{"report_id":"cc4d1ae3-5dd0-4185-a058-51faec6af6ed","version":6,"status":"done","tags":[],"date":"2025-07-31T19:43:18Z","url":{"schema":"http","addr":"redir.me/?https://fapello.com/godessela/","fqdn":"redir.me","domain":"redir.me","tld":"me"},"ip":{"addr":"104.21.41.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"title":"GodessEla / ultra_godera Nude Leaks - Fapello"},"submit":{"url":{"schema":"http","addr":"redir.me/?https://fapello.com/godessela/","fqdn":"redir.me","domain":"redir.me","tld":"me"},"ip":{"addr":"104.21.41.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-04T19:43:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T19:42:44Z","timestamp":1753990964,"ip_dst":{"addr":"172.66.44.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":51400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-07-31T19:42:44.308902+0000\",\"flow_id\":141801687386041,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":51400,\"dest_ip\":\"172.66.44.129\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"ourdreamstaticpages.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-07-31T19:42:44.296889+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"creative.rmzsglng.com","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2024-10-30T10:43:52Z","last_seen":"2025-07-26T23:06:34.404088Z","alert_count":0,"request_count":7,"received_data":1368641,"sent_data":6974,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-30T15:10:27.969323Z","alert_count":0,"request_count":5,"received_data":162630,"sent_data":2710,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-30T15:14:12.092299Z","alert_count":0,"request_count":4,"received_data":30964,"sent_data":1966,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adxsrver.com","ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2022-02-07","domain_rank":0,"first_seen":"2022-02-08T11:27:00Z","last_seen":"2025-07-27T01:59:01.798456Z","alert_count":0,"request_count":3,"received_data":248149,"sent_data":1222,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ourdreamstaticpages.pages.dev","ip":{"addr":"172.66.44.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-07-30T05:32:49.232094Z","last_seen":"2025-07-30T05:32:49.232094Z","alert_count":0,"request_count":2,"received_data":7272,"sent_data":1159,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"redir.me","ip":{"addr":"104.21.41.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-12-06","domain_rank":0,"first_seen":"2016-02-14T16:55:05Z","last_seen":"2025-07-26T02:02:00.116762Z","alert_count":0,"request_count":1,"received_data":42551,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"go.rmhfrtnd.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2023-12-13T13:20:46Z","last_seen":"2025-07-26T23:06:34.325852Z","alert_count":0,"request_count":5,"received_data":23494,"sent_data":3624,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go.rmzsglng.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2024-10-30T10:43:53Z","last_seen":"2025-07-30T05:09:32.109536Z","alert_count":0,"request_count":9,"received_data":49028,"sent_data":7374,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fapello.com","ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-10-11","domain_rank":58298,"first_seen":"2021-10-11T09:03:39Z","last_seen":"2025-07-26T21:43:21.863758Z","alert_count":0,"request_count":34,"received_data":6531565,"sent_data":16183,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":0,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2025-07-25T08:56:10.859348Z","alert_count":0,"request_count":29,"received_data":340565,"sent_data":13470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-30T15:12:44.837685Z","alert_count":0,"request_count":1,"received_data":388979,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vid.ourdream.ai","ip":{"addr":"172.67.74.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-06-03T19:55:45.872588Z","last_seen":"2025-07-30T05:32:50.117055Z","alert_count":0,"request_count":1,"received_data":1013855,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xhvideo.sacdnssedge.com","ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2024-01-30","domain_rank":0,"first_seen":"2024-02-27T12:33:47Z","last_seen":"2025-07-30T04:19:26.305556Z","alert_count":0,"request_count":1,"received_data":442,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"a.bestcontentflight.top","ip":{"addr":"172.67.212.