53.390679Z","times_seen":1255,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":51,"dns":30,"connect":1,"send":0,"wait":497,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-124a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9DAxmNSpQ3grKWd5MHgbPOhNY1TAFO4bqvu8eC1kdSdnkrkdEM3QHC9mmInzsvZgzU968hZ%2BCXmkxiV%2BvzWDr2fxt8EZEDt1F2oPmbLPQs%3D\"}]}\r\ncf-ray: 9ad4af31fff7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7ad23d9668c9b8532ded3994515354be","sha1":"9290a13e0f2adc3968a20c600eb1a338b9622051","sha256":"6927de206bba6147969b9a6f208b6dd605d4c11755a310678521f9c6d4d47ffe","sha512":"cc4acd3345a2839b149ea6312477d35063a7bfddb4c6988e5172bfc0cebffd34501906849c091ebcf62fbcb9631fb8c797ec768b91090d027d400b49ac3a1741","ssdeep":"96:2Ci7aTMXYM1Fezms0HhIHhpLiRiVmJxMX5eiVPJUZQoBqj793tnaluqto9eMS:2OMX51F4OHhIHhZJAJxMX5TPJelAJaQm","tlshash":"79a1ed962b771a04b80bd4ab3f6a2707271440039a0fed647fc9624c8fc51a8d6a278f","first_seen":"2024-04-14T09:02:27Z","last_seen":"2026-04-12T05:18:53.688146Z","times_seen":1138,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":56,"dns":32,"connect":3,"send":0,"wait":472,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/on.js","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 08 Dec 2025 10:14:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6936a4f7-25807\"\r\nexpires: Sat, 20 Dec 2025 10:12:36 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153607,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1fcde5c14c1de212a82cd09998bd4f6","sha1":"0e36c26f9441b479a51537a72130d70f0c6562ec","sha256":"d11811a60546352b551d0072a7ff5e6b9cfcb71ef9acbacf82c6168421952d42","sha512":"7c7f07ebbd2658db5d08d5aaf51f3ab9a3098e9f7720325344f9e7a848733b44e7788e7ee845e97ca03fd55873c45c08ded0cdb103ac6823469a4220b8976e3a","ssdeep":"1536:gAZfgkms1HLfZF6eobm17Oj4QX/nxKReN9fVi+9cm4PFVkX02CKM5GJb2f75rt8:bZfhLBFiWMX/kubX02CK7YW","tlshash":"1ee3a58cfec66b334e13b0ada92f3a1fb136e4e1ad4d4e00d467d185697470ad132ab5","first_seen":"2025-12-08T11:58:51.14599Z","last_seen":"2025-12-15T09:55:52.028354Z","times_seen":82,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":28,"dns":19,"connect":18,"send":0,"wait":17,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Thu, 11 Dec 2025 17:46:43 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3ExQAAAwBuUwKDAH3BAAAAAwBWd59LgG3jgAAAA\r\nx-77-nzt-ray: 2a494a150b479e87393c3d69948f3a24\r\nx-77-cache: HIT\r\nx-77-age: 5139\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/get/2070307?id=2070307\u0026jp=_clczbwlmyrznctrtgsbiji\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.645-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=j_YMuxNPIdLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XmPWit0aHR0cHM6Ly93d3cubWVuczEwNjkuY29tL2FyY2hpdmVzL2NhdGVnb3J5L3ZlaW5z\u0026afid=3774886419110912\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1920\u0026rlp=%5B0%2C20%2C324%2C270%2C24168%2C4638%2C1011%2C3872%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"GET /get/2070307?id=2070307\u0026jp=_clczbwlmyrznctrtgsbiji\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.645-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=j_YMuxNPIdLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XmPWit0aHR0cHM6Ly93d3cubWVuczEwNjkuY29tL2FyY2hpdmVzL2NhdGVnb3J5L3ZlaW5z\u0026afid=3774886419110912\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1920\u0026rlp=%5B0%2C20%2C324%2C270%2C24168%2C4638%2C1011%2C3872%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 16 Jan 2027 10:12:38 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 16 Jan 2027 10:12:38 GMT; Secure; SameSite=None\nUID=25121305127f665fdc0dc64c24abefa93aa6; Path=/; Expires=Sat, 16 Jan 2027 10:12:38 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3321,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3321), with no line terminators","md5":"3f40178daf2b447a5a93d110609c80d2","sha1":"655ee288a41f1186ea15711cd7f7e287db9e0b39","sha256":"5848a0bd8cc5049766ceecb6b443003afffbc7b54d665c14372ccdd112b87fd6","sha512":"e17f473187b1c76b1856d58243ad887352ef07a9c0cac66419a30157b81b34ca61f80224e48071d038a086fc9faecba75bdd2acbfa6174df2bff722d41dfc516","ssdeep":"","tlshash":"2961636679e7e4d25db66e5607aa0f2de08b062e5a2f64133cfc01d8c7c31f206a6c13","first_seen":"2025-12-13T10:13:13.30922Z","last_seen":"2025-12-13T10:13:13.30922Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-12T12:52:19.355942Z","times_seen":2220,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":114,"dns":5,"connect":37,"send":0,"wait":33,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/8328113056b1/main.js?","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/8328113056b1/main.js? HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MpsOGz36H3xBT%2Fyhc21MvIlZn3c816XQIZIUcx0F%2FbCecWhnlpNyeTrG7zOO8G8aLwrXUy%2Bqr4k6CKueIMFzhtX0C7jtqeiIhp9GEAYFaB5jcj1ucnDUTnaYE1tWecKBUFgu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad4af277fe456ae-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1539\u0026min_rtt=526\u0026rtt_var=862\u0026sent=498\u0026recv=65\u0026lost=0\u0026retrans=1\u0026sent_bytes=547586\u0026recv_bytes=9431\u0026delivery_rate=42641942\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=74314\u0026ss_exit_bw=42641942\u0026ss_exit_reason=2\u0026cwnd=70194\u0026unsent_bytes=0\u0026cid=12ccb89a6f2a997a\u0026ts=1920\u0026inflight_dur=150\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10317,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10317), with no line terminators","md5":"96ca62e4024786e3252b965b6b7f0e95","sha1":"c39f49387f472380a5ae8230f8dc3d0fc7c6d3d8","sha256":"18490fe6c173b0561225e8b9136b04689a27328edbaad4da82beda9db3a001ab","sha512":"ebda4b59a43679b3d89bb93c0ab1c3ad8d18a7af5bb2d16d9a3de55620d785512e17e99a84a0b995bba20eae4a8de913f1dd984a67347955963b0327024b046d","ssdeep":"192:wbu+HF/bSuZPXPJkusPuaHezwlp7XlG212dClQplYtyBEqupbbJFkEgP:Sxu6XzsWa+5G2+L/pbbJFkNP","tlshash":"1022f85dfcc53040424d88d50c3bb8c6582d8ea254d954abeb12f5bbed3d66ee34ae0e","first_seen":"2025-12-13T10:13:13.313472Z","last_seen":"2025-12-13T10:13:13.313472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/a700b844aabf582247772e22615cd88098d65897.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/a700b844aabf582247772e22615cd88098d65897.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 16872\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-41e8\"\r\nexpires: Wed, 21 Oct 2026 20:43:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3tUpFAAwBuUwKCQH31wAAAAgBw7WvBgGB\r\nx-77-nzt-ray: 2a494a15e461c79b3b3c3d690329ad0b\r\nx-77-cache: HIT\r\nx-77-age: 4541109\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-16871/16872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16872,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"3a30ef41039217abc73dba6322d4c60e","sha1":"a700b844aabf582247772e22615cd88098d65897","sha256":"6c5efb64c8488c8a92528eadf6f4da232e17eed12a92e2c5288048f584bcbe9b","sha512":"9f41e2c7be3cf5e9490cafbf5c8014e2d849708de05d1de07aa44d795679368b3e57feb73b056547adead14373f205188ab2e2faa804324dd33854a2fab26db8","ssdeep":"384:yM5uSnXST6j7oh6hBd16oYZvWsDpGhcaIuSt0s4T0i7:3BAuSqd1ByesD4cVuSCsk","tlshash":"af72e157834c90a2c9599671367833bfd31b738ba2f61797430cc075ac274b58b8342d","first_seen":"2025-10-22T07:49:28.529399Z","last_seen":"2026-04-11T17:48:40.784607Z","times_seen":462,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/847ce550794c0faa68305126eb5944e905192309033bd90575dfa8bb79fc9209.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /si/847ce550794c0faa68305126eb5944e905192309033bd90575dfa8bb79fc9209.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 6359\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 24 Oct 2024 15:52:28 GMT\r\netag: \"671a6d3c-18d7\"\r\nexpires: Mon, 15 Dec 2025 10:12:39 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"0beb662b0d17c9deab9b094bb79629ed","sha1":"69c012eccdc927949f609776784652ad85970286","sha256":"4319f2026d966d428de82f23e33521b096eb01ae0b4a9460bbb9f01511258fb7","sha512":"772b901ebec54dc5692a6e2f601a2ddf68415e13147b25c1f6e2ad14824c9f101e8ea01bfb53fe96304ae89134a36ec50d00332587d411189704ce6dbe5444cf","ssdeep":"96:IElbw+iwcIYcYx2D2SgpAjKwq2Ed8LkH7vNCMTjj1i+tgipA2Ba74DRPif154E:9w0S326S7q2zLkH70MHEegMBDd0oE","tlshash":"8bd1af54634643aef676abb37462175332151463db30466070cf6bc08e9cccaaf26ab6","first_seen":"2024-10-25T01:28:34.347246Z","last_seen":"2026-02-08T18:07:09.099811Z","times_seen":982,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":75,"dns":34,"connect":19,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.221.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.mens1069.