{"report_id":"fed83206-8ed7-4a79-a3e9-a7f06d327de0","version":6,"status":"done","tags":[],"date":"2025-11-09T08:15:44Z","url":{"schema":"http","addr":"shahed4u.day/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/","fqdn":"shahed4u.day","domain":"shahed4u.day","tld":"day"},"ip":{"addr":"172.67.211.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"title":"مسلسلات اجنبي - شاهد فور يو - Shahid4u | مشاهدة افلام و مسلسلات اون لاين 2025","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shahed4u.day/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/","fqdn":"shahed4u.day","domain":"shahed4u.day","tld":"day"},"ip":{"addr":"172.67.211.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-14T08:15:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":10,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:19Z","timestamp":1762676119,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":50684,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-11-09T08:15:19.548889+0000\",\"flow_id\":334942178851997,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50684,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-11-09T08:15:19.539805+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.114400+0000\",\"flow_id\":619273308978912,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.114400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.134477+0000\",\"flow_id\":224179267374413,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.134477+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.154485+0000\",\"flow_id\":377885409500021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.154485+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.214624+0000\",\"flow_id\":619273308978912,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.114400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.234694+0000\",\"flow_id\":224179267374413,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.134477+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.254683+0000\",\"flow_id\":377885409500021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.154485+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.414948+0000\",\"flow_id\":619273308978912,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.114400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.434918+0000\",\"flow_id\":224179267374413,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.134477+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.454905+0000\",\"flow_id\":377885409500021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.154485+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shahed4u.day","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shahid4u.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"c.adsco.re","ip":{"addr":"104.16.43.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-11-03T06:12:22.427789Z","alert_count":0,"request_count":1,"received_data":63066,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shaahd4u.net","ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2025-11-08T14:31:26.49033Z","last_seen":"2025-11-08T14:31:26.49033Z","alert_count":42,"request_count":42,"received_data":5203474,"sent_data":53605,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":1,"received_data":432419,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.intelligenceadx.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":673791,"first_seen":"2020-04-29T02:39:45Z","last_seen":"2025-11-06T10:54:18.530715Z","alert_count":1,"request_count":1,"received_data":42500,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-11-03T00:12:47.594918Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":4,"received_data":389203,"sent_data":2114,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shahid4u.cx","ip":{"addr":"172.67.173.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2025-11-08T14:31:26.492775Z","last_seen":"2025-11-08T14:31:26.492775Z","alert_count":1,"request_count":1,"received_data":142413,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-11-07T07:25:07.891766Z","alert_count":0,"request_count":2,"received_data":860,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kawgndv0hj9q.s4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shahed4u.day","ip":{"addr":"172.67.211.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-28T14:15:53.470166Z","last_seen":"2025-11-04T19:15:47.776238Z","alert_count":1,"request_count":1,"received_data":142418,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":1,"received_data":9638,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"intelligenceadx.com","ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":61654,"first_seen":"2020-04-19T20:09:16Z","last_seen":"2025-11-06T10:54:17.769459Z","alert_count":1,"request_count":1,"received_data":257,"sent_data":1741,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-11-04T15:46:31.839365Z","alert_count":0,"request_count":1,"received_data":1788,"sent_data":484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.43.28","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-11-07T01:19:59.965772Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":849,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kawgndv0hj9q.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-09T08:15:46.330287Z","last_seen":"2025-11-09T08:15:46.330287Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kawgndv0hj9q.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-09T08:15:46.33776Z","last_seen":"2025-11-09T08:15:46.337761Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":436,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:19Z","timestamp":1762676119,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":50684,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-11-09T08:15:19.548889+0000\",\"flow_id\":334942178851997,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50684,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-11-09T08:15:19.539805+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.114400+0000\",\"flow_id\":619273308978912,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.114400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.134477+0000\",\"flow_id\":224179267374413,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.134477+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.154485+0000\",\"flow_id\":377885409500021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.154485+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.214624+0000\",\"flow_id\":619273308978912,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.114400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.234694+0000\",\"flow_id\":224179267374413,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.134477+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.254683+0000\",\"flow_id\":377885409500021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.154485+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.414948+0000\",\"flow_id\":619273308978912,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.114400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.434918+0000\",\"flow_id\":224179267374413,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.134477+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-09T08:15:21Z","timestamp":1762676121,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":35806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-09T08:15:21.454905+0000\",\"flow_id\":377885409500021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35806,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-09T08:15:21.154485+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.455072Z","times_seen":20074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-25T08:48:15.584813Z","times_seen":23253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56f8fde6bdc99e4321f183434b2d726c","sha1":"a3dfe7dc4fec98ba605800589d0548a809c97806","sha256":"8596323597a4b658f48c086ed4e7db2c262ef0a9fee5cb4bd6a95eeb9b6d856b","sha512":"9f45025549965dfd56281394f9fe090099a9b3ea4cb07b0a83efa21e2a2893bd303a20d7881f38c9fd69315af3250e4e98165c020818dcb17e1a211cd6bf84f7","ssdeep":"","tlshash":"e7119818783da869a7d1247c8277d916357730dc5b0075e8f8ed85c02720c871926bec","size":1002,"data":"","first_seen":"2025-11-08T14:31:37.311816Z","last_seen":"2025-11-09T08:15:59.93946Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-25T08:48:15.56033Z","times_seen":23604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-25T08:48:15.595602Z","times_seen":20580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-25T08:48:15.573792Z","times_seen":20812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.498638Z","times_seen":21975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.46926Z","times_seen":23254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.481416Z","times_seen":20842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd4820b250c493253358471e0614f67e","sha1":"6675f4006750dd490a573c0ebb7e7aecffaf9b5f","sha256":"01167d2f7fdaed7bff31a7f84233228c2648761bcab5308bf65945c17ac1e6b6","sha512":"4f2d6ae07080f847d02bbcf399cb20a243678e7e0bac460260a56da467b10e14f12ff1b708933e7c1d3ec5c09d337ff9404bfe206a32f91952c1500661649f48","ssdeep":"","tlshash":"0dc02b8c230a0c7091fb37008b7ff600f002322c94d56931490d33446d30e07e744814","size":153,"data":"","first_seen":"2025-10-05T15:42:05.811855Z","last_seen":"2026-01-11T22:52:14.379292Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.452492Z","times_seen":23029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.475594Z","times_seen":22616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BM642X4VSX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f369d6200d3c20123c948cb15c5065","sha1":"71b65aada2ed790cfb1f97adfba939e4747300f7","sha256":"9e36494e83b64c5e4cc602591251bf3d8399d76ad100336306d4169c654273bd","sha512":"306290cb01c2a3ffda04c90d654bade8569c30d6e4b9b7d2ead6ed29eadf2a9ba6dd065bc3de75a50b42c665199fa968c1fa6b1b61cfb2d1f688a8d7f581adbe","ssdeep":"6144:rJclhePADSuQCnVH+zOW88u+XKpQZ62Ina5Ad:NchEUSSnVH+8QZK","tlshash":"f0940ace73c674265396e078503f018ba57b28a2f49cc89af189cce41e74a9a4177f7d","size":431815,"data":"","first_seen":"2025-11-09T08:15:59.864538Z","last_seen":"2025-11-09T08:15:59.864538Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/ecss-animations.min.css","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c217a6c32920382be4ee9a82b4a23ab","sha1":"f8955d14f69b7ede967c2caf16197b936f22f0c4","sha256":"92c712b3fab0316b0625f9fc5236422409af0bf69a126113fd9387d856cf6be2","sha512":"af5f2f4caeba8b8b5972d20a191266851184a97f3f5dfdce151c461a62946082fb9e276098b6ebf056aec3660e58db9c6be819cc32f6f168fc0cd812201dc878","ssdeep":"768:bt9rqAYKKWZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCtiCntlqoDX:bbdZzFQ9JsTgZvfzmMzhYrTscpgZZ","tlshash":"ad132aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","size":41946,"data":"","first_seen":"2025-11-08T14:31:37.297492Z","last_seen":"2025-11-09T08:15:59.924631Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509203Z","times_seen":22176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.499726Z","times_seen":22395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.451605Z","times_seen":23637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-25T08:48:15.551115Z","times_seen":24304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/sbznrzwqvq?qoRrzgJZ=BQOCAAAAAAAACZUAAnUyIg-7GETDDXbgPuSGn7GP9d29nEiGxxbVLsCe8rrrkTLTKMIPdgb_S9TasKCyKCzaP5YTX41V_OFFMeXxaLH6Kl9I6YAoJooqS2tFxCu3YSFNVqxH3pUiYf6bLAwQSflTLKLF7PGxrAutOHrCryyvU34BOYrzNmcWHavRMYMBRoYTeO9XMFaKS-JRRhv0wwDzOGRgNb7ThnkPjSw1CKTM8v3o0E--1bE8XuAYAmklgqXhxeXxYKIXwTqELpbCHI4bXkgEp4WIyEBywJ9r2xcRt_66_CxKV14K-KsHJbqDv-ddQZlBUkglTmrND-A41aMBbg8aErl7Ke_Mjos-OdBn2HYYGgxm1irbVFu-8PidQAZiiG322DACV_sVVvjplOLatb_fGtz8H5csri4cs-gfWXZhfhgx-kmcOBn14XQ3-n0spw2tFO9PeNInrnsPyhwBuhGsn_n1k8nVm7yEtFvvgLw5bF3PF474ec7KRHwSpA6Th7GpVUbtRRwZls8UiDJlHRW0X2FUAwKpD30iaOo37pgboSzztWWi4n69BxYStPw1hiP3cNX8DAkNpa_nvpSiYYfHcK02HUjHaWQfSlMMWvaAG0veIlB1rgdghjgJqyemfqrV0pFHniiMYjR75RLajg24z2bnvM73f2pcZQFwCA02tNA1iHmUYQMK7Q8tQG-vlIN14dy57hEY-tQJNlf_2oG-0Ex7CxDgE5ZzGHyHoqvVNx7WwMoKTiQoFXqHVX6164ZObKUhDwgsKDEY5eYrAgdY2OxhxIxPYE4fU-vee75UD-rF9KX_RUZFjMlzojS2nFPEEViYOT3pYO4lBZsUkYHoYkZErKZSOHd8MLaq8932JDNAXONbuiwa_9-Aih0AI8-aFLRbdgrmNeKDsiius3UbWO_ULJEbJzCT_K9gfJxEuMp2QD1DR37rcT3DvzgF6kYKKcc6X9DdoGel38OYOH92-uqnGgNcLC3vN1xbgNMsZeI53MLxXZXy-tSRuEWfpiKeYgKNZ_ACzEGCwrmqfqJXhSFqQFiwaEbPeUdt810Ysngt2EcNPudAypICIRmHsG5SBJJxWKeuSi7h5IMzcFAJJT4G6VXdGTcGDh3MZL0UOJmE079vaQP2YPXF2U0ygwrBoKor3grHpwqKX2jFcvAoYEXHno7HrZr1ylATb0D_0O4dcC7_2EPS2TEj\u0026CiEqGmuB=4\u0026CvWxDpwF=5252084\u0026USMRvqkH=\u0026zMEGJYoH=0,0\u0026SFaxIVsR=\u0026CVQyetBo=\u0026nvDcSxly=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-25T15:49:00.04743Z","times_seen":23513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10e160f0bb19305f081118188d4002fc","sha1":"a2b0810be6d009dba0d7d2da90fcb26252aa0264","sha256":"9452b1ea7d87cec67e027a7a04773cf4297e4d9f9b52b73f0e93adeaefcf8e3a","sha512":"bc05746592da1dbf1a2f0ff22accb7bb0378d99ded5177bd80656a596bbc430958cf715ff5976f2815b8622b2d9c60e301c0a034e61d7fd168ba4690e0ed39bb","ssdeep":"","tlshash":"13f0891846728d3500f725f753d797d53660488bf58596af327ceb991f008e1a7604df","size":646,"data":"","first_seen":"2023-09-30T16:39:31Z","last_seen":"2026-04-18T06:38:19.034339Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db3110f67460d13fd0110314d873c012","sha1":"50b881c603b35aa784bef7d83250bb44561e55b6","sha256":"d286b66a8b3ffc0f7c3befd3d9350e6606fb73e2e03c8b1dded29c9610b3ae8d","sha512":"21beeb9148a2debdefab2c3853443dbea849718e6d892269fedfdcbb955ff39e52e7384f43dc8a646f3b447dd3e9db670bc927603e5edf65b94d8922a58517bf","ssdeep":"","tlshash":"ebd0a7151e23d2c258f3104d9b473360793b00637220e5e4b15dd200df2ef0fca4b984","size":280,"data":"","first_seen":"2023-12-23T19:24:34Z","last_seen":"2026-03-15T18:28:41.857194Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.480005Z","times_seen":21542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16c7d365400f1536df4f8f10af7dc849","sha1":"f9fad5c9b0804458066798d5c07abe6bb3d7f9db","sha256":"25e6d90bd924bac9cd9660e9b73f63f3eac77eefd135e809d828777d97419a8a","sha512":"9154d3801ba34ad0cb066ef47a27e84683e41ffe64e852a419754c71786ba1cbcdbff4abdff72c0d065075bf1eaea5aa3a30c9f0e57f59f36b37b9baf48a89dd","ssdeep":"96:uCla4YUEokWKspEbcQ999+up2XaPLZML4cmqSzer:uCla4YxhWKYAbb90ajiSKr","tlshash":"729144f9a9fb6171514373a85bbf8145b23b402b6607c881b5acd3507f85cb0ca929fa","size":4247,"data":"","first_seen":"2025-11-08T14:31:37.326141Z","last_seen":"2025-11-11T21:02:16.917772Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.474522Z","times_seen":22786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f4b802b51c4558d3f050b42c3292dbe","sha1":"a99984bbf5e882cd778e5c1d782efd8a5da81857","sha256":"4e26213b997dea9f8c66863fffa3863c9ba4553ad22f02630e66280a508cd477","sha512":"77777c6ed13875ff182abf07621a92beb298e13e4482546156a1c3ee3e7d5f32247cc6b8f52e2bd3695e37c1f0ebc6d52ca7b06fce760c22b92a8bc3a2898120","ssdeep":"","tlshash":"41e02b1890a343bc6713245572d7b394b8a2110b265481527bbf4a7e5f22eda904b98c","size":298,"data":"","first_seen":"2023-09-30T16:39:31Z","last_seen":"2026-04-18T06:38:19.099553Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef4f15c86cb43f0ef0e241b70fdd792","sha1":"4971749861cba038c2cd1dce3c68c28aed4676fd","sha256":"5c240a0fcfa70d0e87f614c22547e240fc1a17214a232b6d4272e4a4cd42d905","sha512":"97857fceb635a585da1def0b639726d2414b8ba2b62015deadabc2ad3e01be420adcc1bf9bc1508aed8fb0ac45036922aff198abde2a291ffc30a6269c2812e1","ssdeep":"1536:P/EE3nA5ePdB1tz9NSU3myQjyiw1snWlwj:3TnAQp7S4QHnWSj","tlshash":"bf533b797561203a82b228fe167f532170ba56906d46d0d2d3bdc9503c38e9b933bf9e","size":61289,"data":"","first_seen":"2025-11-08T22:28:35.654808Z","last_seen":"2025-11-11T20:29:54.277417Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"shaahd4u.net/assets/glide/css/glide.core.min.css","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /assets/glide/css/glide.core.min.css HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 07 Dec 2025 00:01:13 GMT\r\nlast-modified: Wed, 12 Jul 2023 17:49:00 GMT\r\ncontent-encoding: br\r\nvary: User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 202446\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dF5lcpqyafQAr5GDILDvhEZHsVN85IjQkzyC98NYBub6fqf499fEvpBQYT%2B1Jtcfa%2FTLqKdV4ofMv0MUfTwRaS90LI4mhHNlyI%3D\"}]}\r\ncf-ray: 99bbdc929c33712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":843,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (842)","md5":"42a8a9ffb55a7eba68c6b97c027b6453","sha1":"e6e9a9765865ff93386efc309df56b5eaac8e103","sha256":"6e6765981015a3543a5d5d9c1e2c9a06e05f7bd2a0610842adf426a11abcf928","sha512":"b582aa3bbf07de64510876bbe5f9acd6006f1a500dcf42718cde9f56b301bd62febce3b2db4d27a7027af4e065f5712c4eedf2554bd936b75614822b21ff052e","ssdeep":"","tlshash":"a001af36455622248526fa3319a1f1cc6596f2538e3387cabbf9d120864bd5d0a239ee","first_seen":"2023-05-02T09:55:32Z","last_seen":"2026-04-25T07:18:21.898484Z","times_seen":1091,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762627103_wSyPCHtWGdvcg77jYYcYOVK4qlf-433x650.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762627103_wSyPCHtWGdvcg77jYYcYOVK4qlf-433x650.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71612\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 08 Nov 2025 18:38:23 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Mon, 09 Nov 2026 01:31:47 GMT\r\nage: 24212\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i13Dd6h3on99GOiCD84PwR3cF%2F%2FGIbmdGgvRxgmi9tE%2F%2FJIRyGRpM4ij9q8ztZgiqEKOaysRUHx8gGrmhDKsD8dzmRJ986EZuAE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc933c36712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71612,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 433x650, components 3","md5":"3111af201457b1b17f3f8f3e75057b70","sha1":"01a24abd8dc709dcc66ad90ce4f3534e16c4381f","sha256":"1065b068f638ecf0f69e97fe79a7fd3137ed638279243b40e46a7f8a7bc65817","sha512":"d71f8e78c03d0ae204775523e702d7b14128bfdc39b6dadd571689d9e9b9ea094599848d5eba70cbac4494e7b8479a4755576ece6f71416a3fbe654da87c45fd","ssdeep":"1536:1ICN9QmI3ePsW4v4KdmGuw5TdYhbopX3PctUfbuRBWW6Uku:qM9dI3O0zdmGTYh2vk66BWTu","tlshash":"59631237a12093a2c14b7b2f62655e9f4cf853d23d541a56a632ed6acb301dcc8d7e4c","first_seen":"2025-11-09T08:15:59.84964Z","last_seen":"2025-11-09T08:15:59.84964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760805042_ufk8JthOSZ5cscU5Hj5WdZ86Ws8-scaled-533x800.webp","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760805042_ufk8JthOSZ5cscU5Hj5WdZ86Ws8-scaled-533x800.webp HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64740\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Oct 2025 16:30:42 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BU4Szcyw3wp3hhzs%2FSROVOwx4kLIoThvoIdBDZmCQ5PtOpKE%2BvTaiss%2BZPyZ0%2B7XfpDx51REyi%2F3LbR5mjCNXVJWcEbYVVIMSo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc936c3f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 533x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c744348df4de298eb90dbb2d8feaaed0","sha1":"fbf90389d3514c4de88e8676ad76dddb4a0ffbba","sha256":"ecf773849019844892caf85e507681c928275749facb321773ef6e4d01d7d829","sha512":"93ed25766cc21809c8a0dc1c9c8d56e2ba098520780ff777b2d67207d7fcb2230b9ed2940d73175b75dc5e30139a68b90ebc3addc495eae9e236fba561f28f28","ssdeep":"1536:PrqdqVXgmltKGZbHpd5rExpYsKcDA34l70f7cmn4xRx++GRQN:PrsqVjGGZbHpkpefoYf4d++GRQN","tlshash":"ac5302d40098d82847a3b74706f34e3965a8f504225fc522e999d8e30ba46ff74965bf","first_seen":"2025-10-19T01:02:01.179768Z","last_seen":"2025-12-03T07:11:30.402211Z","times_seen":4,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1759430186_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Chicago-Fire-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-14-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1759430186_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Chicago-Fire-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-14-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114061\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 02 Oct 2025 18:36:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgnttd7ISH6SHkUhgtovQv%2BA1pIAdSCjZiPfyQGOd2EPAz7cMk3g4BL0HcP7Ja83iAQ77pzZZzF2nw3V5hXHykyk5ibr3DsRg0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93cc50712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"9fa7acd3ebedff69ab60a46004d3233d","sha1":"a23e24c06fcdfccb377801c0bf018e2a0c0a1fb7","sha256":"8289953f51cd79c8b97681c70780324fdae3a440aee2e123d466d6c849531cc5","sha512":"a2680ae20a86a8ee3d92b101c66ed99ce1c46085b1a8091bcf948eca4ecbb52f5722cabf53351586e7df2ce34fedc77604a0e755f93a0be92c66a85970340edd","ssdeep":"1536:oTdgr5ezTKS8wPdxhtJXZaLIlDJRg+cTgSNYlqkDQY+/SFQzvO3HYlu67ybqkky9:FeKjA/htD6IlVRx0gPlqHYXlYJObqm9","tlshash":"e6b31247019beb33e80da5f0564de60f0905b31a126ba244823fffa57aec7dc601dd69","first_seen":"2025-11-09T08:15:59.856572Z","last_seen":"2025-11-09T08:15:59.856572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahed4u.day/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/","fqdn":"shahed4u.day","domain":"shahed4u.day","tld":"day"},"ip":{"addr":"172.67.211.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T08:15:18.