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2025-07-30T05:32:49.241668Z","last_seen":"2025-07-30T05:32:49.241668Z","alert_count":0,"request_count":2,"received_data":4368,"sent_data":1100,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fapchatvip.com","ip":{"addr":"77.93.81.1","port":443,"asn":43293,"as":"Proxility B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-04-23","domain_rank":0,"first_seen":"2025-07-24T09:14:17.646084Z","last_seen":"2025-07-31T12:45:59.106259Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.adxserve.com","ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2018-09-03","domain_rank":707430,"first_seen":"2019-08-08T05:59:29Z","last_seen":"2025-07-30T05:09:31.762511Z","alert_count":0,"request_count":8,"received_data":10256,"sent_data":4674,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}]},{"fqdn":"creative.rmhfrtnd.com","ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2023-12-13T13:20:47Z","last_seen":"2025-07-26T05:52:23.170953Z","alert_count":0,"request_count":4,"received_data":693589,"sent_data":2952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T19:42:44Z","timestamp":1753990964,"ip_dst":{"addr":"172.66.44.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":51400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-07-31T19:42:44.308902+0000\",\"flow_id\":141801687386041,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":51400,\"dest_ip\":\"172.66.44.129\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"ourdreamstaticpages.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-07-31T19:42:44.296889+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fapello.com/assets/js/tippy.all.min.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8de2cb7ccef669d8af468703a403055","sha1":"1236a8b68e0a3edc2ca51ed543397983bad9379b","sha256":"10566881ee2269cb5a3b80346042c5060dd26af795fe72027b0ea972d9160e95","sha512":"b97eb58aa4a4947629b2fc34031fa3846f9214cb8eb0f06a9683ce9e88d13953b356cd97577bb0aaf79814e20977dfae00cbf1578192fa9da1ea45ae8febf905","ssdeep":"768:clmU82nOnbQ9irqwxr/bifSTXOLc0mWbGAwF5+VAHpna8u+cMh7yfD6kpXagmfe5:cYw4biirqwxrtU0D+6feIFPu","tlshash":"cf33e88eb1907265026b4113d1df532d713ba175344b4868b259a8ca6e34feca3efd3b","size":53032,"data":"","first_seen":"2023-03-07T12:11:28Z","last_seen":"2026-04-04T20:33:02.422888Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/js/uikit.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f28b7b2e4bbb5e71c210fe708432c8c4","sha1":"28f0a78686163398a48beba73df2e6e807309abe","sha256":"db8c7d69ddd3412a9f467b5a3a34cac6970301aa5f6aedd6d28e7b6948546901","sha512":"f891f320b182d49818c8171e2376f9030fd785ed35fcda9069e05a2fafbab5305b0e5e63f76bbba6653ba1db93dd043db2beaaf92af10054faade9e8e138ee26","ssdeep":"6144:309EaigthxiCKie8Kob+NUPsPM78sxsJJTFwyh/4SEEWk3gfsBtK:309EaigthxiCKiZb5h78j/Fgfsu","tlshash":"d074504dbaf73096a623713d8bef8009b1798447080ade14bd5c92d45fa093856bbff9","size":340837,"data":"","first_seen":"2023-03-08T04:57:24Z","last_seen":"2026-04-04T20:33:02.508019Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-W0QKNEZ1J9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a0e4ce91c584d7d13e1701ce8c064b4","sha1":"203116ef070e664f41fc0ce05e8c04328e0d616b","sha256":"af4631403d32125745573ba77679aae717458f3e03097b56cc8811d7c589a0f1","sha512":"c2e147657bc293e1c5ffb027cd35f0bcf9aee3c10efec7b063129c69553a70acec41da20d64033dc695e1e25a0cb5000fc0a3dae37fc6c1095618dcbbe747906","ssdeep":"3072:bRQyeWKA8xwym06ojI/fz0ie38JGXbrunAIH1EMHsNKlKZtcRWaWU5Fjt2YwrTyX:ngvm02tHnCKlo9aWU5Fh2nrGwK4m","tlshash":"e68418cd73c6742693a6f478503f018ba57b29a2f45cc899b189cce42e74a9a0177f7c","size":387978,"data":"","first_seen":"2025-07-31T19:43:34.794672Z","last_seen":"2025-07-31T19:43:34.794672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxsrver.com/KstJsPp.js","fqdn":"adxsrver.com","domain":"adxsrver.