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; expires=Tue, 11 Dec 2035 10:12:36 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b95ea07326f3451b66dc925b9db5e1aa","sha1":"e6a6dc5c4932d4cb1658de73a869b75ea881ead9","sha256":"5ed10781516dbea70564827789c174ccd8e972eee4ce1071e9d5e4e19b1705a3","sha512":"cee470e0a1f483da69efcb41ce0286912c4e37692a5ee92349a490580e2a1c5ecd23f45c91dd1b7ee3c27ee6fefdfa1c2491d4156c1e3bd831313875a50c0aa9","ssdeep":"","tlshash":"ba900441c57004c504c4330314411cdd1c0331010070f10f7d5d74510551d0d54300c7","first_seen":"2025-12-13T10:13:13.317222Z","last_seen":"2025-12-13T10:13:13.317222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":180,"dns":38,"connect":22,"send":0,"wait":21,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 03 Dec 2025 04:02:08 GMT\r\netag: \"58ea-6450446b8fce0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 02 Jan 2026 04:11:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5458\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\nserver: cloudflare\r\nage: 885689\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26HtZPr9NzyJ7BNdZaJlBe7t7uzNqCGFw8n7jSh1Y198AI0f2Xsaj%2FKsxFcxj3Od%2FgnftSyiQycfcUAY4xsfmy2%2B4cXHxgAhW4pTQ6md\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af283fe856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-12T13:01:38.146247Z","times_seen":143664,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=576","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=576 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.colorless-round.com/ecc874/2f805e3ccb65.js","fqdn":"www.colorless-round.com","domain":"colorless-round.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.colorless-round.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 07:03:01 GMT","end":"Thu, 12 Mar 2026 07:03:00 GMT"},"fingerprint":{"sha1":"00:2F:B8:87:07:C2:98:F7:6B:01:6F:42:77:20:25:51:27:A3:93:72","sha256":"B2:56:E6:13:82:AB:79:F1:29:19:35:FB:16:34:8F:B2:1D:1F:45:0F:61:31:DB:D8:53:D3:35:11:B2:D8:2F:7E"}}},"request":{"raw":"GET /ecc874/2f805e3ccb65.js HTTP/1.1\r\nHost: www.colorless-round.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 15 Dec 2025 10:12:36 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"efb9dd7fb09e546727f040ecfe891ba3","sha1":"ad8080ccd91b597323ff3c1f84c0e456e2704033","sha256":"69a6ba9ee975d24fdc7a2285beda6553b775b73d68da86a3f5e96842dbb689e6","sha512":"2f1960929a5f9b411b3fafb50fca1eec9c5efb5f1774e9ab783e08aac73f5a27cc4cff05df97efc9b15ceb1af6912e8c9e2d43b3c104262ce152d2220bb03110","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvY:OijxEQq3P5Enne9zkWHLS","tlshash":"02a33361350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","first_seen":"2025-12-12T08:27:45.511757Z","last_seen":"2025-12-16T10:24:59.89006Z","times_seen":41,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":86,"dns":15,"connect":23,"send":0,"wait":19,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.colorless-round.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/68/5e/91/685e915dd72cb02cb4dbfe93f922478b.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /68/5e/91/685e915dd72cb02cb4dbfe93f922478b.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30169\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a20080bdaef00a2313e236b056a0f7b5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d32bfc69064ee6f6da5dca2c94e93ffc","sha1":"60592f7d066165201fd994b54d1ea1775a74b301","sha256":"807dbb9f60ecaa7a38c6084cb2faa45a1d27e60730bb12ff85b036815920c5ac","sha512":"a24662c32774cc88513fabe7bc8f985b7d5a7d0ff2600e705691c795fb4739d26f84ff9ed42583d65356b37db344dc3a5c0308f9063b4113f21803d8e5f5b9d8","ssdeep":"1536:k9yUBg8XFOUGbAVTesz3WArOwlNyBv77NzxpQ2jFFw3PjIj:k3B91cmpUhxpJwbIj","tlshash":"887309487f82b15b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","first_seen":"2025-12-13T10:13:13.320931Z","last_seen":"2025-12-13T10:13:13.320931Z","times_seen":1,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":283,"dns":1,"connect":95,"send":0,"wait":98,"receive":93,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gWJzLmiYZ2ZplXDLdjz3D%2FbMjlv3ZOxF41oJtidByIGuqi4UF43%2FeceWgVOAZfxvMWkLFCMYJN2K6fvCiRikOo08xa03LROEf3C7qWEgowqxennA7zWSfgn20%2FmkoiloJG%2Fq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 9ad4af231fa656ae-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/8328113056b1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1046\u0026min_rtt=526\u0026rtt_var=616\u0026sent=216\u0026recv=48\u0026lost=0\u0026retrans=0\u0026sent_bytes=215072\u0026recv_bytes=8363\u0026delivery_rate=42641942\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=74314\u0026unsent_bytes=0\u0026cid=12ccb89a6f2a997a\u0026ts=1229\u0026inflight_dur=53\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10317,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xq7nk3rlddzu.n4.adsco.re/","fqdn":"xq7nk3rlddzu.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xq7nk3rlddzu.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":422,"dns":121,"connect":100,"send":0,"wait":101,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f7e2.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 19:44:42 GMT","end":"Sat, 24 Jan 2026 19:44:41 GMT"},"fingerprint":{"sha1":"FD:D4:B7:E9:AC:7B:28:11:0D:96:A9:CC:26:88:07:21:A3:BD:51:DE","sha256":"E6:36:0F:D2:9B:17:E4:A8:11:A6:86:BE:23:8C:5A:3E:36:6A:2E:39:90:F1:28:C5:6D:5F:8B:4B:3E:FF:1B:12"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f7e2.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 113\r\nlast-modified: Fri, 07 Nov 2025 05:22:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dbd26c4768e6ce541f5b857b4973226e","sha1":"125b1eccc879a5c015b0344f0f70e02b1c937a44","sha256":"66b1c8e22d1f5804ed048c6a1f5fe5d4210c274967d4f7f42e595851d6cd9f47","sha512":"4905d958ce38a24234835e31202b4b76c1a3d4651eb65e0d2148c739f7b352e0f681b0c722c4f6e2233dde9734116c6015fdf20346199b3fe0995ad4f397d42f","ssdeep":"","tlshash":"ecb012b9806ddd098c64c92c69f77854209f411b828e4379f0c00e2aee056dbb5092b9","first_seen":"2023-08-17T05:18:20Z","last_seen":"2026-04-12T12:28:10.644117Z","times_seen":448,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":32,"dns":22,"connect":7,"send":0,"wait":12,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1924/?remote_uid=550492f41beca82e","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.134","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:22:15 GMT","end":"Tue, 27 Jan 2026 23:22:14 GMT"},"fingerprint":{"sha1":"62:22:C8:E0:46:E7:EE:A7:88:39:BB:AC:4C:CB:ED:F8:EC:E3:92:16","sha256":"E0:B8:E3:03:E3:8D:55:52:B8:D1:68:52:87:58:B0:8F:8D:2A:29:3B:97:7A:33:0B:BA:73:FD:C2:40:D2:D1:EB"}}},"request":{"raw":"GET /match/1924/?remote_uid=550492f41beca82e HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.mens1069.com\r\nset-cookie: jcsuuid=0uR3O7cULAdW0gHaCHWb; expires=Sun, 13 Dec 2026 10:12:38 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-12T11:43:47.118838Z","times_seen":6410,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":60,"dns":34,"connect":17,"send":0,"wait":17,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/uploads/2022/08/Veins-02-134.jpg","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/Veins-02-134.jpg HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:01:44 GMT\r\netag: \"1e6d1-63f5be0a8da00\"\r\naccept-ranges: bytes\r\ncontent-length: 124625\r\ncache-control: max-age=2592000\r\nexpires: Mon, 12 Jan 2026 10:12:37 GMT\r\nvary: User-Agent, accept-encoding\r\ncontent-type: image/jpeg\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJhlfmNnFkfsq3VrDdxNlCphO3XuGebLqbdzA%2FsBzrB3S5ztz8pbqqjW6Ojt9WAc%2B7chfWNWWZMDk%2Br8lLazDvVnoxL2mw6LUWYSO3NZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c9f5556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124625,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 748x1056, components 3","md5":"6f387f720d34725b96f04d004da9f088","sha1":"1a6a1ad45e2cc2b3098b90d683d5e558e71015be","sha256":"2dc8040afad4b6bd54a81eaa0f0363bb1970cdf0738a8f9cf122e844a1cfa5bd","sha512":"33dcbe3c0b950365b1d67743425e492ad6119a61b72810901101ff344c75cda610d9ec0bccb06f3699b8b4e068f93bd9ca4995f313245362123614003a355c43","ssdeep":"3072:SgIB6f6xzrPndv5h7UbGjy8Z2YOK6O/5JdAi239Wp:SgIBSondv5uyj7OKz5beUp","tlshash":"e4c312733608a7aad8ac00e616f31f5604d3ffa3d924a66fc2c0da4f3e5556da98c44d","first_seen":"2025-12-13T10:13:13.324325Z","last_seen":"2025-12-13T10:13:13.324325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1230,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"a8b5185c6e336f90988c17b6ae0\"\r\nexpires: Thu, 11 Dec 2025 17:46:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3AxQAAAwBuUwKCQH3EAAAAAwBJRPCNAG3fgAAAA\r\nx-77-nzt-ray: 2a494a157267cb8a393c3d69c6be8613\r\nx-77-cache: HIT\r\nx-77-age: 5123\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":1,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA1VQQU4DMQz8Ch9oZDt2bPcMV5CK+oAl3XIqSKyEQPLj8WarAhkpGWXG9iQEJDukHdY7kD3Svmo4FofCVFA4Hp8OwRiX+W1BaF76+yXQvZmFKthqN67GwQ4I0AIxlZpCOhBJzKWlClEDEiSVeTCFOD7fx8PxEFiw5azrQRE45gZBsgQZfCHQqOvzRK71xGzcTy4gorNpB9Rm5GmH/2lhQ6ksmS67ww271VyRK2WmXBDjelq+33rEzSZbYBlPoLXBWhd/Gv1CbwzHvpTL9Lp8fG4fF9cq3MRxMUg1mf0s+qL9fGo29y7aTfrkk3eZ9QcD6Xg1qAEAAA==\u0026cb=e2e_693d3c157098c0.48286224","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA1VQQU4DMQz8Ch9oZDt2bPcMV5CK+oAl3XIqSKyEQPLj8WarAhkpGWXG9iQEJDukHdY7kD3Svmo4FofCVFA4Hp8OwRiX+W1BaF76+yXQvZmFKthqN67GwQ4I0AIxlZpCOhBJzKWlClEDEiSVeTCFOD7fx8PxEFiw5azrQRE45gZBsgQZfCHQqOvzRK71xGzcTy4gorNpB9Rm5GmH/2lhQ6ksmS67ww271VyRK2WmXBDjelq+33rEzSZbYBlPoLXBWhd/Gv1CbwzHvpTL9Lp8fG4fF9cq3MRxMUg1mf0s+qL9fGo29y7aTfrkk3eZ9QcD6Xg1qAEAAA==\u0026cb=e2e_693d3c157098c0.48286224 