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahed4u.day","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 02:19:51 GMT","end":"Sun, 25 Jan 2026 03:16:20 GMT"},"fingerprint":{"sha1":"1C:14:B7:6F:D3:2E:75:D3:BD:BF:78:F9:A0:BC:D1:E1:7A:79:65:EB","sha256":"BF:FC:BE:3B:9C:96:C2:A9:08:3D:3C:55:0B:27:AE:FB:45:3A:50:80:7C:8B:6E:24:5D:60:4C:DF:D8:9B:0B:B5"}}},"request":{"raw":"GET /category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/ HTTP/1.1\r\nHost: shahed4u.day\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 09 Nov 2025 08:15:18 GMT\r\ncontent-length: 0\r\nlocation: https://shahid4u.cx/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAG94ruu8gRXiRA8SPq3%2FVhp6AviCAqKpQSMAc%2FyKNHWlsTMqhLpL%2FfA0pWLYhDridt9uFZnRLgW9i9eOe6Jh99cr%2Bnp8hCXC57odQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99bbdc8f0d34dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141750,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":38,"dns":20,"connect":1,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shahed4u.day","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/public/category/%d9%85%d8%b3%d9%84%d8%b3%d9%84%d8%a7%d8%aa-%d8%a7%d8%ac%d9%86%d8%a8%d9%8a","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T08:15:19.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /public/category/%d9%85%d8%b3%d9%84%d8%b3%d9%84%d8%a7%d8%aa-%d8%a7%d8%ac%d9%86%d8%a8%d9%8a HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 0\r\nlocation: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4P5w6F4t9QcHFjmop8gn4dejpHxxlTqWvHj%2FdVrbTMBju0bHtcGFQ2Qp8W5bognoxEJQ8rzF3yM3m%2FpqvJeHd%2BgUFAhwhaTKQc9xTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99bbdc9048d8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141750,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/cf-fonts/s/tajawal/5.0.11/arabic/700/normal.woff2","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/arabic/700/normal.woff2 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 9024\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gX475WOpy0YT7CS6OAzoXIswQwQUUCuBfOTChw7jpXjyqVsYkxnCKAZkajH3IKnuUxflwQ2F1yoyfJVZYJiY%2BU0egbF%2BwdwYo1s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99bbdc94fc5c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9024, version 1.0","md5":"10367de774c951da6562045f10109cb5","sha1":"18fca0c18f6e08f89b4f05cfc086382deece9d88","sha256":"fa5e72326681abee3a4952be582e1c2c2abb27932ef262610c078ce89541f919","sha512":"ea32eaf0b69c085dbdbe38d99153c6a7e4bce339391a7640db6ee415532387fdd168b4aae21a91cc8a2826d964f1b26ce5bdad42c85747808689f7ba9d0e2165","ssdeep":"192:zRHNs0HoBStpjkOacpBtQd7D7RW2qbd/45yWIs:lt3HuwpjkWRI37RWhlwqs","tlshash":"6b12bfe26e7e490ac4ffc2710ad8a0167af14ee8d6ba34f9d04612d5926f7dc0e48d4d","first_seen":"2025-09-09T12:45:33.159376Z","last_seen":"2026-04-25T09:40:40.74147Z","times_seen":821,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/cf-fonts/s/tajawal/5.0.11/latin/500/normal.woff2","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/latin/500/normal.woff2 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 9900\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADMevN%2Bx%2B3oUTSOnqvc%2BlPGpnpV4VKOXX%2FY1%2FFJu3ylgdnGlkIh3PMpcmrugfnNS65BEzpih5ve6AZ3IIKVnYQEEB3pGfVBtzlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99bbdc950c5d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9900, version 1.0","md5":"7256be46335261573e1ab1dc7f6539f0","sha1":"abeac1b7890a903ac951c522bc9b3039ec6fa1f8","sha256":"9986de5db80ec050300f1cea25d651a5779ae62b91a39b5667ac23d0c7668cbb","sha512":"16a93177eb4340d61c62e2d9605c8249b0558aa42d6490210e94939fb155379f0694c72225b55e471979134cc111104867676cebc5901af21aa4818821e3591b","ssdeep":"192:QC2S9zsmVUjqM+Xtixu2qtVhsLlYcPOYnOpTg++DaN8K0EUiBbxm4:RVXXtrRhsLp2yug+hCqBbp","tlshash":"ef12b01858048c6ef2f29c522a4d2ab2c403a27fd9d3e6a65f452221df816be717dc0e","first_seen":"2023-04-30T20:16:01Z","last_seen":"2026-04-25T07:05:32.09011Z","times_seen":1237,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BM642X4VSX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-BM642X4VSX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\nexpires: Sun, 09 Nov 2025 08:15:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143160\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431815,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"63f369d6200d3c20123c948cb15c5065","sha1":"71b65aada2ed790cfb1f97adfba939e4747300f7","sha256":"9e36494e83b64c5e4cc602591251bf3d8399d76ad100336306d4169c654273bd","sha512":"306290cb01c2a3ffda04c90d654bade8569c30d6e4b9b7d2ead6ed29eadf2a9ba6dd065bc3de75a50b42c665199fa968c1fa6b1b61cfb2d1f688a8d7f581adbe","ssdeep":"6144:rJclhePADSuQCnVH+zOW88u+XKpQZ62Ina5Ad:NchEUSSnVH+8QZK","tlshash":"f0940ace73c674265396e078503f018ba57b28a2f49cc89af189cce41e74a9a4177f7d","first_seen":"2025-11-09T08:15:59.864538Z","last_seen":"2025-11-09T08:15:59.864538Z","times_seen":1,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":174,"dns":0,"connect":20,"send":0,"wait":42,"receive":59,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760117832_MV5BMTAzNjNmOWEtYTE1OC00MmJkLTkzYjktNTgxMzY5NWQyYmJkXkEyXkFqcGc@._V1_.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760117832_MV5BMTAzNjNmOWEtYTE1OC00MmJkLTkzYjktNTgxMzY5NWQyYmJkXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 187572\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 10 Oct 2025 17:37:12 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08hR1%2BohwTNJwtfYgwhei6k1IVF9%2FVZiTYHFVmWF%2FqdnbGK6mZmhwYe4Q9lRWRivTx4Vm2tZ2g2UsPf8bLqmTUHMca2AkgDLNWM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc935c3d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x1180, components 3","md5":"e8964ffcc481a8c77cbd3e6a9c77b720","sha1":"bc0e3cf18e5d54a852f7e6c2c141183c73ef2a68","sha256":"7388775153992960c1601e5bd3fe10e181062877894e96476b70e3fa3f1ee143","sha512":"c95e71009827458ffaf4b74b253a4545e6e8942a46324636092feae000f01e8d2ff776bc1faabc67a4afdd7fb5b4e6138e83cd35b4ad9334c08c57de79e16f92","ssdeep":"3072:eg0Np4z2VrwmSJ+si0OS/pgsjzlEQUsY2cs8/AGcnNiZxAlmm5lWmrwlFMzN:pz2V8FkDy/G81193NiAYUE1S","tlshash":"8d0412aee689707ffa1e25bd0c041e991f995211c3cbf0723225f7686a739a78d442c7","first_seen":"2025-11-09T08:15:59.866538Z","last_seen":"2025-11-09T08:15:59.866538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Tajawal:wght@200;300;400;500;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Tajawal:wght@200;300;400;500;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 08:15:19 GMT\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a71338b7baa4a1dfbd8d8f9d87c0bf2d","sha1":"6b4c3988dcfcdabe0783d64225dd9c7e2abc3981","sha256":"9c439d61dd3f66e7b6a5c1536f8021a024783ad9c8e772f102c189b179bc5cad","sha512":"afda614b67b22dd5c3cc2c49a6ecb2df18983bd1f1b98bf556582e8bf17058566df81da74c3ea70924e15e24e299207cb3d705f5e0dd28788c2382988100541f","ssdeep":"192:2mClAqYCln97ClOqwClNc0dClrdsClCuLClxD:ylNl0lXl4lHlYl9","tlshash":"09029ee4881e02c5bb471d81638d6a27dd4ee1a920c4886cdafd578b9c9bd25766078c","first_seen":"2025-09-09T12:45:33.136646Z","last_seen":"2026-04-25T07:05:32.097608Z","times_seen":325,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":125,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 07:43:05 GMT","end":"Sun, 01 Feb 2026 08:42:55 GMT"},"fingerprint":{"sha1":"BE:9D:76:9E:9E:2C:F2:8E:38:C4:E9:42:11:6A:45:24:E9:59:0A:5F","sha256":"D1:C5:0F:C4:11:DF:FE:54:9C:EF:8C:40:56:6C:79:4E:F3:E6:0B:24:15:B8:E1:60:2B:49:C2:41:96:C9:79:83"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shaahd4u.net/\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99bbdc9358835687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T15:37:01.580613Z","times_seen":86243,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":43,"dns":5,"connect":5,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760718471_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Georgie-and-Mandys-First-Marriage-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760718471_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Georgie-and-Mandys-First-Marriage-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90041\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 17 Oct 2025 16:27:51 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41i8sbtvLlECbskILCYwhsY%2BiQOg1bSjcmpxFX010fgwy8l6b3XNfypHwZfnwkcv9I0MMUimjZ1FMfhDp1D0WtvP2SqoAr3geEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc934c39712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 450x560, components 3","md5":"83c92f112e226037ae0450d65941c340","sha1":"749f635f0849363325cf028d25fa827283b02e12","sha256":"5e7a78b0653d5e1f8cbfc4aeb4ba712b9cc70cb77945dd12572c400b8cacacb4","sha512":"85987f0348034016b640e6e92ae7897038f50a1bd9fb3e6f6c1c9d00f4f37a9a456da2d11f5e11eb5b7359d5bc34c61685028b947dca9ea515fd20a0a95a6ff2","ssdeep":"1536:A26grQWq55pZsZ3dq90ukFADSh6Ct4wnM7vAyNq9NDPFC1hLaAMYf7QAfLuhSUa2:53rQWqZz9gFADSxpnM0y0NFshL/f7PfW","tlshash":"3393121da2ea0db533e4d1e934a5f89828b003bd6b4de4d720f924ba7d5c4ce484677e","first_seen":"2025-11-09T08:15:59.870414Z","last_seen":"2025-11-09T08:15:59.870414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760720117_season-5.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760720117_season-5.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 192309\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 17 Oct 2025 16:55:17 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=En3E%2FJxyi8UBcUMKwC6FL7q1yqSWmFQAE15iwenew0AwUw6UaRTZuEJySKvQfwJd%2Ff4Xl97cGG2xeodcd8dKp418K%2FdR13NURKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc936c42712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 718x1024, components 3","md5":"1ce4da73a6bd2d56d55ca32e05f49003","sha1":"602d9404dc3525766e0b070033950f01a4a47c6e","sha256":"4708559f5d00af8d6f77fc65c3d25d48e38b2bd02856d31fa472a1d10ee15a7f","sha512":"0e07ebd03ece4ed16d1e39c975ad4623b80cb88920f57284dc3d663b6c6ab15510ad9036569e7898a432b70293b86e6bcdfb3740ee79b1fa5a76ee091b4d63f1","ssdeep":"3072:2IA6NbcbK0mWlMcLoxRTk2a/cWWKQRX3SP9JV3ZJMN8GylY6UtE5ITRh7lxOjavw:66NbL0dlREzTk2cfWKQti7hHMqSNjbOf","tlshash":"471412da8a73bfd9fa7d0f34114a0e31c6fa0c87575468ac24e1ce5ed86051ba5ce16c","first_seen":"2025-11-09T08:15:59.872422Z","last_seen":"2025-11-09T08:15:59.872422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760117569_9-1-1_S9_Poster.webp","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760117569_9-1-1_S9_Poster.webp HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 155584\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 10 Oct 2025 17:32:49 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 07 Dec 2025 00:59:46 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 