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e1a645519f97751a908f8d47e5a35e3","sha1":"60fe247a0eaa2b7786ab0b00e1c2df40a88266ee","sha256":"4b1616bca20bad45d5c3cf4dccb933b52f3f40d992ef7cb7258ff26c15d46b59","sha512":"019365818e6617c9a3c9120a02023a00f35df1d8d815012f96c20bec3827e081e06aed6715358d3ff497901bc083a41b0d65f0deef50c211014cef165ccfd7ff","ssdeep":"1536:ddIjOTAo5m/W9LuU1ASanHcBsSccOT+AWF0qyhn6NnO93vqDqf:IK7mH8sGFk6NnO93vZf","tlshash":"5483f95571833055a2a3d7b9403f714b98bdcc59984a4cf4bbb0cbd2ec640c6c8a7afa","size":88448,"data":"","first_seen":"2025-03-30T16:10:09.926862Z","last_seen":"2026-04-04T20:33:02.44039Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/main.df51cea83c3bfe94c814.js","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed0122b73e6d996aa938a2826c6bd5f7","sha1":"b06917b1ebc30f0458ba726ff8229ea5e25c8768","sha256":"fcdb860688394376ce17be5be3e1d368cec5ef181f12cd8258811a4f7af9c48b","sha512":"ec3be7f2b8001ea6a2ccb4ccb41890b515919cc84c4ca2234ddf98aa93d36b85f1a86b9ab6360ebb80e049fc8c0c93eadb612f78c70314e3a4cdc9afd0918ca4","ssdeep":"6144:ky5dK+BgQ79wCTa60TAsvVqiHHxHgk2x7aVOutx+gY3:PgC9wbwimRaVOutY3","tlshash":"0de406c97785b0224387a166503f040bf2399999740d905cb299eced7cbdd8ea277f3a","size":672553,"data":"","first_seen":"2025-07-31T12:46:08.97107Z","last_seen":"2025-08-04T09:49:07.628646Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763","fqdn":"a.bestcontentflight.top","domain":"bestcontentflight.top","tld":"top"},"ip":{"addr":"172.67.212.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d04f104ecd6c20656da209dc6a6602d","sha1":"e53d53d9c2305c053d1a9d471bd9c7d404c6cf69","sha256":"b9fcaf119ec20cedcff2574a906a890cbcc13ebfafc8ca6a144fb8a512b206c5","sha512":"4629bd273764e70a57253380f96bc2d83f5344e6d0093d06090bf55d6614be3e56782b03eae464e0e9ca46dea91e6d9983e479ed02749d0ed185547fe256b497","ssdeep":"","tlshash":"ede0eb997251a0116ba22e1e932ee34832332012380b80f5a31a82888b7fed8604532f","size":299,"data":"","first_seen":"2025-07-31T19:43:34.97931Z","last_seen":"2025-07-31T19:43:34.97931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/js/simplebar.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74c6c582c6bc6e2f900aa0741c4e6aeb","sha1":"c6c2968e8c1b4f01d06c5a76fc0db52f6411d9ef","sha256":"debf7e3134f924ee7dad356bee4184f8a8ec56c13873839c93dbbb75c0eef3a5","sha512":"3c6564a134c4ccf3722729b22b73b413a8b2707a2083d64b924414b691cd6175719a06229d033620970ea67d90bf7ac7efd58c8f6f107809d80dee505f920aa9","ssdeep":"3072:ZpLPboAJ5cbXH21VJDfSeuDJecIpUZaZA6i5ZkGHm8wKz:fLPboAJ5KXH2dDfSeeJecIpGaZA6ifkE","tlshash":"29e3b75a7ee261e2447771798b5f6104f638811b021de994bc9cd3e41fb0b3843baee9","size":150426,"data":"","first_seen":"2023-06-24T14:41:18Z","last_seen":"2026-04-04T20:33:02.490077Z","times_seen":500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c582e213855c8de3528cf05ba524a83","sha1":"d77332a4cf361300e1d032bf8b980bef61dcc118","sha256":"c35ff9edb917a8c7d3b1cc926b0afff9a99697963ed284e377719c16d8af89a5","sha512":"e6ff3deb1740748e93f62a2666170f180c6a7b36a79ebd14c41ed900348cfba14b5897c8308ecd0198510db1bf6911127ca95a3c6652ea56aa531fb0bbce59df","ssdeep":"","tlshash":"dbc08c98230a0cb172fa66400b2fb908b062321094a01c220819a30855a0e43db488a0","size":158,"data":"","first_seen":"2023-03-10T09:22:48Z","last_seen":"2026-04-04T20:33:02.542558Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-04T21:39:43.146668Z","times_seen":203611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T21:43:48.463031Z","times_seen":594432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxsrver.com/license.11.js","fqdn":"adxsrver.com","domain":"adxsrver.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2061e8a0ddd64f2823f0ad6f769371d","sha1":"95baccf34e230e927b63c9276c59acb1a828e1ef","sha256":"ff9a23b23ffbbf995e5b42385a9012838aedc290f44ff851418be927b1b0db02","sha512":"efb57232aa6c3e7423cde3f4afe6d6a57ce735b1dee4439db9ebe4933c6cb0ce06b46a7150ac5403e6a5132a6a8527bb8c6e0a38ae2121d7e493e82f2f7fd9e8","ssdeep":"1536:nRY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCio2uJK:28Ovaclc1Hl8Z0mn5pg4oGRZX2uJK","tlshash":"53a35561710750d630e1d26d166ab3c12d795402f4298ca6fc21fb9fcaaed93419faf3","size":105804,"data":"","first_seen":"2025-07-11T22:36:43.289304Z","last_seen":"2026-04-04T20:33:02.5204Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dac1e4b00e5212396075cef9c2417a8","sha1":"094d456c051e8ae933aaa3dd7a4a3ec9ad57759b","sha256":"290aff8ca028a908cee3e6f4f78d9c53b8de26be0698c412a20e77dd6f7533ea","sha512":"6c9c288edb4e911fb21d7534836bd13523c6de717d6e064cf21755f582050f7a6e8fa546af326bd9e20a0148416ad0144fb84927351a167a2ea214f12a0687f4","ssdeep":"","tlshash":"ad61513e13aa245a5f5e053939f67cbc877e5461dd8fece9f614c008b2fc48502ab698","size":3209,"data":"","first_seen":"2025-07-28T19:48:03.876448Z","last_seen":"2026-04-04T20:33:02.558048Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3af4097219f12fdd24a2594e4c5de10","sha1":"55e8670164fd35e72085e83eb9728b2e8f7aa74a","sha256":"9ae740d249d75f59119fd84f2101a8a1491862db3882e9541631c