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: __uvt=s%3A32%3A%22009bf2abed67db7e842a6924845633a2%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":56,"dns":5,"connect":25,"send":0,"wait":27,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/solid.gif?z=2070307\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.645-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=j_YMuxNPIdLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XmPWit0aHR0cHM6Ly93d3cubWVuczEwNjkuY29tL2FyY2hpdmVzL2NhdGVnb3J5L3ZlaW5z\u0026afid=3774886419110912\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1920\u0026rlp=%5B0%2C20%2C324%2C270%2C24168%2C4638%2C1011%2C3872%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"POST /solid.gif?z=2070307\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.645-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=j_YMuxNPIdLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XmPWit0aHR0cHM6Ly93d3cubWVuczEwNjkuY29tL2FyY2hpdmVzL2NhdGVnb3J5L3ZlaW5z\u0026afid=3774886419110912\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1920\u0026rlp=%5B0%2C20%2C324%2C270%2C24168%2C4638%2C1011%2C3872%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 16 Jan 2027 10:12:38 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 16 Jan 2027 10:12:38 GMT; Secure; SameSite=None\nUID=251213051214f2824c73534cd497c367270e; Path=/; Expires=Sat, 16 Jan 2027 10:12:38 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-12T12:52:19.332534Z","times_seen":20780,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=be211d8d-9863-469e-a82f-4484c0ecbccf\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=685e915dd72cb02cb4dbfe93f922478b\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=be211d8d-9863-469e-a82f-4484c0ecbccf\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=685e915dd72cb02cb4dbfe93f922478b\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7bc31b588fb550fe45e9cdd735e53d05\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":286,"dns":0,"connect":94,"send":0,"wait":94,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:40.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:20 GMT","end":"Mon, 16 Feb 2026 08:40:19 GMT"},"fingerprint":{"sha1":"6A:E1:8A:53:22:10:0A:EA:D5:8B:52:AB:88:89:E1:9C:72:AA:70:85","sha256":"F1:22:A3:0F:EE:FD:45:B1:E4:FA:14:E9:E4:1F:83:3A:81:45:61:0D:5D:82:48:E5:DB:D5:5F:95:60:4F:8F:DE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 09 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296405\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-12T12:56:43.953411Z","times_seen":731802,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":85,"dns":1,"connect":15,"send":0,"wait":15,"receive":19,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/cdn-cgi/rum?","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1068\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; cf_clearance=Zuw93k_6ORBwycdhlpielyTfV44RBoF3OoVwgaMJ060-1765620757-1.2.1.1-soY8xxjrEw939.2TCnozPam4akwS_u3ludZncEafQfUWFnjUO07RYCWgkrx8MQGzuK_OTVs91lr9Q2L9.XThGJea_fDULpG0jDieXYH6exSFdbfP97APS1ekourJrcMXN5400OXr8jV8FnYtOKRrS1hYrKfVVpfUAqIJg8WYHsmwIVykSlQA0UvrfqEQ170wrAgI.4_sK6eDADFCfGm._3uCFYoYIlHX3ei9Ap85YYw; ts_popunder-cnt=0; ts_popunder=Sat%20Dec%2013%202025%2010%3A22%3A37%20GMT%2B0000%20(GMT); dom3ic8zudi28v8lr6fgphwffqoz0j6c=be211d8d-9863-469e-a82f-4484c0ecbccf%3A2%3A1; pp_main_35ff2da05680fc57a56c63dce8032bfb=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1068,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1407,\"startTime\":1765620754973,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"95f3824c-9970-4f80-b962-d459e36aa99e\",\"location\":\"https://www.mens1069.com/archives/category/veins\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1717,\"domContentLoadedEventStart\":1977,\"domContentLoadedEventEnd\":1995,\"domComplete\":2994,\"loadEventStart\":2994,\"loadEventEnd\":3001,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":22,\"domainLookupStart\":23,\"domainLookupEnd\":23,\"connectStart\":24,\"connectEnd\":40,\"secureConnectionStart\":26,\"requestStart\":41,\"responseStart\":788,\"responseEnd\":788,\"transferSize\":62810,\"encodedBodySize\":61856,\"decodedBodySize\":201876,\"name\":\"https://www.mens1069.com/archives/category/veins\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":3001},\"siteToken\":\"bc7cd361de08426497565b7eca43aa77\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.mens1069.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsGwWHp21eVGvd8Q3kJGrynkrCdoWAGYqhB2rHLvGMLBujLwjq2g98%2FbUn5g5JEBFTMjFD7KZ5VR0zyRaDTgjwVb%2BjgrKPbuoxQZK%2BsX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ad4af2ac80656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Thu, 11 Dec 2025 17:46:43 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3ExQAAAwBuUwKDAH3BAAAAAwBWd59LgG3jgAAAA\r\nx-77-nzt-ray: 2a494a150b479e87393c3d69560bf300\r\nx-77-cache: HIT\r\nx-77-age: 5139\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":1,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=93","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=93 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1503\u0026rd=1503\u0026fd=595\u0026bv=25.12.2106\u0026tmpl=70","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1503\u0026rd=1503\u0026fd=595\u0026bv=25.12.2106\u0026tmpl=70 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":324,"dns":0,"connect":106,"send":0,"wait":109,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/responsive.css?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/css/responsive.css?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:40 GMT\r\netag: \"a84-63f5c5a03bf00-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 20 Dec 2025 03:27:55 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 863\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 2011480\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SAybZQBp0fEjS8NW4nEI1SZ9nS3sPNsakvM6ktM0KuOpOA40Qok%2BxTx4h5sTMHFyQVjKmaduScoLU3ry8U2Z%2B03sRtpBk5HKoZpxzmUZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c8f4f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2692,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a05dd840d2e58ac0e02d4ebde7faead7","sha1":"3aa2e9dcc969ffb1a657da804587550d9eedef3d","sha256":"e5857c2e0cbe877a9c39d39be8b127418f9e9101e4fd4d43c5f511f32a39d13f","sha512":"2b2d828e758fa91ecb9d1ebbd78323cc77b9caa3604b01e9e335b8d1bdad5c74336fed86ed9a29c477930ae499f6d4372fa894d2cf84c900a724ca339b8edf19","ssdeep":"","tlshash":"8451b1ce6be321142c5ab1766ebe53592335d00bd70edd563ae01128df4636089e3bec","first_seen":"2023-11-08T18:59:08Z","last_seen":"2026-01-01T22:13:52.172775Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unrulypause.com/cfDb9e6Pb.2/5cl_SjWPQv9WNbj/IeyHMaj/ITybNJSk0D2PMHj/I-yiM/j/IS2p","fqdn":"unrulypause.com","domain":"unrulypause.com","tld":"com"},"ip":{"addr":"88.85.69.212","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"unrulypause.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 12:56:00 GMT","end":"Sat, 21 Feb 2026 12:55:59 GMT"},"fingerprint":{"sha1":"76:B6:43:77:B7:83:C1:EB:B5:87:32:59:95:8E:DE:A8:AD:33:03:8F","sha256":"C5:7A:24:CE:7D:F3:A6:FB:E7:F2:42:8B:E5:21:8E:E8:31:AC:D6:D2:8C:46:42:B2:48:4B:1F:EE:52:58:F2:74"}}},"request":{"raw":"GET /cfDb9e6Pb.2/5cl_SjWPQv9WNbj/IeyHMaj/ITybNJSk0D2PMHj/I-yiM/j/IS2p HTTP/1.1\r\nHost: unrulypause.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\nlast-modified: Sat, 13 Dec 2025 10:12:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: uniqCookie=4a5f0e309418d3680dd02bac29885faf; max-age=1768212756; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38035,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22811)","md5":"a9718d55050346679c512da8f3c38747","sha1":"88534b421c348b511bd221ee02018ae4ba472986","sha256":"20a5509949440801e2f6ceaf1ffe05898f0310275a9400e7ffc1add536d4123a","sha512":"361e8f4579a7a9aae35eebd4e90a832a78c899be79fbac4cb87b6c4e6170d87c8ce58d8ec9e41598de9149abbf1ba67405ff669f1ce472995625401e18cca667","ssdeep":"768:bZhdZg7J05MLfTF9dFaQNp8JY29c6SboEBkleZ2YoOcLhbbPTgLgooDMiG82IGJs:bZ1g7JFLqQNp8Jr9c6SboEBkleZ2qcL1","tlshash":"5303a6c871c3642642eb507d713b7208723a54656429f028bc79c8e4bcb9e9f8677bbd","first_seen":"2025-12-13T10:13:13.330171Z","last_seen":"2025-12-13T10:13:13.330171Z","times_seen":1,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":75,"dns":33,"connect":17,"send":0,"wait":52,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9ad4af248bd156a2-OSL\r\naccess-control-allow-origin: https://www.mens1069.com\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":45,"dns":33,"connect":5,"send":0,"wait":12,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.221.