198932\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpHxiWJehKeF%2BpWXgUd9USUuORoRjxAQaNP%2BHIWmOvQZB8iiuHcqPEs5dLyfz0eYJ%2B2zwp%2FXQkMEeKEq2aFgMIc0%2BZstcoT1eG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc937c44712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74a9011844aa82a76a73912757ff8720","sha1":"981291cc9c1630cb9ef9cfbe78a93e8d5a68724a","sha256":"8476a3d8918908d7d9139d7b6a020370208d79b3722d284e6f6731e7631d6931","sha512":"eb65d61c8b1cfb393f494b3554da1deecaeb47cc1b160f13fa12640abb4b499c754ca6215fda0b38fd2ee93978d18df5ae049dd32ec80d71eb239ffd0ca73e25","ssdeep":"3072:eTMcdZJkvZVuB3W9+iKcOKyDAhk1mOzc3PpEZ/kLuah5BdzZZuLeM3P9:eZZSZVc8KcvyHIOzc3x0GrrJZZE93P9","tlshash":"8ee3123505007f51c8dfa5fb7eb1b9f1ac292af198dee039f0d2546e264e34142089eb","first_seen":"2025-10-19T01:02:00.696765Z","last_seen":"2026-03-12T22:52:33.398331Z","times_seen":12,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1759428888_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Shifting-Gears-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1759428888_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Shifting-Gears-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 119705\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 02 Oct 2025 18:14:48 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:34 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rb%2FqN72em8E0i%2Fi0ik6mRqdEt6CIAJqo9ZXCl%2FEiUlgtPBOt292gBHozohtD3iOnNEL4lBcOWrvLmVgBlPx3unnEoN%2BvGeq2xcw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc939c48712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119705,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"2e5beecfcae1774d22d24977afe9ec18","sha1":"00aa11d9733a97a59510ee6dfb7c0435e2f31488","sha256":"5f64d403a9dde18f31ca37578728ac07253f3a21e22e1816f2ac7ed12e6d8db9","sha512":"5172a29b07062fcf2a54c873f9f892791aa187f3b9e26ced74a71a93f65e303690c0d321cc2d8da1ffff0edb18c4e4c507f0244dfa89343350dc08789270fa79","ssdeep":"3072:bIUF9jf1/zbQ4eLYEPhnKCFOqbhawNqVynxg13rbcfxS:sUjjN/fQ4eYohnK4awNqVkQreS","tlshash":"20c312bc24717f2e778b113d4f8a8250865598b82cdb901230ae44d9faeecf59ba07d5","first_seen":"2025-11-09T08:15:59.875835Z","last_seen":"2025-11-09T08:15:59.875835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/cf-fonts/s/tajawal/5.0.11/latin/700/normal.woff2","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/latin/700/normal.woff2 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 9996\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9qizgGNul1Vp4C%2FLClwtobgCHrt0F4qnOIAjVuOxEeTRtSj1SMRg3zEPx4Dshj4iAxUuI6WIxEKjaOe4CmR%2BurOsC8tVwb%2Biwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99bbdc94fc5b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9996, version 1.0","md5":"e9c38c1110be8eac901fbe1fa4dff374","sha1":"aba40d14b54e93d55124da50975b075c28969a41","sha256":"de8f431c146ab1feb612cb7ced0842ae5c4e2f12067d13db0badeca73977200b","sha512":"63d09f9af1dc5527a7a83742816db935c4f9a68dd6e0aa0cb8123c9800445cf98d9ccb4540ac72f22169acbb4fdf74d4efe294594c7fee86f340bf4e5314b493","ssdeep":"192:RroSo3j4T8CjdN21Sqp4LRD0BR3UeVyEwisPtNLMlhjP9hMyCoI7:Rrhoz4bBqqlDy5UTdisPPMrjPDCL7","tlshash":"6922cfe37d2c35a4c36f0a39c9c00f3e85d41e826ea4375aae744f35e4917a7a64163b","first_seen":"2023-04-05T13:22:44Z","last_seen":"2026-04-25T09:40:40.723974Z","times_seen":2977,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:20.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:20 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\ncf-ray: 99bbdc962cd056c7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-1a5f4\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 161185\r\nexpires: Fri, 30 Oct 2026 08:15:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j03q8%2Bb2vDF1aL4YmDywQsqxwxAp8t0yceyJXjDvCDMC95jisyTWZvzg6OIXdb42NmDIPpRR8CvQOIXCuq4kGuzd%2FBF32Y2ADCbBwYjRAInPGa02o%2B%2BQI2tKCaRgXSPjzPwra41h\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-25T15:31:11.004271Z","times_seen":16830,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid4u.cx/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/","fqdn":"shahid4u.cx","domain":"shahid4u.cx","tld":"cx"},"ip":{"addr":"172.67.173.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T08:15:18.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid4u.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 15:46:13 GMT","end":"Sat, 31 Jan 2026 16:44:37 GMT"},"fingerprint":{"sha1":"A8:19:A9:F8:F1:3A:77:0C:07:1A:08:E6:97:CD:FF:76:C4:86:FE:3B","sha256":"AD:53:C3:91:4D:69:73:F1:31:C8:37:64:76:07:8D:07:3F:12:7F:97:B4:C8:F8:C8:D6:D0:FE:36:E8:9D:6A:C7"}}},"request":{"raw":"GET /category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/ HTTP/1.1\r\nHost: shahid4u.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 09 Nov 2025 08:15:18 GMT\r\ncontent-length: 0\r\nlocation: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKVnDTgSjDJgjckgmvHyBND37PhAXgnJrvW0jnxbQzJHdFI4r1oXQlB2KI%2FEJPOYMXgyh5pNfoD31c9RU%2BTEsRxJp2eM%2F2sBRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99bbdc8f4c2f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141750,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":25,"dns":9,"connect":1,"send":0,"wait":6,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shahid4u.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 99bbdc934c3e0b06-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 177584\r\nexpires: Fri, 30 Oct 2026 08:15:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8s06ya2c4TiljzTwxzdCMZZ%2B1bmwZ%2BW4jqn7JqJdT2Luu%2FYHB0D%2Bj46mxgZdpt8Vo%2BkvAYXS8Dp8mvto%2BvcltjlK83DQho7gRtrP2p3375bPwnJawL36%2B798n%2BRQZREo3%2F04oMNk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-25T15:34:51.869506Z","times_seen":45283,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":12,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760804306_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Sheriff-Country-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760804306_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Sheriff-Country-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86206\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Oct 2025 16:18:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sun, 08 Nov 2026 22:40:07 GMT\r\nage: 33574\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjXkvUgjdp2aaFPhknf08uoUXxcPdsWTavg3xdejQ6pCtVQNrT%2FePaWNSIr4C1C%2BVWuqVIOXncrrCUBhTkeeVGzrd%2FbnQ4W5q3E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc933c38712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"193a31ffb656fa724269374c3e0533c3","sha1":"ff82fb1cf704bfbba3515524b5d1405055811276","sha256":"b747282f673f9b8f4b91ea82f7282b8ffffeac209dd0cf2fdf2538c6508dff8c","sha512":"953e2e4768571b20c3817612e32772553d317363c5e628a59795d20910d8349b9f575c8ed922efb18d98a1e11f47666f6fedbfd0beffb0b53ebb57de25be97a4","ssdeep":"1536:oE4UdrZrJvRbnOvgjVtM19SqJU7I5G//f+EciOyJ64Nn7:HvNnOv0tMCTE5KcSdt","tlshash":"cd83121a9007fc10add91de49d6ad4449f8d33e6a4c4ab6aef340038bff860f9ea9055","first_seen":"2025-11-02T13:52:04.920948Z","last_seen":"2025-11-09T08:15:59.881154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1758217365_S03.webp","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1758217365_S03.webp HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24968\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 18 Sep 2025 17:42:45 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 07 Dec 2025 00:29:34 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBNXsy6CuM9Xgumq82S487upX2DuZJzmj49JMTbWMUyHqEgxosNn3xYLmHMV5ukWKmZJUKBdJ1m61TBPmlhzsIQ0vFkw0nX3qBo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93bc4a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c334d2f583e3403affc7046c946f65d5","sha1":"6698edc68cdd1d7b75d9f4fe1865501992f859b6","sha256":"c9793e8d8c586b4c9deae2540333e7c04a3a294da10ae75dfc75602eea5cea17","sha512":"a9ef47940bca5838c39cb90352e3fc58a5bea153ae2f03c4ae6606d28226ef8107b5708d82175d4b23a29f8de2ef587d272b7970bc84875c3dca2f59e95dcedb","ssdeep":"768:jUf/Pp87pb1M7FWV+mfQdDDKmqIkCnSC:jaISFG+mfuDxzJSC","tlshash":"d2b2e1318b05eff2c28d908d31b9be66d8ab0ac4934d90c5b25b08637fdc931cead815","first_seen":"2025-11-09T08:15:59.884055Z","last_seen":"2025-11-09T08:15:59.884055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/faveicon.ico?v=32","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:20.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /faveicon.ico?v=32 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:20 GMT\r\ncontent-type: image/x-icon\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:04:37 GMT\r\nlast-modified: Wed, 01 Oct 2025 21:30:11 GMT\r\ncontent-encoding: br\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 202242\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUO2%2FKgNJZpphXfmvAGLG5P2r3iG9eZQKzX%2F61J8kl037DDvco8BGmZy9iAlhgCIHCDVMVAAnxP6JYZVFi4MTpe6kMTy4hzhd54%3D\"}]}\r\ncf-ray: 99bbdc96fc8f712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12155,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"bb2e0fcbf11ab7c40e3ab4dfdc22ee14","sha1":"9bdfcd206e08ba565bf72a6de45bbb6aaf24239a","sha256":"315e30bd5f83c761ab888e9590e62d0f4652e87628e8abc11e841ce0e558fb87","sha512":"6d53a1897f930206e6847ccf5d72fff98062041b2307fa40de61e73f51543494f9632c6567ece9688ee6f0757af9db60e129a124e4709fed81b176fe21199137","ssdeep":"192:oorSyV+eGAOJ8xSsHSeEyWS5EsfLdtoFzEJPrmLddJn9ioWe2eVuENouPyggWD:HFGNGxfsdEZrSzio5VuENogj","tlshash":"9842bf09cb97a3459e3028d5e0f39fd89f8ca9fe93566c1184725ba1858cf34d11b9bc","first_seen":"2023-09-30T16:39:32Z","last_seen":"2026-04-18T06:38:18.92089Z","times_seen":214,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/sbznrzwqvq?qoRrzgJZ=BQOCAAAAAAAACZUAAnUyIg-7GETDDXbgPuSGn7GP9d29nEiGxxbVLsCe8rrrkTLTKMIPdgb_S9TasKCyKCzaP5YTX41V_OFFMeXxaLH6Kl9I6YAoJooqS2tFxCu3YSFNVqxH3pUiYf6bLAwQSflTLKLF7PGxrAutOHrCryyvU34BOYrzNmcWHavRMYMBRoYTeO9XMFaKS-JRRhv0wwDzOGRgNb7ThnkPjSw1CKTM8v3o0E--1bE8XuAYAmklgqXhxeXxYKIXwTqELpbCHI4bXkgEp4WIyEBywJ9r2xcRt_66_CxKV14K-KsHJbqDv-ddQZlBUkglTmrND-A41aMBbg8aErl7Ke_Mjos-OdBn2HYYGgxm1irbVFu-8PidQAZiiG322DACV_sVVvjplOLatb_fGtz8H5csri4cs-gfWXZhfhgx-kmcOBn14XQ3-n0spw2tFO9PeNInrnsPyhwBuhGsn_n1k8nVm7yEtFvvgLw5bF3PF474ec7KRHwSpA6Th7GpVUbtRRwZls8UiDJlHRW0X2FUAwKpD30iaOo37pgboSzztWWi4n69BxYStPw1hiP3cNX8DAkNpa_nvpSiYYfHcK02HUjHaWQfSlMMWvaAG0veIlB1rgdghjgJqyemfqrV0pFHniiMYjR75RLajg24z2bnvM73f2pcZQFwCA02tNA1iHmUYQMK7Q8tQG-vlIN14dy57hEY-tQJNlf_2oG-0Ex7CxDgE5ZzGHyHoqvVNx7WwMoKTiQoFXqHVX6164ZObKUhDwgsKDEY5eYrAgdY2OxhxIxPYE4fU-vee75UD-rF9KX_RUZFjMlzojS2nFPEEViYOT3pYO4lBZsUkYHoYkZErKZSOHd8MLaq8932JDNAXONbuiwa_9-Aih0AI8-aFLRbdgrmNeKDsiius3UbWO_ULJEbJzCT_K9gfJxEuMp2QD1DR37rcT3DvzgF6kYKKcc6X9DdoGel38OYOH92-uqnGgNcLC3vN1xbgNMsZeI53MLxXZXy-tSRuEWfpiKeYgKNZ_ACzEGCwrmqfqJXhSFqQFiwaEbPeUdt810Ysngt2EcNPudAypICIRmHsG5SBJJxWKeuSi7h5IMzcFAJJT4G6VXdGTcGDh3MZL0UOJmE079vaQP2YPXF2U0ygwrBoKor3grHpwqKX2jFcvAoYEXHno7HrZr1ylATb0D_0O4dcC7_2EPS2TEj\u0026CiEqGmuB=4\u0026CvWxDpwF=5252084\u0026USMRvqkH=\u0026zMEGJYoH=0,0\u0026SFaxIVsR=\u0026CVQyetBo=\u0026nvDcSxly=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intelligenceadx.