1389858b3ad","sha512":"b41432dc545984b15a5ae70dcd93e71c31abb1805769f1d8721fd40e96d06abd1fe510a595a7120174c6d18c376ce6446ace95143f1e66ee02d5209e15a4f104","ssdeep":"","tlshash":"1f0168d7bb3c2c1f85abb04a672f504b256d3b358512152fbf8ca0811e8894d276957e","size":826,"data":"","first_seen":"2025-03-30T16:11:58.537147Z","last_seen":"2026-02-03T15:49:38.190153Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aef5314d0bdb86773a0a4a9a530ac714","sha1":"37665296984e9b0c8e9aef774373ced382baba6e","sha256":"56d89fa3a95ba42fc822d3f3c57f4f26c16ce4c578cd86b2f2e2eb95e2e2970f","sha512":"a0959b1a80ef32ea5e2c0189c6e1b3b105ab31ae15cb3616d39b456b52c52bad36b4ddcee26ea8619fd3d2767bbb3b35c068f3ef6a9f1459e384503172ed7004","ssdeep":"","tlshash":"fd017691c29c2b03002482be1dc2dc18702f1061f06e35a27e531a6cbf6fe0f439caaa","size":667,"data":"","first_seen":"2024-05-08T01:50:33Z","last_seen":"2026-04-04T20:33:02.579855Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763","fqdn":"a.bestcontentflight.top","domain":"bestcontentflight.top","tld":"top"},"ip":{"addr":"172.67.212.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e28809a4f55d201771ed5c874dab8d3e","sha1":"e8534e9cfb162ece710cd20506aa89266d2f740b","sha256":"ff2d9263062cb6fd6cf65531847f632503377439c8f3593c7b3055968e0b2d9b","sha512":"16822ce19085ca6ae24f0bf55ba7301e1b25376829772d30d39310ad74414b85e841f403f573796b8c0555c99ad55fe6fa9a5c0598d36589defdd13b7b7cf1ab","ssdeep":"","tlshash":"ddf0abeb7a863a3005bfe66b63ebe3f1e6b1500a7d00019c385d89915b0aca29021dd6","size":438,"data":"","first_seen":"2025-07-31T19:43:35.003949Z","last_seen":"2025-07-31T19:43:35.003949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/js/jquery-3.3.1.min.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T21:41:41.884125Z","times_seen":118253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxsrver.com/kstst.js","fqdn":"adxsrver.com","domain":"adxsrver.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0828bef1d3757bb8373b2b8690745e96","sha1":"00da816d45500544c3a70f5dfa67c40efff6f26c","sha256":"a95d3e5d1ac4d97b602f4526487f82bab0f6d87757f8f92bcc7a91545bdc364a","sha512":"515e4e480d54c63e7d6e9255c65c5398f04de47c795c79e14f576a6e1cd03afbacfc07c05dba3d13b719bc42fdbf3ca03bd58e8c2607d69a2bc886f9104594d0","ssdeep":"768:V8q9Qq1Lf3FU33oLIsJ35N+DgsNsYcXyK407APsB3KxTaHC44a1p/VKCLlqGCWDE:UMTddr48XI7aoerb0TxltjJDlj","tlshash":"4e334ec177d5bc851397ab7a731bb1e6f03a5cd97584488ae004bca0f0e8601fee56b5","size":52431,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-04-04T20:33:02.511296Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/main.df51cea83c3bfe94c814.js","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed0122b73e6d996aa938a2826c6bd5f7","sha1":"b06917b1ebc30f0458ba726ff8229ea5e25c8768","sha256":"fcdb860688394376ce17be5be3e1d368cec5ef181f12cd8258811a4f7af9c48b","sha512":"ec3be7f2b8001ea6a2ccb4ccb41890b515919cc84c4ca2234ddf98aa93d36b85f1a86b9ab6360ebb80e049fc8c0c93eadb612f78c70314e3a4cdc9afd0918ca4","ssdeep":"6144:ky5dK+BgQ79wCTa60TAsvVqiHHxHgk2x7aVOutx+gY3:PgC9wbwimRaVOutY3","tlshash":"0de406c97785b0224387a166503f040bf2399999740d905cb299eced7cbdd8ea277f3a","size":672553,"data":"","first_seen":"2025-07-31T12:46:08.97107Z","last_seen":"2025-08-04T09:49:07.628646Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/1c4b7667/s/widgets/v4/MobileSlider/main.0fba9d28cca20124c90c.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2809d3210a4f05a662f30c211a0de4b6","sha1":"a6bd701addda72e16076456d7596ccdfdafac67f","sha256":"a03c004564a2a28f9e8f0945d0fa6ed2409603d5e391d0d6b84ed23b47270df2","sha512":"94e98ff8eb57cc3259bfd15db81064e3784caf3461a3eaeebddf1baae9d5d33e7274030a9f6d52a1443b0c251a54834ab5520de70e7a89fbfb29356b9f64c577","ssdeep":"6144:BOuPpu9nYakGXDyw+U3/V64eJwGu5ydA17DcbqB:wnYAZlwsh7Iu","tlshash":"10e4f6cd7785b0224387a166503f040bb2399995740e805cf299eced79bdd8ea277f3a","size":678960,"data":"","first_seen":"2025-07-31T12:46:09.009691Z","last_seen":"2025-08-03T14:51:00.722733Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ourdreamstaticpages.pages.dev/adnium/fapello-desktop-300x250-general","fqdn":"ourdreamstaticpages.pages.dev","domain":"ourdreamstaticpages.