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.mens1069.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b95ea07326f3451b66dc925b9db5e1aa","sha1":"e6a6dc5c4932d4cb1658de73a869b75ea881ead9","sha256":"5ed10781516dbea70564827789c174ccd8e972eee4ce1071e9d5e4e19b1705a3","sha512":"cee470e0a1f483da69efcb41ce0286912c4e37692a5ee92349a490580e2a1c5ecd23f45c91dd1b7ee3c27ee6fefdfa1c2491d4156c1e3bd831313875a50c0aa9","ssdeep":"","tlshash":"ba900441c57004c504c4330314411cdd1c0331010070f10f7d5d74510551d0d54300c7","first_seen":"2025-12-13T10:13:13.317222Z","last_seen":"2025-12-13T10:13:13.317222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/199688/d28da6008b8dab00e69aeca7cc83e7bf0765e1ae.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/199688/d28da6008b8dab00e69aeca7cc83e7bf0765e1ae.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7562\r\nlast-modified: Wed, 07 Aug 2024 13:40:27 GMT\r\netag: \"66b3794b-1d8a\"\r\nexpires: Wed, 17 Sep 2025 19:12:53 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3gzNyAAwBuUwKCQH3PN95AAwBw7WvBgGXhTRXAA\r\nx-77-nzt-ray: 2a494a15e461c79b3b3c3d6914bd7005\r\nx-77-cache: HIT\r\nx-77-age: 7484291\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"abb2126f91dd5191b2e609b2ca502781","sha1":"d28da6008b8dab00e69aeca7cc83e7bf0765e1ae","sha256":"6f088755dc8a75b15fdca42088258868dd54c0daef7d8232826b7671ff4915fc","sha512":"5bacd2eb9e0a00e4b35dc7e2328e0f3a71c8e49671eea3c092cd4bb2d99b5b4981c8004e49bc770530aeef3e1948b8b55129712752e724f13c2d96697f307ee1","ssdeep":"192:VE9DhN107eZL8A8KtIdHwiyCY6u164YSY7mipA5N6be:6dhN107eZL8A8KeQiyCY1LcpcNCe","tlshash":"5bf1af33f1cddd0c88a3a40838781669c77040123ca6527d75af0e13356a3e99a6ff1c","first_seen":"2025-04-15T23:58:10.138376Z","last_seen":"2026-04-10T20:25:17.379164Z","times_seen":166,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":57,"dns":18,"connect":5,"send":0,"wait":1,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/uploads/2022/08/Veins-VOL03-133-768x1134.jpg","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/Veins-VOL03-133-768x1134.jpg HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 03:35:17 GMT\r\netag: \"1bd7f-63f5b82112740\"\r\naccept-ranges: bytes\r\ncontent-length: 114047\r\ncache-control: max-age=2592000\r\nexpires: Mon, 12 Jan 2026 10:12:37 GMT\r\nvary: User-Agent, accept-encoding\r\ncontent-type: image/jpeg\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHdiaJR7p%2FA%2FoOYVeswAn2UsgOaPavt%2F9D4%2FNpkNDcgSI8KLRq5ca8emID6bJ1Xe71gNpTT2GrFdihidiBXSHohTxG0u7hvrI%2FiXjnpG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c9f5256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Picasa], baseline, precision 8, 768x1134, components 3","md5":"8535b794fc3a68d80a3ec03afe40d07f","sha1":"c0a7e4de0cd457b36cc30aee922a24897dc77005","sha256":"26d5ca5466170f73f39ed79304f965d90b19d4a7f4fb6911e68aa311ee820665","sha512":"078ffd629f0e9c7a291a9b664e67a49d72b57be2d785b596ba01794af049bc467b21c6886c7ac2fbaf1c1f0fc0379ce36f42b82043fcbb7cde8c16882b108bc3","ssdeep":"3072:Pg35fc0fYl8sv5a4dyFFMaIHLqJPEzbfA:4JFwNFyDMnON0fA","tlshash":"30b3120a7d0596b0cdbb3b78d074f5c1a2ad367d82aa4234e6d195177b3e3b2d02a317","first_seen":"2025-12-13T10:13:13.333091Z","last_seen":"2025-12-13T10:13:13.333091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1211,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/js/ticker.js?ver=1.2.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/js/ticker.js?ver=1.2.1 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"627a-63f5c5a3185c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Dec 2025 14:06:44 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 8285\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 1109151\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93K0zlLxHA1ZmG0oh7LTLQedEX2TJX3cg4FMfTvnIK2cWTs5I9IP%2BhojMEJi8tP7EpExtm3zysIVMOHzqk8Z0xz845OJqvBJ2HDdZKIf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1cff5e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25210,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"713b48f26bc87130e2f0a9c490dcdafa","sha1":"d1d247b84ab6eac2f8fee1813756efa33e454aec","sha256":"7b03ff0224edb6094db4bcb2a81fedfda9e74fc38539a1f0ea68b9294445a324","sha512":"06e5f26eec99b0e0e85d2249300f4399f13f2478ef0a18e21343d1544eb36e1fe65c58ef5d6cc2a716e3317dfd15893bc91273420a3020266a28e11eda94c74d","ssdeep":"768:hNdIwMjXE7Hg2njCuSFZlPnXSTxi+jjnZwXoIg8sYCppsQsesDtx7/TnHJcQ:BIwMjWHg2njCzZ5XSTxBjjnZwXoIg8sS","tlshash":"dbb2988da7ee7011473720388a9fa08a797d5427144dd977bc9d81a83fd493843eaef8","first_seen":"2023-03-08T08:25:10Z","last_seen":"2026-04-12T06:41:35.304645Z","times_seen":87,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/webfonts/fa-regular-400.woff2","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/all.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"33dc-63f5c5a3185c0\"\r\naccept-ranges: bytes\r\ncontent-length: 13276\r\ncache-control: max-age=172800\r\nexpires: Sun, 14 Dec 2025 01:38:06 GMT\r\nvary: User-Agent,Accept-Encoding\r\ncontent-type: font/woff2\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\nserver: cloudflare\r\nage: 117270\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQq7mja5ayped66xjshXK%2BgVoEJzX2An2RyvnA7SYaxONYymMzieCWM7yCbECQSz4IhaIc3yfhMwNYOa86IPZeBlXl5R%2Fd0AIX%2BQynro\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1f5f8e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-04-12T13:28:32.331738Z","times_seen":39758,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xq7nk3rlddzu.l4.adsco.re/","fqdn":"xq7nk3rlddzu.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xq7nk3rlddzu.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":134,"dns":66,"connect":24,"send":0,"wait":23,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.221.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.mens1069.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b95ea07326f3451b66dc925b9db5e1aa","sha1":"e6a6dc5c4932d4cb1658de73a869b75ea881ead9","sha256":"5ed10781516dbea70564827789c174ccd8e972eee4ce1071e9d5e4e19b1705a3","sha512":"cee470e0a1f483da69efcb41ce0286912c4e37692a5ee92349a490580e2a1c5ecd23f45c91dd1b7ee3c27ee6fefdfa1c2491d4156c1e3bd831313875a50c0aa9","ssdeep":"","tlshash":"ba900441c57004c504c4330314411cdd1c0331010070f10f7d5d74510551d0d54300c7","first_seen":"2025-12-13T10:13:13.317222Z","last_seen":"2025-12-13T10:13:13.317222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/8107cc82aa1ad379499aea72ba549b7e5b2e9e47.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/8107cc82aa1ad379499aea72ba549b7e5b2e9e47.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 193392\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-2f370\"\r\nexpires: Wed, 21 Oct 2026 20:43:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3U7hEAAwBuUwKDAH365IAAAwBJRPCVwG3TgAAAA\r\nx-77-nzt-ray: 2a494a15e461c79b3b3c3d694ef9ba21\r\nx-77-cache: HIT\r\nx-77-age: 4503635\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":193392,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"ed460e0ab40e30aa9b90d1a269a8187d","sha1":"8107cc82aa1ad379499aea72ba549b7e5b2e9e47","sha256":"33bab9495a93de15a862e7e189c10977fdd809e93ed9735ea434d5a40313f513","sha512":"53d936990299434249bd24da9fddb43e09d3ca9abb7f082b4b8577df00eb3d26e5772fc42476d373fad4db09c52cf33de8bd8f36994a105c8ce0e0fa47cd9db1","ssdeep":"3072:J0x6MKnWdXE0nQpqhWy/GqegLGt/r3dQ0rWIYuv4q1k+gsp7JCcKvzKJ8Pvugs5x:JVMKnWdXE0Qpry/NPLm3dQ0rWIb4Q1bZ","tlshash":"ff141229ac990989d22ca6391804bed207f30ce2c5531d738f7f665f8b765496f318ba","first_seen":"2025-10-22T16:51:38.724449Z","last_seen":"2026-04-12T08:06:36.159044Z","times_seen":238,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/nqkndwtihetas?qZQknPlI=BQOCAAAAAAAACZUAAkogceUlVDt2C2S5uc1UGQOwDTaMJy-RWmUs8L4ytA1M5EY069lYXMuZhe-FF2s47UmvlHwgEUF36n2leRFSKxnTrBaBgYTgTCCuyiXLyoXKh8BJa3l6hImmgly3badAELS6tynvIcN4ukUwRKk6Ae7AJJzDWh_IdeUY-Qz0geJHKJArjBkjf7wsR-IQoKsJ8YxJ6pQopWT93FHI21t9PLInh0fsOXBytsRPPXlIf-Dc-VCf4Em0iKgUTypnEJP3HzWKHd8MubtV2gJ3hsAKCRbyVVcGHBD7420yorrQHm-IG7do0Vhw4U2VQcaZl45EZbqeekpbxuYttpS7aEY_UtDQA84QxMRRQ-d7K7J04I5H-36oyX76ax-Cw0ACNxC4IccJwKbdY4IFMlId7laATIY75CZKSyF5L0tBSPouh6YB7s6RYJKxcY6RWg_QhSCdf-7V77esGcEGV6R-e_5Es5r2wUHnk7oQyHG-ogO32wQPUqXOf8PTTzpxICfw9TxaCV_0xuTlfTpz5eWbSMkRE1b6nBUoL5PU3Ofjzh-v0q4FiOU3hCPM04tneN32lR0KcodXlcP0ln2kg3JHpIJSM8NMruzB39sk83XCdVrgxcpRTwKcZStyxFUDJ6ckEo7hMMnpqJC7J45BeYSy_PZBKe5UXZ-a4YlRUT7EExolkvj1YppxZLI2cGpBpspcIjpk7bHY3pN3Vfm7KrYRjT0R2y9iUQOepQ0j2w3pRjc6GLfOsWYa2UrLEH56wfcqIjJZef8qMy0iI9SHjZ2ZZhFYIiev8Y4TQAGnJSCr04tLngmCpEWGH-oe5tKHh8PZ2xrb18AQRTrvEtlQoGwamSu-u7hkQ1iW5F6b0m37txpT9vSemIBYYu84wEBp_3vjsm1DDqTDz16mIe4PYqF3hEcJJdn7loWUEKxAPDDIh_FJQL5gYb33mHykeYRKj9G_I6wXIjUd6CNbM3lZfjCkchK_rKnnxaItcHQkmb5PNMrWcNDPe5j7p6BPQSyl1FWdAGBbqsCNCA1ltrklQ2yb2GHp7I-kikIzunyCQAN2zKm4L9k-KBRe4eAePI8KEAC_JksVclaVwcNURYocJ7DFf9BBDfT4i3LqHo4NWNNOaFUYJlmw7ev-iWEgNFzWq5nVtd2qNvTMMzljzwMlGACiKpLEFiGpftgq32jsvdgI4-3X4reL\u0026uWVTAtej=4\u0026GyLEvktf=4935018\u0026ZSVfeWka=\u0026tJLepMvW=0,0\u0026qfjldLhQ=\u0026oNwrRMKV=\u0026lERmZSIY=1280,1024,1,1280,1024,0","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"displayvertising.