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:72:94:6A:70:D1:57:77:77:94:C0:B2:5D:D9:4B:21:50:01:A9:EA","sha256":"D2:95:A2:80:F9:9D:D0:6A:F9:69:A4:1F:1D:36:37:CF:38:B4:C0:2B:39:B3:6F:8D:3A:38:6E:26:C1:01:2E:F8"}}},"request":{"raw":"GET /sbznrzwqvq?qoRrzgJZ=BQOCAAAAAAAACZUAAnUyIg-7GETDDXbgPuSGn7GP9d29nEiGxxbVLsCe8rrrkTLTKMIPdgb_S9TasKCyKCzaP5YTX41V_OFFMeXxaLH6Kl9I6YAoJooqS2tFxCu3YSFNVqxH3pUiYf6bLAwQSflTLKLF7PGxrAutOHrCryyvU34BOYrzNmcWHavRMYMBRoYTeO9XMFaKS-JRRhv0wwDzOGRgNb7ThnkPjSw1CKTM8v3o0E--1bE8XuAYAmklgqXhxeXxYKIXwTqELpbCHI4bXkgEp4WIyEBywJ9r2xcRt_66_CxKV14K-KsHJbqDv-ddQZlBUkglTmrND-A41aMBbg8aErl7Ke_Mjos-OdBn2HYYGgxm1irbVFu-8PidQAZiiG322DACV_sVVvjplOLatb_fGtz8H5csri4cs-gfWXZhfhgx-kmcOBn14XQ3-n0spw2tFO9PeNInrnsPyhwBuhGsn_n1k8nVm7yEtFvvgLw5bF3PF474ec7KRHwSpA6Th7GpVUbtRRwZls8UiDJlHRW0X2FUAwKpD30iaOo37pgboSzztWWi4n69BxYStPw1hiP3cNX8DAkNpa_nvpSiYYfHcK02HUjHaWQfSlMMWvaAG0veIlB1rgdghjgJqyemfqrV0pFHniiMYjR75RLajg24z2bnvM73f2pcZQFwCA02tNA1iHmUYQMK7Q8tQG-vlIN14dy57hEY-tQJNlf_2oG-0Ex7CxDgE5ZzGHyHoqvVNx7WwMoKTiQoFXqHVX6164ZObKUhDwgsKDEY5eYrAgdY2OxhxIxPYE4fU-vee75UD-rF9KX_RUZFjMlzojS2nFPEEViYOT3pYO4lBZsUkYHoYkZErKZSOHd8MLaq8932JDNAXONbuiwa_9-Aih0AI8-aFLRbdgrmNeKDsiius3UbWO_ULJEbJzCT_K9gfJxEuMp2QD1DR37rcT3DvzgF6kYKKcc6X9DdoGel38OYOH92-uqnGgNcLC3vN1xbgNMsZeI53MLxXZXy-tSRuEWfpiKeYgKNZ_ACzEGCwrmqfqJXhSFqQFiwaEbPeUdt810Ysngt2EcNPudAypICIRmHsG5SBJJxWKeuSi7h5IMzcFAJJT4G6VXdGTcGDh3MZL0UOJmE079vaQP2YPXF2U0ygwrBoKor3grHpwqKX2jFcvAoYEXHno7HrZr1ylATb0D_0O4dcC7_2EPS2TEj\u0026CiEqGmuB=4\u0026CvWxDpwF=5252084\u0026USMRvqkH=\u0026zMEGJYoH=0,0\u0026SFaxIVsR=\u0026CVQyetBo=\u0026nvDcSxly=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sun, 09 Nov 2025 08:15:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-25T15:49:00.04743Z","times_seen":23513,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":324,"dns":1,"connect":92,"send":0,"wait":114,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/cf-fonts/s/tajawal/5.0.11/latin/400/normal.woff2","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/latin/400/normal.woff2 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 10256\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UtfD4%2FHjX%2FC0iW43QHs76rN1utbx4DQRD254fxX5w2p7YHigN2ym3Bc1l1xQci9XV%2FBWcaTcVQBvTX3PJCSvadG7V5LKYrujEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99bbdc940c56712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10256, version 1.0","md5":"f18eb7346bae415c6367ed0907125227","sha1":"a9e8e937c5afc2f9feb46bfcb8fa854728a494a8","sha256":"b081f7bf790678b56a2c0502651d6873cbabc09e78fe40655df15f918b1e369b","sha512":"87f620cfdfd5c1abddde9d19346cc0ab34fecfa359933fd31517ffd4bc6faad040c033bd89ace9d5ba00b7a51aaac2df73417d99e3535ba970c744312e415e7f","ssdeep":"192:f1Hlb/UvbtLTSjJACmwJCyE5+oa77IdgOpb9d8mKWyu1rPj13BFnFTlqy7:fLKLOnma1WXaypRjVXFJqG","tlshash":"dc22b012a0e8988cde26a1be4eec55ddc12b1f0ff1a70f518c7de58bce51722a05e4a1","first_seen":"2023-04-05T08:50:32Z","last_seen":"2026-04-25T09:40:40.722264Z","times_seen":3349,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760376896_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Elsbeth-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760376896_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Elsbeth-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 123787\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 13 Oct 2025 17:34:56 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MonurRmFFcJfn529hZopXD4Rn4ejk%2BubN70AsDx2ZJVo6N%2Fk5pB93TyOg3Wl%2FykuolGO70KZAE85uxLoGatgdel2tO%2BZXRwDdn0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc937c43712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123787,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x630, components 3","md5":"4c98b6779156b8b11257a74bb9b90c4e","sha1":"4abafc5741a29ae71dbdc01181463c37b23bd50b","sha256":"a2a92e4aad3af67730502dc74a269e19bbf0b67b34d2801c7a6bc4860c31fb40","sha512":"0ea2356c76530c09503229cebd3d789cacddf229eafdb5218db75ab812501da9b7386479954c4f763e5e5bd8bdff165ff96f63a3e3d692dfc40c0c7937383648","ssdeep":"1536:qliB2Qso/ItKa22ODgw3P03MmLqQoFcQJd5f0USa8f0aqCZsbw64g4Rl+CtbdtzC:m3Q/K42MmoeSd58Dujj42CZdcHCZ8X","tlshash":"d6c312a0bf75ae101f5dd605085ae385a399d294bbc2986c84b4ccf6333dbdd7f61224","first_seen":"2025-11-09T08:15:59.889434Z","last_seen":"2025-11-09T08:15:59.889434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/shares/imdb/tt22202452.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/shares/imdb/tt22202452.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22649\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 05:32:12 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgqJwTUcTs3CvZUusdyGXGo8TquoDj%2B5qfAPZlfhrjM%2B%2Fqo8mn%2BNJCeoKBzZBBSh%2BtlW8aNFVFOGR4W15OaREfIFkCM4Q7lzrHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc938c46712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3","md5":"cb7f7f03b9204f402eb7653ecb47b68b","sha1":"f5c7ef34aa43a8368715f224ee298c857094d3e4","sha256":"73a18ec35c88a43b765376685d9b2cfc561f60517d42c639927854651b1d84ea","sha512":"e82891b5b1004a7afbec754b41401f440dd9cee7b70e537180f4fc06c2549338aea09d453f308a57db0c68024acd5de2e6e5231c6da80236aea939f8737d981a","ssdeep":"384:+q73oN8tkkV3wnrWbGViK756dM+tUzIazkszmGuJvNlE2p65viIEC9OgGyV:1YN8vgrWbgZ6dUzIa2FhEQOKyV","tlshash":"e9a2e08d0845784fc67d2f329a01cf559fb2efa365c90be85614bf6521ea593b19c30c","first_seen":"2025-11-09T08:15:59.891337Z","last_seen":"2025-11-21T12:48:08.055531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762475054_%D9%85%D8%B3%D9%84%D8%B3%D9%84-All-Her-Fault-2025-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762475054_%D9%85%D8%B3%D9%84%D8%B3%D9%84-All-Her-Fault-2025-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 07 Nov 2026 03:14:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 07 Nov 2025 00:24:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95713\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 190854\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHk16UaKie6GCpNCIDydEFd1nHoQoqKNZCWv9pVUn58TcGsJCeitlVp7yCVhQZ1OHanNXBwu2DzLJSLkvWdauuhZnyIYZ9KCc1M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc938c47712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x629, components 3","md5":"7e1baa4b9265b64e4c0b3ea0577ad17c","sha1":"f52516cd7ef4c75953c4eba678ff79ba3b1bc8ee","sha256":"b48befb0a773c61fb34262b28893dccdc8a97801f3fcde8a325111c6ca48f19d","sha512":"622d106dfa5701ace64cfd195d92969bce4cb8dee9753d1420c1dfe1cafc7e1dacd4e3b8f29a25909abed07efaac4c2522518f76315cc0adcbfbac3583dd9de2","ssdeep":"1536:lwvJlDbE/nlWwQttBEOGEzUzttI89EfIDeaYWraOMKxjnBjJTPMfX0Lp5ysMsEqx:+hiPlWwQtfEONzUzHIKEfWaj6j1hQX0f","tlshash":"f69312d19241aac4fbfd20b98dc1d02652d6df4e12feb7608357343a91fa4237928d3a","first_seen":"2025-11-09T08:15:59.893134Z","last_seen":"2025-11-09T08:15:59.893134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.43.28","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 99bbdc9d0996b503-OSL\r\naccess-control-allow-origin: https://shaahd4u.net\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":28,"dns":19,"connect":3,"send":0,"wait":19,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762570404_MV5BYjZjYThlNWYtNzI3NS00MWE2LWI5NDEtNDAzMTZmYTdjNzc3XkEyXkFqcGc@._V1_-520x650.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762570404_MV5BYjZjYThlNWYtNzI3NS00MWE2LWI5NDEtNDAzMTZmYTdjNzc3XkEyXkFqcGc@._V1_-520x650.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 Nov 2025 02:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69296\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T94RAmrYNjcN6VTYexTM56k5jruhnywbofbr5HV8UnNpyCjn8j%2BpUHihZS6%2BrIMmFyAGfVhbNtqJDWWErHLJyT2eJnNkLOLVunI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc935c3c712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":69296,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 520x650, components 3","md5":"6a74884faf36570031635b262f71cffb","sha1":"b1265b9d3b8cd8ce58c98157dbf7a38738e5ad61","sha256":"a4865ccaa7559d2b32cfede3388d7028ef9570346722eb0d954e8aec0256e0b2","sha512":"93a688c775ed66c484f74dff45f93bfdf26b0d5f8fa252d2bdc7f00894d5c35016fe22b587df41768659476c81d72b71affae678cd16dcc72f40a4c9d46042f6","ssdeep":"1536:1ppbcj/J9GFef0KbBfj73l3hA0yAqTr97uNJ1T1JO5L7:xc7GF2VrA0qRuP1bOx7","tlshash":"4463029666b270a71ca697df327a2f04b8054f9c880ad511cf39d87e20bd3e0f48769d","first_seen":"2025-11-09T08:15:59.895769Z","last_seen":"2025-11-09T08:15:59.895769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760377100_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Matlock-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760377100_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Matlock-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 99128\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 13 Oct 2025 17:38:20 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBk7ILpS6QOffFZcbgytwNph7%2FpxKmye2NpDBlg6ippK1lgeOUZxfMvv6noqgS8njzfCFbe2AeEWnnyLdAHyWdpbLpPDmmqDKus%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc936c40712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"3055ed3b7babcba785af2c25f20fb90f","sha1":"ddc313004a22482f240f7c995c60c7fe66394a2c","sha256":"c14b01e99cebabdb8727fcf9c38653f1cc605c250d07a7b61015b91df3144d0b","sha512":"3346364bd838c54c0f7f7daf01fac3027ebb4476441485eda6a622351706428df06eb78603da48e3e36a44e1990533614356f555e5b4e9b6ea41222ed1c6ac2c","ssdeep":"3072:8+Ltxe3bq3nOOr79qSal/IfGjV8RRyHgxQ:8Lq3d79qhl1V8RW","tlshash":"3ca302fc49eaa4daa4b02ee994611a02ddff44961f543639299d200135cc6f9ec80fee","first_seen":"2025-11-09T08:15:59.897664Z","last_seen":"2025-11-09T08:15:59.897664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1759430295_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Chicago-Med-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-11-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1759430295_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Chicago-Med-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-11-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 87853\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 02 Oct 2025 18:38:15 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ctYVnKnwv9dJnVK9K29Tgmqk2Js68vvIufHw15gqfmoqJGEBGIs5lb8sk5pzmegbXCPn2ggNkH4xoYoOXZPAbQPYoHBnIP2TQ8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93cc4f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"c608c33ccd9139d6f43cf70f759e644f","sha1":"060b21df33063e298f4c71d33a47c754ba0ec71b","sha256":"c45fdaee61d3615030e65315f74888990d82ba436f5b8a1678355324efd8b2a1","sha512":"0d173611a0ebf1fe08cfe2a593efd97ff553b019e0cc8a60b1f37cfcb1384fc0445177465cfe230de64440849ad565f96d7aceea39eea4e2be4581f7a843f436","ssdeep":"1536:oTyBFI7ijAujFeSFrZ0f6wk1K0pGsV+k0tXBsudJl4nu0NYQQROg7kq1HL/XmS:dBa7isujPU6wc/prVOx7JlOrNYQgHLN","tlshash":"d18312633806ac10ef9ec377225ccd96b4628ea934b742749e6d3de0f51dab43d8c5a1","first_seen":"2025-11-09T08:15:59.899691Z","last_seen":"2026-04-21T19:40:48.900482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762441301_%D9%85%D8%B3%D9%84%D8%B3%D9%84-The-Vince-Staples-Show-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762441301_%D9%85%D8%B3%D9%84%D8%B3%D9%84-The-Vince-Staples-Show-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112513\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 