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4e3c3671b0fd27c7f5f948023a48a8e","sha1":"958de47c4356dc9aeeb13a64ede52709f1faeb5c","sha256":"25aac9725fa074cb5f379bac0fa3d3719f892b6621482bc7d2a0535218547e35","sha512":"d4e65badc326b315d40333d74ec9bcef72d6b7df4d31b69505c52c2612104e9d0f4fad4d45a43efaf5e0f244f2484582003d15a1d63001ec19cebc5f8e84a2bd","ssdeep":"","tlshash":"d311592bb9b624309937716e7f0fb245713b46071508de457d5ec7858f24d184c25ac5","size":1010,"data":"","first_seen":"2025-07-28T19:48:03.885324Z","last_seen":"2025-08-13T09:03:40.314296Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fapello.com/assets/js/jquery-3.3.1.min.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/js/jquery-3.3.1.min.js HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 967f949598ff5687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:12 GMT\r\netag: \"61795c98-1538f\"\r\nexpires: Sat, 02 Aug 2025 06:09:44 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 480777\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T21:41:41.884125Z","times_seen":118253,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/js/uikit.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/js/uikit.js HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 967f9495a90f5687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:12 GMT\r\netag: W/\"61795c98-53365\"\r\nexpires: Fri, 01 Aug 2025 19:03:34 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 520747\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340837,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f28b7b2e4bbb5e71c210fe708432c8c4","sha1":"28f0a78686163398a48beba73df2e6e807309abe","sha256":"db8c7d69ddd3412a9f467b5a3a34cac6970301aa5f6aedd6d28e7b6948546901","sha512":"f891f320b182d49818c8171e2376f9030fd785ed35fcda9069e05a2fafbab5305b0e5e63f76bbba6653ba1db93dd043db2beaaf92af10054faade9e8e138ee26","ssdeep":"6144:309EaigthxiCKie8Kob+NUPsPM78sxsJJTFwyh/4SEEWk3gfsBtK:309EaigthxiCKiZb5h78j/Fgfsu","tlshash":"d074504dbaf73096a623713d8bef8009b1798447080ade14bd5c92d45fa093856bbff9","first_seen":"2023-03-08T04:57:24Z","last_seen":"2026-04-04T20:33:02.508019Z","times_seen":310,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/lg.php?bannerid=1677\u0026campaignid=1582\u0026zoneid=155\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=42a1b941e2","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=155\u0026cb=INSERT_RANDOM_NUMBER_HERE","date":"2025-07-31T19:42:43.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/lg.php?bannerid=1677\u0026campaignid=1582\u0026zoneid=155\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=42a1b941e2 HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=155\u0026cb=INSERT_RANDOM_NUMBER_HERE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: image/gif\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nset-cookie: OAID=7096b4828292dc697ddba59518981b7c; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-04T20:36:15.824315Z","times_seen":96418,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/90975717_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/90975717_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7410\r\netag: \"e74baf15dd357f368d8282f89ffdc5a3\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:06 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 16\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58795697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e74baf15dd357f368d8282f89ffdc5a3","sha1":"68c27c43fd63d5758f2707d2c52580ddd3948fe3","sha256":"74bfb37cacc20987cfc5d01499a642d7e54e5013b928e15db4bd6fe2eb90036d","sha512":"a93af18feedfbaf4a8541fae2cad908216f8aa1c69ce52914e00ad0dd525d07347860a91f25952aee64e23a542ca6755502032cbeae0e724ece2fe437074f549","ssdeep":"192:0b0DB1DJVHjQLRfiJo4pkHiAq8UFd3UlbwWW0eqhbT/cJvB:j9FJVHc1fGNAyf3iwWW0eQT/cj","tlshash":"cde1adbe6adad0c58d7156e832a85fe55897a8674103e0b8fbf380fd145280ee72251e","first_seen":"2025-07-31T19:43:34.684066Z","last_seen":"2025-07-31T19:43:37.432401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/lg.php?bannerid=1678\u0026campaignid=1583\u0026zoneid=156\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=d6936ce71c","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=156","date":"2025-07-31T19:42:43.