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:A7:E2:24:FF:EC:EC:B7:A1:F9:77:02:9A:AB:B1:8A:AD:9C:95:5F","sha256":"D1:55:30:57:68:7E:A4:DC:AD:2D:9F:A1:1B:7C:6C:B8:5C:58:E6:3B:4D:43:6F:96:32:54:96:A6:27:2D:D5:0A"}}},"request":{"raw":"GET /nqkndwtihetas?qZQknPlI=BQOCAAAAAAAACZUAAkogceUlVDt2C2S5uc1UGQOwDTaMJy-RWmUs8L4ytA1M5EY069lYXMuZhe-FF2s47UmvlHwgEUF36n2leRFSKxnTrBaBgYTgTCCuyiXLyoXKh8BJa3l6hImmgly3badAELS6tynvIcN4ukUwRKk6Ae7AJJzDWh_IdeUY-Qz0geJHKJArjBkjf7wsR-IQoKsJ8YxJ6pQopWT93FHI21t9PLInh0fsOXBytsRPPXlIf-Dc-VCf4Em0iKgUTypnEJP3HzWKHd8MubtV2gJ3hsAKCRbyVVcGHBD7420yorrQHm-IG7do0Vhw4U2VQcaZl45EZbqeekpbxuYttpS7aEY_UtDQA84QxMRRQ-d7K7J04I5H-36oyX76ax-Cw0ACNxC4IccJwKbdY4IFMlId7laATIY75CZKSyF5L0tBSPouh6YB7s6RYJKxcY6RWg_QhSCdf-7V77esGcEGV6R-e_5Es5r2wUHnk7oQyHG-ogO32wQPUqXOf8PTTzpxICfw9TxaCV_0xuTlfTpz5eWbSMkRE1b6nBUoL5PU3Ofjzh-v0q4FiOU3hCPM04tneN32lR0KcodXlcP0ln2kg3JHpIJSM8NMruzB39sk83XCdVrgxcpRTwKcZStyxFUDJ6ckEo7hMMnpqJC7J45BeYSy_PZBKe5UXZ-a4YlRUT7EExolkvj1YppxZLI2cGpBpspcIjpk7bHY3pN3Vfm7KrYRjT0R2y9iUQOepQ0j2w3pRjc6GLfOsWYa2UrLEH56wfcqIjJZef8qMy0iI9SHjZ2ZZhFYIiev8Y4TQAGnJSCr04tLngmCpEWGH-oe5tKHh8PZ2xrb18AQRTrvEtlQoGwamSu-u7hkQ1iW5F6b0m37txpT9vSemIBYYu84wEBp_3vjsm1DDqTDz16mIe4PYqF3hEcJJdn7loWUEKxAPDDIh_FJQL5gYb33mHykeYRKj9G_I6wXIjUd6CNbM3lZfjCkchK_rKnnxaItcHQkmb5PNMrWcNDPe5j7p6BPQSyl1FWdAGBbqsCNCA1ltrklQ2yb2GHp7I-kikIzunyCQAN2zKm4L9k-KBRe4eAePI8KEAC_JksVclaVwcNURYocJ7DFf9BBDfT4i3LqHo4NWNNOaFUYJlmw7ev-iWEgNFzWq5nVtd2qNvTMMzljzwMlGACiKpLEFiGpftgq32jsvdgI4-3X4reL\u0026uWVTAtej=4\u0026GyLEvktf=4935018\u0026ZSVfeWka=\u0026tJLepMvW=0,0\u0026qfjldLhQ=\u0026oNwrRMKV=\u0026lERmZSIY=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb4\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-12T12:51:58.265399Z","times_seen":23240,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":303,"dns":0,"connect":92,"send":0,"wait":110,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=STIX+Two+Math%3A400%2C400i%2C700%2C700i%7CInter%3A400%2C400i%2C700%2C700i\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:24 GMT","end":"Mon, 16 Feb 2026 08:40:23 GMT"},"fingerprint":{"sha1":"D2:D0:B6:8B:C1:78:F6:EE:87:02:EC:05:E4:EE:EA:71:6E:AA:66:42","sha256":"F9:3D:F1:E7:59:9A:99:EF:7D:47:70:33:FA:AD:2E:9B:E6:68:28:39:08:52:7F:C4:F0:66:B1:E8:19:70:25:23"}}},"request":{"raw":"GET /css?family=STIX+Two+Math%3A400%2C400i%2C700%2C700i%7CInter%3A400%2C400i%2C700%2C700i\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Dec 2025 10:12:36 GMT\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (857)","md5":"7b8780df1b3e3b059a71a9b831b1bd69","sha1":"579de4b756bbcd8bfc1affa895af745678456476","sha256":"8f9a78819eea93fd43b3a4ef4a93fa547d9b9354b51f645cff9eba67bc7d582f","sha512":"702147eb5d92addbe3dc42acbb00b336f50c3437f1a01a65ff928c32cfdbfdf71e8c0cd3ffcd74720867e3325248b54b93648b81c0709daf056646c3434d37c8","ssdeep":"192:vkRfk3kyk53gkakDVkfpRfp3pyp53gpapDVpPNP6TO3KkxxkN2jqO3zpxM9Mqf2C:vafUVwgzAanf5sLgYXfVwINqG5sp","tlshash":"0e42eb92002be80067931dd223cf7e36dece51997086d47a6ffe0dc9acdac66526436d","first_seen":"2025-10-08T18:47:51.455803Z","last_seen":"2026-03-14T12:36:22.312868Z","times_seen":16,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":190,"dns":0,"connect":29,"send":0,"wait":48,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kidsinstancesfavor.com/35/ff/2d/35ff2da05680fc57a56c63dce8032bfb.js","fqdn":"kidsinstancesfavor.com","domain":"kidsinstancesfavor.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kidsinstancesfavor.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 08:39:59 GMT","end":"Tue, 10 Mar 2026 08:39:58 GMT"},"fingerprint":{"sha1":"96:ED:09:0C:89:2C:06:08:F2:B0:AC:9A:CB:4E:E7:B7:CB:16:7A:B6","sha256":"46:6A:3B:52:F6:5B:90:B9:BD:43:BC:58:25:C3:B0:6C:F0:D6:1D:2F:CE:05:ED:25:7F:29:18:CB:36:A4:4E:64"}}},"request":{"raw":"GET /35/ff/2d/35ff2da05680fc57a56c63dce8032bfb.js HTTP/1.1\r\nHost: kidsinstancesfavor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38193\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: kidsinstancesfavor.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2820df1ae0a10015080699f9b732331d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea7965932c1a7abf0c787026fc49c490","sha1":"557263bd51f98d1b4cd1caf167630841abe77a15","sha256":"bf0176286158c80c692f40f3b87e72de0d4589ede83e289c1345836dd4e13e89","sha512":"ba673ffa9477125959c39411b1825cc5a1e9a4d02056520327a81d5b4796b6e04f18aa27829d7af04c26c1c7f0f5dd5a347baa3c04c17f3bc140a92f247aa069","ssdeep":"1536:EpOvTY8Afd1ow5ZEUjHzQSF63R2LbqKYmEqMTd01yLVH2WQgPrNQCld5h4s9imfD:qXLD33COgu+bAKAS","tlshash":"3ba3c9d97f40f06d4271607a113fa00af25b0e46688cd59ce117f6a42fa866fe57ef28","first_seen":"2025-12-13T10:13:13.340929Z","last_seen":"2025-12-13T10:13:14.624934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":267,"dns":67,"connect":92,"send":0,"wait":97,"receive":93,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"kidsinstancesfavor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-12T12:52:19.355942Z","times_seen":2220,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":169,"dns":33,"connect":35,"send":0,"wait":34,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9ad4af247baa3181-OSL\r\naccess-control-allow-origin: https://www.mens1069.com\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":40,"dns":34,"connect":1,"send":0,"wait":13,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbs?c=1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:40.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:40 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/assets/css/block.css?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/assets/css/block.css?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"103b-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 20 Dec 2025 17:12:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1180\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 1961987\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJcS4aCYV0S78OXNQmwrydlroQnjnc0MBsWNDoOTsgIeuke9gae9hG4wRxlcGt9VriiMkJvABcmC70CtCwExDobLlcPSf9wPdcnQba1Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c8f4b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4155,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"626cf5277508c1a7d0e99b453060c867","sha1":"69374284b51ff04c5e1fe861b2387e8b4485f7c1","sha256":"aa6b3f72cbed180ce3179d3270e78eeb02f605521d5f5f7d16cd9578c0bb059b","sha512":"1337c24a3b37a2347bca742c432ffed97f3b9f0e1396ff1ba8c9a31741af5db374c2cdfd1749576e7939b7678cf6d07ddda46d3d6a9ac60ece43e675fef4450c","ssdeep":"96:739e0AbZR6LtBwsVsJS6SsbG/Pe/OV/Q7:z9eL6BnVVr+","tlshash":"7781df889f73a8e5623fd778dfa05618fe8800d25b8293e1f891d184670cc591dbdf8a","first_seen":"2023-04-25T03:44:16Z","last_seen":"2026-04-12T00:54:44.524086Z","times_seen":257,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f609.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 19:44:42 GMT","end":"Sat, 24 Jan 2026 19:44:41 GMT"},"fingerprint":{"sha1":"FD:D4:B7:E9:AC:7B:28:11:0D:96:A9:CC:26:88:07:21:A3:BD:51:DE","sha256":"E6:36:0F:D2:9B:17:E4:A8:11:A6:86:BE:23:8C:5A:3E:36:6A:2E:39:90:F1:28:C5:6D:5F:8B:4B:3E:FF:1B:12"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f609.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:04 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e41bfdeba797283ee9da9bb439c3ece","sha1":"28d185d6ebd6be4e7ed4e277cedbb1e10f5250e9","sha256":"2468609517599c10415c9c9b65024cf697b747dbb837d07d0ea12130f224c65f","sha512":"dcf4664c9f766e7b01514c2e6ba55d37b0503080878191ebb3816bcc769a954d809bac553ef96f9dd42b3dee5949d86e7ddabc6e91284192cd61037ec4c0fabc","ssdeep":"","tlshash":"b521418c4578a3c1d9c7e78ee7bb5594704bb06bdcd213f5e9aa8344309fcc5b806a94","first_seen":"2023-05-01T23:33:02Z","last_seen":"2026-04-12T13:21:24.040815Z","times_seen":1887,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":29,"dns":21,"connect":10,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/uploads/2022/08/Veins-VOL03-1-768x1109.jpg","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/Veins-VOL03-1-768x1109.jpg HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 03:16:00 GMT\r\netag: \"142b8-63f5b3d1abc00\"\r\naccept-ranges: bytes\r\ncontent-length: 82616\r\ncache-control: max-age=2592000\r\nexpires: Mon, 12 Jan 2026 10:12:37 GMT\r\nvary: User-Agent, accept-encoding\r\ncontent-type: image/jpeg\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLh9mIIzwCT%2F1syASVQH9Iz7mDA9t%2BHxgSXg7mJYYlNUw2bNbv1DRGvanocBC98%2Bl%2FLVsDMT9LyPG9JHwVyz1xuwXdxMaiky0tg%2F03y%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c9f5456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Picasa], baseline, precision 