06 Nov 2025 15:01:41 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cm5vubkbk0RT6z15pjB2QZcQzXGagejJi01J0DvkkuX06DaoY6df6N9kZgLwJot5YLtmyguxjj%2BJzs2L%2FAyVAhWQeHWr5Zqi2%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93dc54712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"6ec4456e5f0244270a4ebae2bc39cbfa","sha1":"d6abd92bb715c94ec01c3057849e1d27a7d9898b","sha256":"8872cde4fdd3ed42b629a52899ed36c0784a13c5ec033fc9c80496de30e08139","sha512":"f2e7482a52db4078b6b6ca792531e237eb78d788cc26b8a273a96ba474c29ef8aaca485aa5d08de9240cba17e35505188d417b75b2cd9a8e53e9f04f7e4ca873","ssdeep":"3072:tvFvvlwMsN80f1+kQCADmRBKTDZ++//v0P:zvtwX80f1+QAD2BKTV+2/v6","tlshash":"fdb3123388113e6946ee8fb389d9c245059c66a0a898ce2978205d17fe1d7c7ffc4b5e","first_seen":"2025-11-09T08:15:59.901415Z","last_seen":"2025-11-09T08:15:59.901415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762440959_MV5BYzYxOTUyNDMtY2UyMS00M2Y4LTlmZDMtYjdiMjAyMzhmZjgxXkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762440959_MV5BYzYxOTUyNDMtY2UyMS00M2Y4LTlmZDMtYjdiMjAyMzhmZjgxXkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75357\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 06 Nov 2025 14:55:59 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCWMJcj8TGPSfsishFBuUYQ3Vy1zlLEU54Ty1FviwqBXNMc4KsBLPGyiApHedz%2BG7XDcSkHi0x%2BxjnWxcvVEfuVYjv8At3039kc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93fc55712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x1082, components 3","md5":"130614f1ae44be4036bf3d4e85a9437c","sha1":"f3dc99754ec8dc6651376cc147e0ec673c3db790","sha256":"7a864d3a8aa718efd55f6bf1c9ab73a54f4a4090de456c2926236ebc7bef64f0","sha512":"f64de7c3423cdb8f689707bf56029e3b255c09289f7fb7dc20dae147b7d63c191477102bb40a46827418dc12976af49bdb0bdcdce2b748e5fbcedbd42dc06f44","ssdeep":"1536:Y/ZPcZ1ErteM36+Cbvr/CWNLUUQEybORmzhu3gUm/QqJMiEX:eqZ1eeNrbvr/vL0OAmK4","tlshash":"c173024b75742443ccada4fb62ee2d05f4051a12910fc78bb3fa1634b1b5ae73ba4936","first_seen":"2025-11-09T08:15:59.903023Z","last_seen":"2025-11-09T08:15:59.903023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 09 Nov 2025 08:15:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://shaahd4u.net\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":82,"dns":1,"connect":28,"send":0,"wait":35,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:20.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:20 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 24948\r\ncf-ray: 99bbdc962cd256c7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-6174\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1312030\r\nexpires: Fri, 30 Oct 2026 08:15:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=to9IYymKwmfJ3wPAbBsM9mTGiDKSznIoXlyOealZLz6cCiZSAPt6S%2BXuh9TahXW4zTf%2B92hu1pjjC6MiMoYzGkoxkRJ4Y%2BDGzM2oAaLzL61GWIDWJNszNOKAwjcttBMpqA90SkwA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24948,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 24948, version 772.256","md5":"61f30b79daf5b31f0d254a31fba66158","sha1":"fb363d27cfdfe71a243fa2ac3dab2815232b9b7e","sha256":"8e7e5ea1b15f62ab14dbd41768e8fbcd21cc859a4ea5da812457ee714299fb35","sha512":"db6f82dbbfd0c77d1b34074ed2eeaa8659924ab1a4320fdeee93eec36ab98516fd92836765ced03f0acb70d153ac14c4b50b7dfcc8f105a995fc4e65bffbdcd1","ssdeep":"768:E5ZyQM6ylMx2k3xyF7RwyXb3QoqKGENDWteN:E5ZtSMx2VhR/bACGEv","tlshash":"6fb2f12c52f0ffb7d4c74a2ad8b84f2218e2b030e5f19111b44ce8b5da4bac8945a327","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-25T15:34:51.864314Z","times_seen":8588,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:20.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:20 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 99bbdc962cd156c7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 164383\r\nexpires: Fri, 30 Oct 2026 08:15:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j4OoYa8uXlTweemkpp3GmxAbO9kFlKpq9NoHMGJ6jkXRmekWaduPQzFQyj8RH0tqta1fQF%2FDnv%2Fcs9tNncxVGLS9I3wh2g746OPGs6Gjp4H37b2weq6ZIJL9J9mS0taiEB0wAqOt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-25T15:31:11.034169Z","times_seen":33200,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawgndv0hj9q.l4.adsco.re/","fqdn":"kawgndv0hj9q.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:30 GMT","end":"Sun, 14 Dec 2025 09:14:29 GMT"},"fingerprint":{"sha1":"AA:48:1D:E2:C4:73:88:D6:A0:D5:36:32:2B:EE:2F:67:01:C4:3D:23","sha256":"FC:04:34:8C:BD:15:93:CB:47:29:34:FA:05:BA:8C:F8:AE:96:33:7F:42:F2:72:62:C9:07:CC:D2:57:B3:1D:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kawgndv0hj9q.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":128,"dns":55,"connect":24,"send":0,"wait":26,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/cf-fonts/s/tajawal/5.0.11/arabic/400/normal.woff2","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/arabic/400/normal.woff2 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 8932\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqKK5n%2FLFfSVtbvQb7cn1nVhzUE3YpnzSzjztI%2FMVxn%2Bq6VqDFD8ouye5%2FAKtDQAzSg6lx2L2dtOD64C0k5ivQEhdMm8tGle3QE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99bbdc955c62712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8932, version 1.0","md5":"d595af28c13f0b004eb0a9694d397e61","sha1":"86dcc0150b2d71bb8c17ec11682cd0babe8256be","sha256":"6c9081fd00db08800850fa7d214593aa94992be5159e97557aa60197252cb95a","sha512":"5d0bafd869e5f466fef09a129e16487dd4d9a9c21d467b68593c3c11ede20d2a0d5162e475a7bbbe28b02aace228afd421fcf58823244ce9edc2a1f967462bea","ssdeep":"192:9Ty/JTr6kaUufAoHUywnSBHrO5msif/nOAQthEck:Q/5ONHl/rt/N","tlshash":"da02bfd97089ea14d057603e1014c1d6db1ea4bd1cae4c8f280bd7ad3eede13be24524","first_seen":"2025-09-09T12:45:33.076239Z","last_seen":"2026-04-25T09:40:40.697144Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawgndv0hj9q.n4.adsco.re/","fqdn":"kawgndv0hj9q.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:20 GMT","end":"Sun, 14 Dec 2025 09:14:19 GMT"},"fingerprint":{"sha1":"E1:1C:75:CB:71:36:CE:62:CC:D3:97:20:A3:3E:A2:FA:DB:E6:BA:53","sha256":"71:DD:71:4E:B6:1B:9E:7A:90:D9:9D:D2:2D:76:D2:D4:30:96:42:27:B9:D5:71:B1:13:B4:4E:91:D6:27:1A:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kawgndv0hj9q.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":378,"dns":120,"connect":86,"send":0,"wait":86,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawgndv0hj9q.s4.adsco.re/","fqdn":"kawgndv0hj9q.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.099Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: kawgndv0hj9q.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":344,"connect":182,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760804197_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Fire-Country-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760804197_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Fire-Country-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 95795\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Oct 2025 16:16:37 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sun, 08 Nov 2026 21:50:04 GMT\r\nage: 33574\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTBfH4Qwp7%2BXfpV2PZ2ezcvG0rV1sA9sJGfqCoQbrFwdFjrUDuzEzCwotuBOYQUdhGdycXFQ00zlWwJez9kmL3OqPneZl7uipNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc934c3a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"8d1f70ccff926e36d20d565828fb943d","sha1":"df22b41e673a4ca1dc3690b69ed24e96f3ef1a17","sha256":"72d3af1f90d2b00e57f340b0eba5ce445bd1c6e1b3457874b5f4105fd3fc6d1f","sha512":"70cc6e6383d8d6cfb4230f749db2f68d9935f9c309c50a5fe8ce283ca3a3df8493975d6c4dbff90cf17715c8b252c9ac9e7b8e120ff111ede3a31c00f814d773","ssdeep":"1536:oBMrbJ7J910EphyCYtzBaM+61Iy7gIGNzbFCGyn8jMOT8AoeBbKxw4/yhR837fAV:jJ75pAFtz0MH13gbNtEnsH8A9bKGqLfA","tlshash":"3b93127e323f4a29d8c88afe1416d2b5604819f5639079d4dc12df3e7d9d06d32c2aea","first_seen":"2025-11-02T13:52:04.891263Z","last_seen":"2025-11-09T08:15:59.90788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762615517_MV5BMjk5NWNlMzAtYTAyMS00OWM0LWE1YTMtZDA1MGFjNjk4ODAxXkEyXkFqcGc@._V1_.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762615517_MV5BMjk5NWNlMzAtYTAyMS00OWM0LWE1YTMtZDA1MGFjNjk4ODAxXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 405841\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 08 Nov 2025 15:25:17 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sun, 08 Nov 2026 22:40:07 GMT\r\nage: 33574\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMu2jY8DQvaOFCpuFd5YMe3KtWZS2aAWun3YbtUwXW%2F4dfsS96V3%2F3EADGEmR%2F2wtiZK48AgR4IKT2p3bQeCwlEXB%2FANc9fiWNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc933c37712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":405841,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x2000, components 3","md5":"442238f0cd8ad223e9796d09a6d083bc","sha1":"bec0325f0d4eeb26f73b066680b345d5562282ae","sha256":"abe1001bc2464fe4b5c1c775bc8a27525db068cb12a2fe26f23a727b23057bc0","sha512":"d8877e836788659ad802f70c960e143bc9591303520548787a8ca38593cc61cb9192fe638a8e2e340023fd6c986a60f9b3f4e385110e204a4f84dbd85f4285cb","ssdeep":"6144:eLMm6USHT+2UMFaMcZaGmTOgq70uAxfMg4GkW+jPiCxpbE/JWNe:kMmxSzB/aMcIGWO6uArkWUaCDbE/JWc","tlshash":"3a8423479e58a7abc207313956f46b07266e503c32cdcf9557be928c8e629f076c8dc8","first_seen":"2025-11-09T08:15:59.909584Z","last_seen":"2025-11-09T08:15:59.909584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1761236224_G2mgaq2XkAA8Myy.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1761236224_G2mgaq2XkAA8Myy.