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/lg.php?bannerid=1678\u0026campaignid=1583\u0026zoneid=156\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=d6936ce71c HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=156\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: image/gif\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nset-cookie: OAID=460836a973d78fea0f033ff0df7959fe; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-04T20:36:15.824315Z","times_seen":96418,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/abc.gif?userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026animation=no\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=9\u0026segment=hls-oldAPI\u0026landing=WidgetV4MobileSlider\u0026referrer=https%3A%2F%2Fwww.adxserve.com%2F\u0026i=0\u0026abTest=widgetv4mobileslider_puvssh\u0026abTestVariant=widgetv4mobileslider_puvssh_pu_26\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1099%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A729%2C%22duration%22%3A75%2C%22transferSize%22%3A3709%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A730%2C%22duration%22%3A97%2C%22transferSize%22%3A182043%7D%5D\u0026mh=988442825","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 20:50:09 GMT","end":"Tue, 14 Oct 2025 21:50:07 GMT"},"fingerprint":{"sha1":"CF:DE:7B:6C:80:79:C6:1C:F4:52:A6:C4:64:E2:01:C8:83:24:CB:1F","sha256":"3E:CC:EA:51:2F:4A:4A:97:3A:0A:24:7E:EE:A6:51:6C:20:4A:F3:74:59:ED:83:04:7A:8A:0E:E9:C0:DE:3D:C4"}}},"request":{"raw":"GET /abc.gif?userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026animation=no\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=9\u0026segment=hls-oldAPI\u0026landing=WidgetV4MobileSlider\u0026referrer=https%3A%2F%2Fwww.adxserve.com%2F\u0026i=0\u0026abTest=widgetv4mobileslider_puvssh\u0026abTestVariant=widgetv4mobileslider_puvssh_pu_26\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1099%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A729%2C%22duration%22%3A75%2C%22transferSize%22%3A3709%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A730%2C%22duration%22%3A97%2C%22transferSize%22%3A182043%7D%5D\u0026mh=988442825 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94aebe487127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/lg.php?bannerid=1640\u0026campaignid=1550\u0026zoneid=151\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=1a8e771bf7","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=151\u0026cb=INSERT_RANDOM_NUMBER_HERE","date":"2025-07-31T19:42:43.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/lg.php?bannerid=1640\u0026campaignid=1550\u0026zoneid=151\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=1a8e771bf7 HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=151\u0026cb=INSERT_RANDOM_NUMBER_HERE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: image/gif\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nset-cookie: OAID=54ee16efab7b81926f4915c40abc162d; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-04T20:36:15.824315Z","times_seen":96418,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/app/domain-checker/get-check","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94abcb1a568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d7565e70333db6da782de6f3a4d706c","sha1":"a2930f2eeb7ea64d6cee9009d4fd95b2c3cd143e","sha256":"98f904d3de79a3454b58afdbc943187eb7c3db8358a6e9a620499deb63a687be","sha512":"40b97a5bb6487a93a18f21f66a6d9b58a20810b139999ef7c3bddf4736042dad8645f0094e2480c8a470efe665f9c02b958301e9166011b89613a181acd9a487","ssdeep":"","tlshash":"55d02267410cb103c0c4c1d03e3f6684680428a10d018cf08f8d20acc0dc2340c33a20","first_seen":"2025-07-31T19:43:34.695472Z","last_seen":"2025-07-31T19:43:34.695472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":95,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/163031604_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/163031604_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11116\r\netag: \"15c6e02b3367324bd6d1f773d00ced7d\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:35 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 0\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94afb93d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15c6e02b3367324bd6d1f773d00ced7d","sha1":"6119bbacd6004117865b646e3fa1439a505f6579","sha256":"121468b287c7f93c80161e4490aad131cadbffee2406903033031737128c847d","sha512":"a01b9d93d09905e3d511165f65d85920f5bcbe206d9487d4ede792b20ba9885d9bc847a808b46b7658f8e286a85125a481e25d62b0178c1937487b97282f8321","ssdeep":"192:sa7MPICBy0cIVapCYZZJvGGVhw6ILsbymkIE/47xsKyk/mWxqyomjn31:/MPIZaYZTvGghwJwy1P47DuHmj31","tlshash":"a432bee4fcf7009e06ff3db8aee3a4ad81017891c9554e7cf22ef731868e0524a1491a","first_seen":"2025-07-31T19:43:34.699126Z","last_seen":"2025-07-31T19:43:37.332531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/favicon/apple-touch-icon.