8, 768x1109, components 3","md5":"77769f03adb76405991ab32100132705","sha1":"1ed969c9cc680aa5a87f85ddb1da20337fff8e57","sha256":"65dea29ec9f0eb1e66af9c9d1c3374bebfee4861f80187435b14f072db5db6a8","sha512":"1aca57e84bbb085f0e1c652e1cb02a3da0af49c28e3902bbaa6bf8abb2a9ee581c9dd52062ce10efa24b849db9bc6bf0d2391e9a69421d0cdf4856ee7e8105d8","ssdeep":"1536:a6DbrhB/goQ9dWlD9nLDiFlcF354nXO+e7kuqrVe2w48Cx3RcdCiCpxws4JSu:rDRB/goYklBnLycF35V+tro2V3mCU9Su","tlshash":"15831290f436920fcf585e35ba1671f6cd06879ab07a564fece4f95826436cab2b0348","first_seen":"2025-12-13T10:13:13.344914Z","last_seen":"2025-12-13T10:13:13.344914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1278,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/dsp-pixels","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /dsp-pixels HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nserver: nginx\r\ncache-control: max-age=172800\r\nx-request-id: f40b8a29-755f-4fb6-acc7-1e635f8ac16a\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Accept\r\nexpires: Mon, 15 Dec 2025 10:12:37 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d65d54baa73d8c5cf1b4145ed2f566ce","sha1":"1924c807418dc7cdf8135bbf2be4e89402e21bfd","sha256":"282322db040ca32cc2f1657864a542d7b60f5d47f4f0f0f7708704acb3c54a88","sha512":"4d9b73b80c65606c0e31a0666a398ee5660fba63277c5abba2938038ba02c1de315fc3e9be8db67e252b8789699f93644347c5805b5a6cdc1b1063cfc9eb4b37","ssdeep":"","tlshash":"5ba022bb00a8b0ceaf20e0c83008a0000ccf80b820a88088ccf22cc0820b3a23030288","first_seen":"2025-06-26T11:56:09.222052Z","last_seen":"2026-04-12T10:38:59.983477Z","times_seen":2996,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/sbar.json?key=685e915dd72cb02cb4dbfe93f922478b\u0026uuid=be211d8d-9863-469e-a82f-4484c0ecbccf%3A2%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /sbar.json?key=685e915dd72cb02cb4dbfe93f922478b\u0026uuid=be211d8d-9863-469e-a82f-4484c0ecbccf%3A2%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4779\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.mens1069.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; expires=Sat, 20 Dec 2025 10:12:38 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 14 Dec 2025 10:12:38 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 14 Dec 2025 10:12:38 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sun, 14 Dec 2025 10:12:38 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sun, 14 Dec 2025 10:12:38 GMT; path=/; secure; SameSite=None\nu_pl26971141=1; expires=Sun, 14 Dec 2025 10:12:38 GMT; path=/; secure; SameSite=None\nslec685e915dd72cb02cb4dbfe93f922478b=[6259582]; expires=Sat, 13 Dec 2025 10:12:43 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 215\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a718f9ba7b0cbb7ec235a01b2f615d84\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6102,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"b6a8f4edc5ceb4bf675b0708f4351d03","sha1":"242774d477e9fdd2f308f4cf11db755a53412d9a","sha256":"d3b350b57e1cec276748121a41b7181198258f6fa246ce6c8eedbd72e4631db7","sha512":"8b08010bfc1a8d5c00d63817540ba2330cc8bd532b2f3e25f716cce86733b50c2f1e915d32ac31331250f98e39abc8abf81823ecba280916f59fbd96a109365a","ssdeep":"96:9z3yHomIphrxJ6nOH5Xngh+Yi7YniA4/GfE230iKHJXu1veFrvjlHUXWLYnMieZK:9z33Dn19n2+57Yip0Ei+UcFzjl0XWqec","tlshash":"91c18e78e544478116d31d2cbe02bef46c69210f5f99b61d08ff87ef4027ba8250d6e4","first_seen":"2025-12-13T10:13:13.348039Z","last_seen":"2025-12-13T10:13:13.348039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":351,"dns":28,"connect":107,"send":0,"wait":324,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/ren.gif?sid=H4sIAAAAAAAC_1SSz2sk1RfFX2Umq-_iq-MwrgZamIWC6VRVV3e6HDWYGaPBmIRMJItZyPtVnWeq6tXUq-rqNCLBwDALFz07wU3ldDJBDeL8AULouAsI066ySBDnTxBmLZ00BO_i3lN8anHuue_xbn5Oasjp6crnuqvCkE7Xq3bl7XUVC12YytJaxbGr9t3Kuoob3t1KZ9TS9ntOzava71Q-kXxTT7u2Y9uO7VTmVSoD3Zm-oFDJoe9UfbvquVWn7qGT_vfb5BYMtSDa5-QGlBj-_2XwEIoPEEe_3pdmM9PJux9HeUgznaItDr6IN2NdxIiuZJBaCOKD8d_QZkjI9xPQ8cF4A-j23mgDMDUkE7fOwOKDsU2w9v6lUxZCxmDifyjaA8hwAEUH4HoHSrwgABdYWkYcPVvSaUG3Likd0SG5_uofqGJIrp_dRBz9MheqTuWBDvNM6digE5RQnQFUa4AkP0bWtaCKY_DsWyjxB5l-tYg42ls2oYYSp3eYdB1HNMWU32zUpryGL6do0w2mPK_pcVtyxnlwEZEKBqBmArmxkCsLeWAhTyxE4rTi2U2PO7TWCHzBZ2yPep6QzPabrm1Tn88g5yPvPWRJDzzsgafbSNJtbKqnL-o3kOZHMBsljLBgMoK2KFFIgsIQFJSgUARFRlC0y30RGteUz0RocuaMpzuetbKvs9Yu3ddZS8YENO0hFeWeSh6ZHfDsWr8bGNHXo0ZZVvYpE-Vuck5eHyVr_fDdJDblaaXRrEvfqQsx43Jmu5x5ggXSrwW-63ozTQajSigzAWosdNWQvPX1EhI1JJO3H4HRY5jwGFy9BprfBi1K0I0S3fgwkrFx7IZf5TqC0CWS7DqyLWs3PCdv9FfX5o4uDvzlzjeQ_GT2Ze2iwNMSSVriK_U7QSt80l_VBdlb1YUhz5eTTEWqS0fHf5DRTF776TO5VehULNw3vR8_4iMwkodr0mSLNBYqbhny85wSQqbzOuWS_LZg1iVbyc3GXJ7GebK4cm9-IUpSaYzS8QBUDQl5PgmuhuTmvQ8vHnaj-SZ4sg2TnMz-fWPy6PGdMxhNwBILoRqSTx_-hVBeMcpKGHlCxgV2pXfNE7RSCzTbQRyVaKcl2mEJGvZg8mv9LElPZv8cZ8FCq8_C1NpjYRo-vczKqNNK3WW1RrPZkEFDBDVRc2vCr9vS96jf8HyvjswM1Qfv3_o3AAD__w_gHrR_BAAA","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1SSz2sk1RfFX2Umq-_iq-MwrgZamIWC6VRVV3e6HDWYGaPBmIRMJItZyPtVnWeq6tXUq-rqNCLBwDALFz07wU3ldDJBDeL8AULouAsI066ySBDnTxBmLZ00BO_i3lN8anHuue_xbn5Oasjp6crnuqvCkE7Xq3bl7XUVC12YytJaxbGr9t3Kuoob3t1KZ9TS9ntOzava71Q-kXxTT7u2Y9uO7VTmVSoD3Zm-oFDJoe9UfbvquVWn7qGT_vfb5BYMtSDa5-QGlBj-_2XwEIoPEEe_3pdmM9PJux9HeUgznaItDr6IN2NdxIiuZJBaCOKD8d_QZkjI9xPQ8cF4A-j23mgDMDUkE7fOwOKDsU2w9v6lUxZCxmDifyjaA8hwAEUH4HoHSrwgABdYWkYcPVvSaUG3Likd0SG5_uofqGJIrp_dRBz9MheqTuWBDvNM6digE5RQnQFUa4AkP0bWtaCKY_DsWyjxB5l-tYg42ls2oYYSp3eYdB1HNMWU32zUpryGL6do0w2mPK_pcVtyxnlwEZEKBqBmArmxkCsLeWAhTyxE4rTi2U2PO7TWCHzBZ2yPep6QzPabrm1Tn88g5yPvPWRJDzzsgafbSNJtbKqnL-o3kOZHMBsljLBgMoK2KFFIgsIQFJSgUARFRlC0y30RGteUz0RocuaMpzuetbKvs9Yu3ddZS8YENO0hFeWeSh6ZHfDsWr8bGNHXo0ZZVvYpE-Vuck5eHyVr_fDdJDblaaXRrEvfqQsx43Jmu5x5ggXSrwW-63ozTQajSigzAWosdNWQvPX1EhI1JJO3H4HRY5jwGFy9BprfBi1K0I0S3fgwkrFx7IZf5TqC0CWS7DqyLWs3PCdv9FfX5o4uDvzlzjeQ_GT2Ze2iwNMSSVriK_U7QSt80l_VBdlb1YUhz5eTTEWqS0fHf5DRTF776TO5VehULNw3vR8_4iMwkodr0mSLNBYqbhny85wSQqbzOuWS_LZg1iVbyc3GXJ7GebK4cm9-IUpSaYzS8QBUDQl5PgmuhuTmvQ8vHnaj-SZ4sg2TnMz-fWPy6PGdMxhNwBILoRqSTx_-hVBeMcpKGHlCxgV2pXfNE7RSCzTbQRyVaKcl2mEJGvZg8mv9LElPZv8cZ8FCq8_C1NpjYRo-vczKqNNK3WW1RrPZkEFDBDVRc2vCr9vS96jf8HyvjswM1Qfv3_o3AAD__w_gHrR_BAAA HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:39 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 10\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e583c16ba8eae5b07b28bb50200187f8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:40.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:20 GMT","end":"Mon, 16 Feb 2026 08:40:19 GMT"},"fingerprint":{"sha1":"6A:E1:8A:53:22:10:0A:EA:D5:8B:52:AB:88:89:E1:9C:72:AA:70:85","sha256":"F1:22:A3:0F:EE:FD:45:B1:E4:FA:14:E9:E4:1F:83:3A:81:45:61:0D:5D:82:48:E5:DB:D5:5F:95:60:4F:8F:DE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 09 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296405\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-12T12:56:43.953411Z","times_seen":731802,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":110,"dns":1,"connect":16,"send":0,"wait":15,"receive":7,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0b528242b32fea73fd46c78d834d4fff\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-12T13:26:31.628608Z","times_seen":13850,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":74,"dns":1,"connect":32,"send":0,"wait":23,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:37 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d717618475fb6f6b9ee4c422411a06f4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-12T13:26:31.628608Z","times_seen":13850,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:40.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:20 GMT","end":"Mon, 16 Feb 2026 08:40:19 GMT"},"fingerprint":{"sha1":"6A:E1:8A:53:22:10:0A:EA:D5:8B:52:AB:88:89:E1:9C:72:AA:70:85","sha256":"F1:22:A3:0F:EE:FD:45:B1:E4:FA:14:E9:E4:1F:83:3A:81:45:61:0D:5D:82:48:E5:DB:D5:5F:95:60:4F:8F:DE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 23:53:40 GMT\r\nexpires: Wed, 09 Dec 2026 23:53:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296340\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-12T13:20:23.791248Z","times_seen":56391,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":118,"dns":1,"connect":28,"send":0,"wait":20,"receive":3,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"3509-63f5c5a3185c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 11 Jan 2026 23:09:14 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4907\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 39801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofx8HClPl9NTQ8wuNej1oy6mx3Kp2iL6YjYu%2FL96xEZqCzRaVl1Ofc4PdAtQ%2FZdMSVpGR9ShlbWlNOmxc3yNFh2oAMH4MhpbjBHsEq5P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c9f5056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-12T12:57:47.44358Z","times_seen":656748,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QXUqDMRC8ihdomN3sZpM++6ygeICQVulDW+hXSoU9vEn8EDVDfsjMZmbDYN0Qbyg+QLfE22heKBQE4UAq/vT84kJ+3J8WQiqhnY8ukkXJzZCHPEvM4mqaCH1HdiWzDDix9CLk5AKPjg7WKDJOAehPwN9eH+ekDvYI3Fl75TR2hstgOONO4FnY9pWLxd1I0XZFoWr7bA1kKXPpcvyNi2+EpGbTBD/YDHEkidxD9QGf13X5PDX3X8IBXVvAtPjPrkxazXpzfYk0tfAlHOvHcrnNQDStAg+KvWeS/j23ejnU6+F8mvSo8V01KZXkvfYWY6RcqLaakrZSi1n7AnIHqKe9AQAA\u0026cb=e2e_693d3c1570c523.72943182","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QXUqDMRC8ihdomN3sZpM++6ygeICQVulDW+hXSoU9vEn8EDVDfsjMZmbDYN0Qbyg+QLfE22heKBQE4UAq/vT84kJ+3J8WQiqhnY8ukkXJzZCHPEvM4mqaCH1HdiWzDDix9CLk5AKPjg7WKDJOAehPwN9eH+ekDvYI3Fl75TR2hstgOONO4FnY9pWLxd1I0XZFoWr7bA1kKXPpcvyNi2+EpGbTBD/YDHEkidxD9QGf13X5PDX3X8IBXVvAtPjPrkxazXpzfYk0tfAlHOvHcrnNQDStAg+KvWeS/j23ejnU6+F8mvSo8V01KZXkvfYWY6RcqLaakrZSi1n7AnIHqKe9AQAA\u0026cb=e2e_693d3c1570c523.72943182 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: __uvt=s%3A32%3A%22009bf2abed67db7e842a6924845633a2%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":40,"dns":1,"connect":25,"send":0,"wait":27,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.displayvertising.com/kpostal.min.css","fqdn":"www.displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1503693843.