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 230219\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 23 Oct 2025 16:17:04 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g86btpsgXKK5sOG52pBnseseMHT4P6cynCVCzkZM2r%2FbGNBSYaMDVmx0zUnWAfg7MvmDS7NKmkAnT3uS2A1tNdifYudKhjI94iE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93cc53712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1200, components 3","md5":"3f19ded05712f943f532467682f8810a","sha1":"8fae76de044976345e16020e6b6e34ffe8b86200","sha256":"dff1def060604c38b236e333aa7cb460f531603a7f23e8daf11e619334d087ba","sha512":"086532840b7144c2ba23e4bf037bef3296b9ca992990eb15d4c622e18cac2c1ef6f7696227f979e8895000eac057c84e42a447bd4870ae2ee0adb9e8bf452e98","ssdeep":"6144:N5DZjVOY1VfaU18WlP1Zkd5cJHMhL/DqYLK2xWLn:L1VO+VfaU18WlP182+h/DqaTWD","tlshash":"bd241242e5b89c5725aecac3c6e26b5e924663c175637f847f60f2225a3f6b3084fd10","first_seen":"2025-11-09T08:15:59.911392Z","last_seen":"2025-11-21T12:48:08.078018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/cf-fonts/s/tajawal/5.0.11/arabic/500/normal.woff2","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/arabic/500/normal.woff2 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-length: 8940\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQ%2BDQZxDBI7N21ANtrofFxYOMDdlF8CoGUVLZl9JW60HN9KUt8Abdg3neEMR6jTECTlbaFFybjFdMNSFMZunDDZEzlhnFGzdYbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99bbdc958c63712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8940, version 1.0","md5":"899cfbe65444a0ff90b804c565720260","sha1":"bd45ba01bae3c1d1f4f4d7816efd25bfbd279519","sha256":"4255019c1cd986f7cda7869df69baf72730d61304ae14baba4acfeb13085da54","sha512":"a619787519e98ad44bd392e29bd2ba4fa9e2e8e789b8ee6d9d622ba90a67313784cb39294c8fa97667903e1d4655e8e7f1930b7761d3343677f1cb36e4ee5e2c","ssdeep":"192:iP7W7+Tsl5ABfjDyyLDUnXkiCCH0RuXei0hOWRbmmccytICN8Vzw:iP7c+TOaFiyLYXk3g0gt0hO8mKytB8u","tlshash":"3202beb82817184ee83db8b52f64cab999941e918d836772c4b1b5162bed0d889e3706","first_seen":"2025-09-15T03:42:31.776868Z","last_seen":"2026-04-25T07:05:32.073493Z","times_seen":459,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760066464_MV5BMmU1ZDg2MmEtNDY1OC00MDA1LWI3YTAtYzI0NGI4MTg1OTRkXkEyXkFqcGc@._V1_.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760066464_MV5BMmU1ZDg2MmEtNDY1OC00MDA1LWI3YTAtYzI0NGI4MTg1OTRkXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 771898\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 10 Oct 2025 03:21:04 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsk8W6EdEGxokVfPV4IJBJJ6nZvFl4EJWHp1EKge6Rz1hUV%2B4dkM7Vy71Ngj28SZI52npYrQzgjBGIThZlv7%2BwvcEURgu2LrsCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc937c45712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":771898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x3000, components 3","md5":"6a065487c6bebe9b519c63e2e8698c2a","sha1":"51fd1b16de5ba9655d64064a4cfc3dea58d48eef","sha256":"7d53babc3bcce9d820cf7b67d54e92b246315dfd1195eddeeaa807b1b3a05fe7","sha512":"b10d16e94911e685a1da15bcf559db32f28a42356c66615d494572eb94a03f78a018c5c66489542ae6be6e52fa01fa55736c0214b3f1019a920961de6a33e62e","ssdeep":"12288:8T7Eu3SS+oV8LptjPy8M+pe7TaRXKN8W2cPWh0pG7mIg1lIRbwoA6dzxpkuLHP0N:HGHMptjTte7TaRXwDjF1lWQ6Nxp1bPql","tlshash":"c0f4234a8937962f235704b6291255abb75ec0acc82947c1635fa3f24cab37bfc2751c","first_seen":"2025-11-09T08:15:59.913731Z","last_seen":"2025-11-21T12:48:08.009307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1759430424_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Chicago-PD-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-13-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1759430424_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Chicago-PD-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-13-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96528\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 02 Oct 2025 18:40:24 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMHndsxyQ2G3oqr4D5ZxG1kXU25DtFLL4UvnBfg6OHQhiZ2FM6jN%2FEUhCnfT%2FaXzPfKWB%2F2RcmB0X0MhEkwibdhpyWfCJs3tD%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93bc4b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96528,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"ee26f21fe66c49d61e73105bb80ca813","sha1":"46f8768f7d1867ea43e1fe74c5b1a96f169601ac","sha256":"c2038a8dbae7e65eedcd6fc011f695286dbb1b4c3bed1e5523ea677710353cc0","sha512":"60cb614dae0058f7866612427990c618d7c98ff00c17ebc62ab8242c00181d886a40726e7db76cc200a67357cfa9ea18027a19d217dd8d36dec0e0a795ed4e0d","ssdeep":"1536:o18FiVdvRZXDczIdh8/n7dFxAv+wRbO2LS81QjcFqQw0r4hpic680:MOiVDFDczIf8/n79kGcFT0hp4T","tlshash":"6293120bd4b59de681ce24aa6600e645f505130c23ef4f509bc0c9fae2b8d2a66fd7b5","first_seen":"2025-11-09T08:15:59.915232Z","last_seen":"2025-11-09T08:15:59.915232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T08:15:18.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A/ HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://shaahd4u.net/public/category/%d9%85%d8%b3%d9%84%d8%b3%d9%84%d8%a7%d8%aa-%d8%a7%d8%ac%d9%86%d8%a8%d9%8a\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\nexpires: Tue, 09 Dec 2025 08:15:04 GMT\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTjRKG%2BPJVYL0gM5edJOUj%2FoJRO5KNfZDUFQL3dWZmSdxTRporgtnCjGrFbUniG8f7I73j9a035JtyzY5vpA94n3VdAQbfcGOUHLwQ%3D%3D\"}]}\r\ncf-ray: 99bbdc8f8f67b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141750,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T15:55:26.931181Z","times_seen":14184276,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":26,"dns":7,"connect":1,"send":0,"wait":114,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/bootstrap/css/bootstrap.min.css","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 07 Dec 2025 00:01:13 GMT\r\nlast-modified: Tue, 30 May 2023 09:02:52 GMT\r\ncontent-encoding: br\r\nvary: User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 202446\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nEO6f%2F%2BoA0DbYwDLvG7dgeQZU3gHsTJBxX%2FaAnL8a18nTxpE7uRiSPDTA67lC1hXMoYBcXxQn4Z0TT1Ukx6D%2Bio6CzDW6Id18us%3D\"}]}\r\ncf-ray: 99bbdc929c31712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-25T16:13:15.533193Z","times_seen":20825,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/assets/main_style.css?v=6","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /assets/main_style.css?v=6 HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 07 Dec 2025 00:01:13 GMT\r\nlast-modified: Fri, 19 Sep 2025 12:34:47 GMT\r\ncontent-encoding: br\r\nvary: User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 202446\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0W5JdoEbzpE42CH%2F%2FX6p61HFd02F%2F%2BCCKhknjb2Y5HYplspgYoATXxw305y4y8fOgdU5xub35jy6aIlifBWAZesrkiscG9jAb8%3D\"}]}\r\ncf-ray: 99bbdc929c32712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15659,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15659), with no line terminators","md5":"482aede86a5ab16c9da3b0ab83af1e06","sha1":"3f249839fa8a897b5ba71c7432ee0b2aa48515e6","sha256":"734886a7d78c3abfff5b851b6cbceb593d8c0f67288c513e5555be1d58473e0b","sha512":"3c24f3b208c77f3f890124b9abda9a701e1fa5274afa3a7af4cbc662020a830b2191bba173424d5ccd4b92b699275d128c5aa1339cd4ab9f168151d25b76a244","ssdeep":"192:HmD9RT2kJDyQc4brKOU7mTpUThSkRlDtwGZSG9gvl2UhWSGs4XnxV0rz3:H6RT2mDy1lhA2UhyXxcz","tlshash":"39625160f5d5203db46bd17976d0afad1138c582ea224bbdf65a713887c62d722b3b0c","first_seen":"2025-09-20T14:49:01.451555Z","last_seen":"2026-04-18T06:38:18.926261Z","times_seen":101,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760804870_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Boston-Blue-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760804870_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Boston-Blue-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93267\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Oct 2025 16:27:50 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sun, 08 Nov 2026 21:50:04 GMT\r\nage: 33574\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ex5mb0h3FjL5VsOpI0yryfxiXwrUfhkRb%2F%2B9%2F%2FnK2hB6FAi9wSrdg8CtMDdcOnoWgIDUjrMregddME3184XHSycfno%2B6HhrH2mE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc935c3b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93267,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x600, components 3","md5":"c588f51b81e9e744e4553c4d431caef0","sha1":"2244673cc6ece3ca96e98b775baf89f4e4ef262a","sha256":"393d2b1004e2344f1e6bd46aa73914c30bdef60d59af8f836ba36a64d51b5141","sha512":"5a3ec2214522b25745b15abf015614c73734310636862e171583167db5c5a302c6de5b0d39f2c8fa0415ad0f9f0ae637c82daea01d8aec935599d8898263a4e1","ssdeep":"1536:QeBVxhNpNGbCJCET0MgRgQ2PGxcDWbV36lM1lX7B2Z2je2c0C5PSI3h:lRNrJCEIMgf2exlJ36lM1JN02jePta0h","tlshash":"e193120bf5c581930a1234f47c34d5ff9859088e57eb505ae2bc2a967fbc2ca1f624ac","first_seen":"2025-11-02T13:52:04.869252Z","last_seen":"2025-11-09T08:15:59.919115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1762547486_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Power-Book-IV-Force-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1762547486_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Power-Book-IV-Force-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121359\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 20:31:26 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:31:09 GMT\r\netag: \r\nage: 103449\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HieFmYBOlXdyoEFe7rLq%2FKT9yOjQRfRCqXSMp0f%2FOx2iNPEhhiSLWM%2BK03EX5PrZ6OyivNKvSBo3pBZCuwiNQNzgi85KxLyJG3Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc936c3e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x615, components 3","md5":"40ffb994f80e3c87b906782f27084915","sha1":"fb668675d384fd15d330d920511b9913e2690803","sha256":"3fd9f4615b8e1d69c6bbacf699445e5c2e7a955ab48a1a7adc13de4c945d48ac","sha512":"60634ec2209d10981566d8bf778928f0e1a87939079fd51b632c90554e27861870dba6b3de8a200c76b0cbc5166ed3cef3fb3ab84fc9a5d62a4ba9a104a13fb2","ssdeep":"3072:eGmaIbLaxRMi2eCF4x0Vk9jYEnXcYQQ2Y/sNyNU8I+fvAY:exahbb2LOqLEnD2i0qHXAY","tlshash":"4dc31278a938ed169cd40d749c0abb4090d06dd882fdd921d7b3e4e7f293c2259a16df","first_seen":"2025-11-09T08:15:59.920784Z","last_seen":"2026-01-17T21:47:14.361903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T08:15:19.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; SameSite=Lax; Secure; Path=/; Max-Age=7200; Expires=Sun, 09 Nov 2025 10:15:19 GMT\nlaravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Sun, 09 Nov 2025 10:15:19 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Feu54NxzlarC1%2F%2FzvBlkMFBWLw0QBBE%2FWp%2F3uG7kaJsnEfMkMsX1OGijAANgv8imIxmQDC9Tom1LoDAjCvUliJrACP98u%2BbcPXU%3D\"}]}\r\ncf-ray: 99bbdc905c24712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":141750,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4349), with CRLF, LF line terminators","md5":"b1aaafaa1cd08011ea7a34a9a2af07a7","sha1":"55d2616b5ca2cbec65cadd680ba10a3c7f120d17","sha256":"fcccf49fe9ab6318772fb096e6ab438755114205838ee7e653e54d396fe22dc6","sha512":"7797aa04095a879a902d83c1e7eb76bc2ded52728440f245a26f959b5db71a20b479c967bd6aea661aa1727c27394785b56f636f1b4e4c73788643dfddf59f4d","ssdeep":"768:6BqZsdkH/PD4MTfuvnp1JUnlLORknw3+BSyC3WYmFSWy3Iyfczl94:5OkH/PD4MTfuvpuoTGBs/NU0","tlshash":"a1d30ea110f548ba00a7c4c5a5716f0fdaa0d603da5b9d82b6ed4fe55fe7c82cd93838","first_seen":"2025-11-09T08:15:59.922314Z","last_seen":"2025-11-09T08:15:59.922314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/assets/glide/css/glide.theme.min.css","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /assets/glide/css/glide.theme.min.css HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 07 Dec 2025 00:01:13 GMT\r\nlast-modified: Wed, 12 Jul 2023 17:49:00 GMT\r\ncontent-encoding: br\r\nvary: User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 202446\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVLQvb26zQunPcnZoPXS8TeB7svr1jSCoeeOY%2BNhSyzsXecyhFW%2Bb5DXylnuVFCnqhc2bOfpWJ7wVCgwqQfQFvA4TFLqZHC0aVk%3D\"}]}\r\ncf-ray: 99bbdc929c34712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1320)","md5":"72269be697aa9e859d03e29cb696787a","sha1":"eb1c8d6ae2e51276dc8c7d2018aef42a01502d0c","sha256":"1a04c7d342fe039e4b9a1a3764ca7bc6119fe94624bfc23ff302f284b2c35e3a","sha512":"f2f0cea1217b919518927ec1890ba54424efa51a1e9e58e59100d984cebe22a0c98b98c70c7f501181fd35f30107c2e5aa261ceced7b606c5b1b1edd3b12aba7","ssdeep":"","tlshash":"4121e1369b42010ee013f60769c1c6cda0a5d1329622c5adfffb2064ce421feae391c6","first_seen":"2023-07-22T02:08:10Z","last_seen":"2026-04-23T16:15:37.769978Z","times_seen":742,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/ecss-animations.min.css","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1868349309.