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:43.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nCookie: _ga_W0QKNEZ1J9=GS2.1.s1753990962$o1$g0$t1753990962$j60$l0$h0; _ga=GA1.1.476052009.1753990963\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 9390\r\ncf-ray: 967f94a01a545687-OSL\r\nlast-modified: Tue, 09 Nov 2021 12:34:03 GMT\r\netag: \"618a6abb-24ae\"\r\nexpires: Thu, 07 Aug 2025 04:21:12 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 55290\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"957d92cc6d458b180c68ac70fd264640","sha1":"4bd14efa78c5a0359d14da6b5d52c39695bea686","sha256":"502f85f1826889eb2d0bf6a86b2d5f98e17fc176c85da2136d602cee6208b251","sha512":"e06665eeaaab5559c65e93a15bfc2169e6c7a11dc1ddb0789699d1f39a08265b5cb4485b7e2a0aab0742423c53653623ca063a241cde2ab08ebceff0bd1e2b76","ssdeep":"192:K1SN/9GHzfe/Q5eVkRaKvMRftDKLRmAZtVF9Q6KrLbanfyzYXXWmL5qtO:jZcHzfeYIVkRdMnORXZHFHksjOk","tlshash":"cb12aec818d011d56a6f1743376392c8aef472cc79160558efc6d1ddcaa93bee2ad24c","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.485274Z","times_seen":270,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/lg.php?bannerid=1641\u0026campaignid=1551\u0026zoneid=152\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=0c73ab0018","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=152\u0026cb=INSERT_RANDOM_NUMBER_HERE","date":"2025-07-31T19:42:43.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/lg.php?bannerid=1641\u0026campaignid=1551\u0026zoneid=152\u0026loc=https%3A%2F%2Fwww.adxserve.com\u0026cb=0c73ab0018 HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=152\u0026cb=INSERT_RANDOM_NUMBER_HERE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: image/gif\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nset-cookie: OAID=fce8d153a723cf653e7e5046bf8266e2; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-04T20:36:15.824315Z","times_seen":96418,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990680/211645473_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990680/211645473_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9954\r\netag: \"28e225c10bb3152af7624c6ab212f67b\"\r\nlast-modified: Thu, 31 Jul 2025 19:37:49 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 267\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58605697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28e225c10bb3152af7624c6ab212f67b","sha1":"8395268fb728969e8edf872cbf67614dc55ebae4","sha256":"a5c2cfe073ebdcb455dac6fc40940cacd12b64bde7ebab17034386c9f52d0098","sha512":"91607427c9a74a7bb4a0234718d66ab0af88250aa6488f299ce9fee1b864fc63247a5e7064cc2e0349bd9faaefc9f88a59fe7a820e5e483413097f4635777bc6","ssdeep":"192:aQEykSEhqcfMJtb/NpQBRXAXVsHtKDAPFTVtT6ei/5LkGR8WlXQY:ZRlc4/uRX0CtKDA9BtmeC5wGRJXQY","tlshash":"4222bfef1fa58af25c9cb51891579df75c4f318096fcc0b6396805a069a0b808b9a3d2","first_seen":"2025-07-31T19:43:34.705787Z","last_seen":"2025-07-31T19:43:37.550448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990410/191805809_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990410/191805809_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6850\r\netag: \"cbac2d639422777296bdf5cc07f7c336\"\r\nlast-modified: Thu, 31 Jul 2025 19:33:40 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 517\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58675697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cbac2d639422777296bdf5cc07f7c336","sha1":"ab758021f661e53b6e83cf5b6227449b6a2eb5c1","sha256":"8767abee614420b6e6b7fec86e8ac509b80e6f9b8936f9b81bf5272017ed6e98","sha512":"c0f3baaaebbef1d40cdb77710ec3a05ce6868335f2513b9e2668d6906134f7ea250821400b322f5367413737f7b3c4ed3c9c57070cf40a3b80b021f75e1e435d","ssdeep":"96:tny4JCeNYHdIBUl8PrIrIfg815+TbUV2KxIIslTXX+Did8rp+U4oKvoyzlvY:E44e7BiCIEY05f2kIIs6Dix7nzJY","tlshash":"25e18eabacc78166581478857b10bbf1305e35ba987def16e8c2be45f0cd9a30cd6815","first_seen":"2025-07-31T19:43:34.70896Z","last_seen":"2025-07-31T19:43:37.574617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/app/domain-checker/get-check","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 20:50:09 GMT","end":"Tue, 14 Oct 2025 21:50:07 