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 14:38:09 GMT","end":"Tue, 10 Feb 2026 14:38:08 GMT"},"fingerprint":{"sha1":"A7:3D:55:99:7C:90:CE:FA:29:AC:B8:D2:B7:C6:4E:3A:4D:CB:6F:AD","sha256":"3B:DD:7E:05:76:48:ED:11:E7:BC:5B:DC:BF:DC:32:D5:06:F9:E1:AE:5E:3A:A0:56:AF:12:92:B9:83:39:13:F1"}}},"request":{"raw":"GET /kpostal.min.css HTTP/1.1\r\nHost: www.displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb4\r\nexpires: Mon, 15 Dec 2025 02:08:04 GMT\r\naccess-control-allow-origin: https://www.mens1069.com\r\nlink: \u003chttps://displayvertising.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoJAffqCAcADAHDta8XAbcmAAAA\r\nx-77-nzt-ray: 2a494a151546bb8a393c3d693aa17113\r\nx-77-cache: HIT\r\nx-77-age: 461034\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41949,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"1d1c111cc5b3f49bec25b9fdaa0744b9","sha1":"aa5e3521dcb4732da0bc356baa3160325bcb6b96","sha256":"1d305691d12bd3a0b7c2b597ed92936bf4e3fec3e44741e67dc4a853f04b2057","sha512":"e3c521ffc3e9c41499ef3b89f3bd626cd89a6eb2402dca627ec1254584597980e02bab60c32e9ba98004e3632ef28276da62b2566cb5a2cab0a7826c95eaa5eb","ssdeep":"768:bt9rqAYKKeZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC/HCntlqoMA:bbdZzFQ9JsTgZvfzmMzhYrTscpwZ+","tlshash":"51133aaab286282601e742b9513eb316b23305167812d458fcb9cdf96e3ddc5127b7fc","first_seen":"2025-12-13T10:13:11.399565Z","last_seen":"2025-12-13T10:13:14.622543Z","times_seen":5,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":42,"dns":19,"connect":1,"send":0,"wait":23,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Thu, 11 Dec 2025 17:46:43 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3ExQAAAwBuUwKDAH3BAAAAAwBWd59LgG3jgAAAA\r\nx-77-nzt-ray: 2a494a150b479e87393c3d69b21f4224\r\nx-77-cache: HIT\r\nx-77-age: 5139\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/a5842ff4e92f4196a08ae4959ad8a5ad.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 04:32:41 GMT","end":"Wed, 28 Jan 2026 04:32:40 GMT"},"fingerprint":{"sha1":"D8:8A:28:20:23:93:87:45:D6:84:0E:28:89:18:B6:13:A3:EE:FE:7B","sha256":"F2:DF:10:82:00:83:3A:EF:75:08:33:F7:B9:6C:AF:7A:F7:ED:EF:B6:84:84:92:CB:F5:90:22:29:F7:1C:48:08"}}},"request":{"raw":"GET /a5842ff4e92f4196a08ae4959ad8a5ad.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: cb75b4f6-6ed3-4aa8-9a13-f1a42b044256\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=300\r\nexpires: Sat, 13 Dec 2025 10:17:37 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-12T12:57:30.713982Z","times_seen":571707,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":84,"dns":38,"connect":19,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/puengine.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/puengine.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 15 Jan 2025 14:08:26 GMT\r\netag: W/\"6787c15a-15dda\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 15 Dec 2025 10:12:37 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89562,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87781e1d7683222115078304d2414b35","sha1":"8bf54dd8a67d75a6f38ab240d47007c12c6e2fdc","sha256":"37cf30c764c95d5900378ec4e56d09a6088a8b90ed7540c0b7cd3abebba37459","sha512":"64b8288978b5e509878a3f527ea8c9fe86fb762f3b09c52e1521a3adfc1bf78f6a262e78cd9bea6eb574acc270ff52eb2647c0d05ea2ca0715a7e330a192b043","ssdeep":"1536:v9zsfUK2AHAuaEGDoXhLAknqLULh9/S1dHWyRj:v9zsfU5mGc9A2qLULh9/SHHWyl","tlshash":"1b93d65d7093604961d2f6fc007f368a686ac850f45e8caa6674d3c2ec7c4ad84e79fb","first_seen":"2025-01-15T18:31:30.651098Z","last_seen":"2025-12-13T16:30:20.429188Z","times_seen":1461,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 3192\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"b65e0b0de66cd31f3adeb2001268e6f7","sha1":"372911c4be998466174ae77d0eea79193f2bbeb6","sha256":"17911c57edac34245e867f5b433b22894264e192f785eec92873726a8d1e301e","sha512":"a56c9b4d0bc1cdf33df3e9f94c4dd09b126fc147d9db06a041bd344c2fb2359fd29f6f7f76efecad5bb4bc30a45e3bfece16263ef582fed75c270787d66c9ab8","ssdeep":"","tlshash":"9121d714793c19072fadffa1fa6843dafc71c6d6bc203519281899006016e6fda49c39","first_seen":"2025-12-13T10:13:13.355744Z","last_seen":"2025-12-13T10:13:13.355744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":79,"dns":1,"connect":25,"send":0,"wait":51,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ad4af1d5e4cb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-12T12:57:22.767625Z","times_seen":331790,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":18,"dns":32,"connect":1,"send":0,"wait":14,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/pure","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"POST /pixel/pure HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"bv\":\"25.12.2106\",\"error\":\"UUID request timed out or failed\",\"tmpl\":\"70\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.colorless-round.com/ecc874/2f805e3ccb65.js","fqdn":"www.colorless-round.com","domain":"colorless-round.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.colorless-round.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 07:03:01 GMT","end":"Thu, 12 Mar 2026 07:03:00 GMT"},"fingerprint":{"sha1":"00:2F:B8:87:07:C2:98:F7:6B:01:6F:42:77:20:25:51:27:A3:93:72","sha256":"B2:56:E6:13:82:AB:79:F1:29:19:35:FB:16:34:8F:B2:1D:1F:45:0F:61:31:DB:D8:53:D3:35:11:B2:D8:2F:7E"}}},"request":{"raw":"GET /ecc874/2f805e3ccb65.js HTTP/1.1\r\nHost: www.colorless-round.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 15 Dec 2025 10:12:36 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"efb9dd7fb09e546727f040ecfe891ba3","sha1":"ad8080ccd91b597323ff3c1f84c0e456e2704033","sha256":"69a6ba9ee975d24fdc7a2285beda6553b775b73d68da86a3f5e96842dbb689e6","sha512":"2f1960929a5f9b411b3fafb50fca1eec9c5efb5f1774e9ab783e08aac73f5a27cc4cff05df97efc9b15ceb1af6912e8c9e2d43b3c104262ce152d2220bb03110","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvY:OijxEQq3P5Enne9zkWHLS","tlshash":"02a33361350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","first_seen":"2025-12-12T08:27:45.511757Z","last_seen":"2025-12-16T10:24:59.89006Z","times_seen":41,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":87,"dns":16,"connect":19,"send":0,"wait":38,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.colorless-round.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=182","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:53:00 GMT","end":"Tue, 27 Jan 2026 23:52:59 GMT"},"fingerprint":{"sha1":"1B:06:06:C7:58:90:D0:32:92:B4:AF:0D:13:36:3E:BD:15:17:6B:46","sha256":"5B:0B:55:E5:3A:EB:48:93:35:E0:BA:60:C4:23:AE:E5:7C:C0:C8:63:A3:06:E6:FA:BA:9E:F0:CB:1E:B7:A1:E4"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=182 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971141=1; slec685e915dd72cb02cb4dbfe93f922478b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:39 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/pure","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"POST /pixel/pure HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"bv\":\"25.12.2106\",\"error\":\"UUID request timed out or failed\",\"tmpl\":\"70\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-content/themes/newsx-paper-lite/style.css?ver=1.0.8","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:35.