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 12:34:52 GMT","end":"Tue, 02 Dec 2025 12:34:51 GMT"},"fingerprint":{"sha1":"B8:E1:0E:75:91:D4:84:92:61:5D:99:08:1C:A5:DD:16:40:46:38:1A","sha256":"D3:DE:33:1A:48:7D:BF:5B:57:03:D4:CA:64:55:89:B3:0F:DD:AD:FD:3C:02:6D:91:61:DE:41:2C:6B:56:E6:18"}}},"request":{"raw":"GET /ecss-animations.min.css HTTP/1.1\r\nHost: www.intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb5\r\nexpires: Fri, 14 Nov 2025 14:49:47 GMT\r\naccess-control-allow-origin: https://shaahd4u.net\r\nlink: \u003chttps://intelligenceadx.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH3wi0CAAwBuUwKEwH3wRgAAAwBWd59LgG3CQAAAA\r\nx-77-nzt-ray: 2a494a15220e6f0fbc4d106944bc6d22\r\nx-77-cache: HIT\r\nx-77-age: 142786\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"5c217a6c32920382be4ee9a82b4a23ab","sha1":"f8955d14f69b7ede967c2caf16197b936f22f0c4","sha256":"92c712b3fab0316b0625f9fc5236422409af0bf69a126113fd9387d856cf6be2","sha512":"af5f2f4caeba8b8b5972d20a191266851184a97f3f5dfdce151c461a62946082fb9e276098b6ebf056aec3660e58db9c6be819cc32f6f168fc0cd812201dc878","ssdeep":"768:bt9rqAYKKWZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCtiCntlqoDX:bbdZzFQ9JsTgZvfzmMzhYrTscpgZZ","tlshash":"ad132aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","first_seen":"2025-11-08T14:31:37.297492Z","last_seen":"2025-11-09T08:15:59.924631Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":59,"dns":21,"connect":8,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 09 Nov 2025 08:15:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://shaahd4u.net\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":85,"dns":0,"connect":27,"send":0,"wait":31,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6669\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 09 Nov 2025 08:15:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://shaahd4u.net\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"3482225b138b772241898829dd546922","sha1":"863b30876a6a6c5598bcab957dbf744c57a7aed2","sha256":"1967070ce51be797c32381a800c723c4b55335e054986e15bdcb55c44d31b8ea","sha512":"d21169a79e4548963f79f27cdcb7f0fb12bb67e507b3747c6cc0fbcf0bf2368ec3c4b861642037322f9b42ee2b58df562d8f753c6824df08ece7090efc9e9bed","ssdeep":"","tlshash":"9621e474d80250c3105bdea3ab61438a8dc820429844baa64e8aa621bc304e8ac7a9fc","first_seen":"2025-11-09T08:15:59.926804Z","last_seen":"2025-11-09T08:15:59.926804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":84,"dns":1,"connect":25,"send":0,"wait":52,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/imgs/bg.png","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/imgs/bg.png HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/assets/main_style.css?v=6\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 627300\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:01:14 GMT\r\nlast-modified: Mon, 10 Jul 2023 17:02:52 GMT\r\naccept-ranges: bytes\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 202445\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaKIzushNl8DjChJYVZUdX4uKcoYFRnX23bdIRv%2B9ARc1DjX7qGYuj5NQeouIwfKyIcNywXB31VSECVsaUB69pVc1gotIMjVgRU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc930c35712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":627300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1598 x 2272, 8-bit colormap, non-interlaced","md5":"fdc1ba13fee12e75a2a63d7b95542a50","sha1":"7b25a7cc73387bc1695f5e80998e3421608ae6eb","sha256":"2dffbf0d03a8f8dec2cf49aa46db2644261e9a0c74b68e6528be7c23a8a5d043","sha512":"873d5b5ea6cf3701ba24a9659de164fe67c04c28079d7069708686bf26b9ca2bf1eedf2a72c06358a807d4dcdd42f14f061af4b2b74ff8aef23a9189a88aedd2","ssdeep":"12288:40AMmR8MOYZkY4wRlFIMjuG1NWWJrZR16EWcUvWCKXvBwVPN6Y6e8OzWGnG4YW:45eMduY4YLoWhZD62lvB8N6Y6ejzWGGW","tlshash":"4dd423e48a11db36f66fe00968d9ae9f3778f1d4894c6c10264f450c58edf0b72ae278","first_seen":"2023-05-22T01:59:42Z","last_seen":"2026-03-17T16:33:01.949096Z","times_seen":180,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1760117973_Season-22-2025-scaled-533x800.webp","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1760117973_Season-22-2025-scaled-533x800.webp HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45538\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 10 Oct 2025 17:39:33 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 03:05:01 GMT\r\netag: \r\nage: 105017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fjko0T4I9Hi82j4p36UzZdFcq7%2F7nsuLFGxHcqECYeFt3hIvnFQaIGtykhBCEMglKKx7bI3FJpd8x1SpsOtB6kbkVxAEO2EGx2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 99bbdc936c41712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 533x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"685b074fa9fec749db69b3bdd9b891f7","sha1":"ce6cef6093c18ac3414b0d6a8ec11bf36b4fe469","sha256":"06d79193dcc3ff11b977734124b53b20ee0fa72a1f320be57b51ccd5dc7e67eb","sha512":"c3eba78eca85eb4b16988104c95f2eab175f46e55bbf96bc5cdeea7e0dfd674e35b0d9a73793eb1e38a8f5c938b0a9c888b467b6f44b6372733ca2cda331c21b","ssdeep":"768:XKVbLY7G3g1cYgXd2lJtSxARjL7vpBDuLOp89IlgFj1TclF/WUVgZwe6a9tJqcqC:uLp3ucY0d2lJEiL7NTlOto/9gZ4LZO","tlshash":"d513016eded765a8a95b2741bfff6d38420702ad28b3f946018cec8428f8e54568548f","first_seen":"2025-11-09T08:15:59.929658Z","last_seen":"2025-11-09T08:15:59.929658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/photos/uploads/1759427557_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Abbott-Elementary-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:19.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET /photos/uploads/1759427557_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Abbott-Elementary-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A\r\nCookie: XSRF-TOKEN=eyJpdiI6ImFwSkR6Y2FDbXl6eWNGbE5TZTRCeHc9PSIsInZhbHVlIjoiS2JEaGdLVDh2bWwzd29CeEJXRVNXM3k2SVB6d1lyZEpXY2RINmxGUkhSY1NsWG1TZ0N0dlIyOU90Mi8vTjRZMWRyT0ZtTktwcjZhUFZoM1ozN3F0YWZFc0ZiejJPRWVwS3lZbkUxU1ZxN0ZIbTFkRGlGd2JleXRoMFVCNWFkV0siLCJtYWMiOiJkZWU1NmM1N2Q2YWFmMTJmNWQ1NThmZGU0MzIzZGYyMGMzZmRkNzFkYWYwMjg5MTY1YmRiMzFkNjI2YjBkMDZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InU5UFd2WS9peDBpOEU0ckZPRVRqSVE9PSIsInZhbHVlIjoiVUJWTXBhTDROaHdDRWZOVGJKTGx4M24xeC9SRnRDSDFKaUR6aUhqbmgrRUtmM1M2VVIrZHN5Ri90UXVadU96dlpyeGI2M3FOR2hOUXNpUEJXY0ZrRStEdlhxbUJ1enhiNXFFWFJaRFp0cU1aa2JhTHlnang2Yis1Wko2Q2ZnS3kiLCJtYWMiOiJmMTJkMTQ4ZjBhYzY1YmEwMGUyZTdkZGM1Zjc1ODBiZmIyMTZiMmE3OWQxOTkxNDM2NThjMDc3NTY4MjBmYjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 09 Nov 2025 08:15:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 144828\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 02 Oct 2025 17:52:37 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 07 Nov 2026 00:29:35 GMT\r\nvary: User-Agent, accept-encoding\r\nage: 200744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxTRm9lAi6bYfpCKwmiB%2BmfwEILpXiStepkdGOYcA%2BqZoXh0AuRvDrlKmNmfkbwX4zWW2KN%2BmUY7lTiBWqj%2FYTYKhp1cSUibf8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 99bbdc93cc52712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144828,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 450x600, components 3","md5":"b15f94d3c2a802f04df063bc7794359d","sha1":"85c06a8d9bebe45fcabd1e9c9036f585f0f13af3","sha256":"f71db66750b3cbfdcd9c3a398212a453425a137bc0a880e2fc01a884602ca9c1","sha512":"a6a616aac65aad412eeba876bc9ae7c54af45f9596299c0815e95ac71acea5589fc76e3864b88db2766c9f9b24625bb475dccaae4fdacec0e4d5468f5b97667a","ssdeep":"3072:jkHC/tpQ/RFjBy+Bp2xBMhbGhhoBx6oh2F60+YbzmGoARD+EQ6hGjI:rpQnljBYBMJAoOvF08mOy6aI","tlshash":"4be312abbd153eab9bc7f7103551ed22a00858e47a9d9860f837788ce256845360ecdf","first_seen":"2025-11-09T08:15:59.933422Z","last_seen":"2025-11-09T08:15:59.933422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.43.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shaahd4u.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 99bbdc9d0ebc723c-OSL\r\naccess-control-allow-origin: https://shaahd4u.net\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":28,"dns":21,"connect":1,"send":0,"wait":12,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.3038833980961132","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.43.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shaahd4u.net/category/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA-%D8%A7%D8%AC%D9%86%D8%A8%D9%8A","date":"2025-11-09T08:15:21.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shaahd4u.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 08:15:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\ncritical-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//adsco.re/\u003e;crossorigin;rel=preconnect,\u003chttps://6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://6.adsco.re:2087/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://4.adsco.re:2087/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://0.l.adsco.re/\u003e;rel=preconnect,\u003chttps://0.s.adsco.re/\u003e;rel=preconnect,\u003chttps://0.n.adsco.re/\u003e;rel=preconnect\r\nexpires: Wed, 10 Dec 2025 08:15:21 GMT\r\netag: W/\"LvTxXIbLQ/DvDiQbcP3Xkg==\"\r\nvary: accept-encoding\r\nage: 29039\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 99bbdc9cd8aa56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61289,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (2374)","md5":"2ef4f15c86cb43f0ef0e241b70fdd792","sha1":"4971749861cba038c2cd1dce3c68c28aed4676fd","sha256":"5c240a0fcfa70d0e87f614c22547e240fc1a17214a232b6d4272e4a4cd42d905","sha512":"97857fceb635a585da1def0b639726d2414b8ba2b62015deadabc2ad3e01be420adcc1bf9bc1508aed8fb0ac45036922aff198abde2a291ffc30a6269c2812e1","ssdeep":"1536:P/EE3nA5ePdB1tz9NSU3myQjyiw1snWlwj:3TnAQp7S4QHnWSj","tlshash":"bf533b797561203a82b228fe167f532170ba56906d46d0d2d3bdc9503c38e9b933bf9e","first_seen":"2025-11-08T22:28:35.654808Z","last_seen":"2025-11-11T20:29:54.277417Z","times_seen":150,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}