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-content/themes/newsx-paper-lite/style.css?ver=1.0.8 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:41 GMT\r\netag: \"5f5-63f5c5a130140-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 12 Jan 2026 07:26:12 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 853\r\ncontent-type: text/css\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 9983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzpOWSVRqEpTmmfHmA1WJLS0cc7Fe4lx74lwy%2F77smeytjHt92WSOGITjtEIy1ftqzWjK3%2B%2FPDWnA4hi%2BC%2FzhDQTjTVfmN9UHfwk05T%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1c8f4e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (517)","md5":"3fb161113aa20bc7a00e2f2c09b06714","sha1":"901af74e31a7b93ce7a38c3e7064d65a95b5d865","sha256":"126b238214c03be5e107d63eee003aa457cc58a89bf71ea323a8ff83f82e9f39","sha512":"d05ce0a115a604df3d3ab99bc9e9d53730910d2a62bcf3aa523b68556aeaf3b185cdcd214c6eb60ded722051182d4b4a61d5a3251bacb34ee209779814717e72","ssdeep":"","tlshash":"ab31ba81eaaa9377575123d3724f75d6d71fcb6162c50492f86f814c111036a22fff98","first_seen":"2025-11-28T23:37:40.269434Z","last_seen":"2026-01-01T22:13:52.128018Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mens1069.com/wp-includes/js/masonry.min.js?ver=4.2.2","fqdn":"www.mens1069.com","domain":"mens1069.com","tld":"com"},"ip":{"addr":"104.21.24.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mens1069.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:00:46 GMT","end":"Mon, 02 Mar 2026 06:58:10 GMT"},"fingerprint":{"sha1":"7B:B1:66:D6:85:07:BB:6F:01:1D:D7:72:89:6A:DA:B9:D2:A7:0F:2F","sha256":"3E:98:A6:A3:4B:8A:13:51:7D:10:DC:85:48:A6:BC:F1:CC:C5:07:EF:5A:54:EB:AC:A1:1D:C4:78:12:E8:5B:DB"}}},"request":{"raw":"GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1\r\nHost: www.mens1069.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/archives/category/veins\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Sep 2025 04:35:43 GMT\r\netag: \"5e4a-63f5c5a3185c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 01 Jan 2026 17:29:07 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7431\r\ncontent-type: text/javascript\r\ndate: Sat, 13 Dec 2025 10:12:35 GMT\r\nserver: cloudflare\r\nage: 924208\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GBdXg7hg7weB0hYHYW9JUn9%2FfMf9OQXBmwch%2FJ71NLjlhBT1MAzV9FU8nvyfziuA%2FOWAHicv0VhjcrZ16ElX52qjbq8fm0lDeKMFwbI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ad4af1cef5c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24138,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"3b3fc826e58fc554108e4a651c9c7848","sha1":"76778fd446e2ff2377588a7b4ac4d79f258427c9","sha256":"e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb","sha512":"ae192d8d804f7dafd8b7a95220ceb66c0c308a51cdf42c172c20f71f50052e4529b01f8781c5f305e1e0d6c5367d9678f1d908ee4273db594fbb650c56a9f61b","ssdeep":"384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"b9b2848f73407425428bf16696af020fb137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-12T13:26:47.985213Z","times_seen":66290,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/check.html","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 10:12:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:14:37 GMT","end":"Wed, 28 Jan 2026 01:14:36 GMT"},"fingerprint":{"sha1":"5A:67:AA:88:D5:BE:C4:00:42:86:CC:4E:FC:E7:73:FE:CB:85:71:60","sha256":"F5:6C:A4:39:AC:04:F6:11:7E:DB:94:93:4C:93:FC:EC:A2:B4:4E:A4:FE:19:8E:22:C0:D8:D4:84:67:37:70:C0"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Dec 2025 10:12:37 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3fcc0e5fae43f16c87d03d9c24c554d5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":57,"dns":0,"connect":19,"send":0,"wait":17,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 693\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":693,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://www.mens1069.com/archives/category/veins\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":4901008,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":4901006,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":5758216,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":5756104,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:37 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22009bf2abed67db7e842a6924845633a2%22%3B; expires=Mon, 13 Dec 2027 10:12:37 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16860,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c703956ec425bd67d04813ebbbe44a1f","sha1":"531595e8070f69db9c172c200e6e438b78f984bb","sha256":"4cebd6df9c72b68b5aacd231dc1a8cf936c78a1e892071a63565596b6127cb6f","sha512":"be1ead47511f3f86bbb316b9e55ce3f541ec910277134992306f4fbfc8d52e50ec1506a0eeadb57e67434a8e87b1a1e2632ebd9cff8b6eac6c5bd73da48b041d","ssdeep":"384:Vr31SxYgGu0Jr0LidInDu5t3wj3lObPgAMb9+P:V71KSzJwL/Dst3wBObPQb9+P","tlshash":"0f72f737fa8454e952d65f91aceb7efcdc7c2007c6804e726b88b62993d85f10667328","first_seen":"2025-12-13T10:13:13.361636Z","last_seen":"2025-12-13T10:13:13.361636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":70,"dns":2,"connect":26,"send":0,"wait":415,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 13 Dec 2025 10:12:37 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://www.mens1069.com\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":83,"dns":1,"connect":29,"send":0,"wait":32,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/898928/51d68a1ae442e951b2fcf7e55b59debcb987ce99.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:38.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/898928/51d68a1ae442e951b2fcf7e55b59debcb987ce99.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8662\r\nlast-modified: Thu, 13 Jun 2024 14:44:35 GMT\r\netag: \"666b05d3-21d6\"\r\naccept-ch: \r\nexpires: Fri, 13 Jun 2025 16:59:20 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH305PvAAwBuUwKEwH3CAEAAAwBnJIhJwG3OBX6AA\r\nx-77-nzt-ray: 2a494a15e461c79b3b3c3d69f3d79404\r\nx-77-cache: HIT\r\nx-77-age: 15700947\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":8662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b65dbd56aa422ddf5a75755e44de8b1","sha1":"51d68a1ae442e951b2fcf7e55b59debcb987ce99","sha256":"9bd796ce6bddbc608fd146748dd54351a4b78623ef2aafd8b0db4b93de3f050a","sha512":"355b26fdc8dee5b5c0202ab34a8f9c64439914e410d36dedacce4e1bb37e761b1eac46e95cca65e1f77137b84cbb9aab4c7397294ed0562e45a7f9472bf756fd","ssdeep":"192:oB5/P3Z14yvIWuqneN/HbUmL0ryyUqCclTp8tOuT/wBrC5jVJQzcObOqH6MR/:C33Z2Af6fbYX1BQum5IzrR6m/","tlshash":"6b02aff417e61afcdf57211fb8b7ba180f61de40443582abbb82536c6a019260cbe716","first_seen":"2024-12-14T11:11:05.917285Z","last_seen":"2026-01-26T22:38:47.2351Z","times_seen":18,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":45,"dns":21,"connect":1,"send":0,"wait":2,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:36.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Dec 2025 10:12:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-12T12:55:47.826086Z","times_seen":105869,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":63,"dns":1,"connect":25,"send":0,"wait":26,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xq7nk3rlddzu.s4.adsco.re/","fqdn":"xq7nk3rlddzu.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:21 GMT","end":"Wed, 11 Feb 2026 09:14:20 GMT"},"fingerprint":{"sha1":"7A:03:26:53:17:4A:DA:4B:6B:97:17:4A:3D:39:18:9E:5A:E0:99:3D","sha256":"BC:B6:01:45:97:52:31:7E:50:44:A4:6C:B3:E7:A3:3D:8E:5A:1E:32:79:2D:E0:BF:94:ED:5C:36:3A:0D:94:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xq7nk3rlddzu.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:38 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":345,"connect":183,"send":0,"wait":183,"receive":0,"ssl":378},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:39.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:24 GMT","end":"Mon, 16 Feb 2026 08:40:23 GMT"},"fingerprint":{"sha1":"D2:D0:B6:8B:C1:78:F6:EE:87:02:EC:05:E4:EE:EA:71:6E:AA:66:42","sha256":"F9:3D:F1:E7:59:9A:99:EF:7D:47:70:33:FA:AD:2E:9B:E6:68:28:39:08:52:7F:C4:F0:66:B1:E8:19:70:25:23"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Dec 2025 10:12:39 GMT\r\ndate: Sat, 13 Dec 2025 10:12:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-02-19T22:23:13.628811Z","times_seen":6025,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.221.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mens1069.com/archives/category/veins","date":"2025-12-13T10:12:37.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mens1069.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mens1069.com/\r\nCookie: uid_id2=be211d8d-9863-469e-a82f-4484c0ecbccf:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 10:12:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.mens1069.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b95ea07326f3451b66dc925b9db5e1aa","sha1":"e6a6dc5c4932d4cb1658de73a869b75ea881ead9","sha256":"5ed10781516dbea70564827789c174ccd8e972eee4ce1071e9d5e4e19b1705a3","sha512":"cee470e0a1f483da69efcb41ce0286912c4e37692a5ee92349a490580e2a1c5ecd23f45c91dd1b7ee3c27ee6fefdfa1c2491d4156c1e3bd831313875a50c0aa9","ssdeep":"","tlshash":"ba900441c57004c504c4330314411cdd1c0331010070f10f7d5d74510551d0d54300c7","first_seen":"2025-12-13T10:13:13.317222Z","last_seen":"2025-12-13T10:13:13.317222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}