GMT"},"fingerprint":{"sha1":"CF:DE:7B:6C:80:79:C6:1C:F4:52:A6:C4:64:E2:01:C8:83:24:CB:1F","sha256":"3E:CC:EA:51:2F:4A:4A:97:3A:0A:24:7E:EE:A6:51:6C:20:4A:F3:74:59:ED:83:04:7A:8A:0E:E9:C0:DE:3D:C4"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94abc99a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fac52f58923559e52a5c02fb5e70ae52","sha1":"1152b653978ee11a891a7333e42dd2af58d14318","sha256":"dabff2495df38a25116ad03500cb3ba4c27cb5eec6fb25b76082f0df63736fdf","sha512":"5f58e790384500db19f174618126d6ccd1aed3f26e72ef6dbb07ac23390308f8ec6104967ade743054293774835ecd694519bd7ce3ca66153d3316040e1fa505","ssdeep":"","tlshash":"5bd02257800cb043c0c8c5c43e3fb688381561a10d015de0cf9f789ed0c8a340863b51","first_seen":"2025-07-31T19:43:34.713999Z","last_seen":"2025-07-31T19:43:34.713999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhvideo.sacdnssedge.com/checkUrl","fqdn":"xhvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1188466785.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 14:28:45 GMT","end":"Tue, 30 Sep 2025 14:28:44 GMT"},"fingerprint":{"sha1":"F3:75:DF:94:82:EE:05:F3:1A:65:02:6B:3B:BC:25:9C:07:FA:06:01","sha256":"CF:85:08:D7:17:CC:DF:E4:E3:12:21:B6:9D:38:BC:7E:E4:D5:7C:51:AE:A4:5D:2C:A3:6F:A3:6F:C6:95:3F:97"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: xhvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: text/plain\r\ncontent-length: 15\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 963af050dea8d358-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3lPsKAAgBT3/TDwGB\r\nx-77-nzt-ray: db5cda09f5a64ad335c78b68100dc329\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nx-77-age: 719764\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-04-04T20:33:02.413243Z","times_seen":7514,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":57,"connect":21,"send":0,"wait":11,"receive":1,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/app/domain-checker/check-result","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:46.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 241\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 31 Jul 2025 19:42:46 GMT\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94b50afa568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/y/u/yungstanley/1000/yungstanley_0004.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/y/u/yungstanley/1000/yungstanley_0004.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9993\r\ncf-ray: 967f9495c9545687-OSL\r\nlast-modified: Mon, 27 Jan 2025 21:48:03 GMT\r\netag: \"6797ff13-2709\"\r\nexpires: Wed, 06 Aug 2025 14:52:14 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 103827\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9993,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=[*0*], xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x300, components 3","md5":"997aeead20ccad55184207b09dd1fc9b","sha1":"ea98882d0d6d199e4c12756fb534d74839011742","sha256":"7783cdc8598abda6f24bfa2df55a773d001f97082f8ad9e4a22936885cf689d4","sha512":"22431f366f24c7fe1691de21dbccbe2432e12cc99a4f7669c7436847a81abed397f86f0412d77061b81dd632a2eb00f43ea695b473fc96833be204019a584933","ssdeep":"192:dHs1hMH2k0aGyseOM/X3Tp17TJZnA4kvRg0P/SPCqgJ+BzzyuyViOp+xrc1ASn:Gv7raGhYl9JZA4kZSaqzvyuEn","tlshash":"db22b07433bee900dbd0cfb7e60be7909b96d765da099b2d2c54100a4b74097aa2441a","first_seen":"2025-07-31T19:43:34.719999Z","last_seen":"2025-07-31T19:43:34.719999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/main.df51cea83c3bfe94c814.js","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/Universal/main.df51cea83c3bfe94c814.js HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DWUJa5lY04zEWZ3n%2BVKXLMqng5AXjyJXYxoFDrYgJAVLmTu3OujKJ0w%2B3t6eTclNeEPM%2B8GbuaZXFE1Cn%2FUFmh9KoajUq7XJwPVAHrH9Kc1gde9VmvYqjsMQ3ymxOZ%2BIf3O3U3Cj4%2FA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.df51cea83c3bfe94c814.js\"\r\netag: W/\"ed0122b73e6d996aa938a2826c6bd5f7\"\r\nlast-modified: Thu, 31 Jul 2025 11:25:51 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a59ef37130-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2311\u0026min_rtt=547\u0026rtt_var=2529\u0026sent=119\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=119938\u0026recv_bytes=5168\u0026delivery_rate=17060712\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=35478\u0026unsent_bytes=0\u0026cid=c06699bab01f66cc\u0026ts=348\u0026inflight_dur=37\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":672553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50688), with NEL line terminators","md5":"ed0122b73e6d996aa938a2826c6bd5f7","sha1":"b06917b1ebc30f0458ba726ff8229ea5e25c8768","sha256":"fcdb860688394376ce17be5be3e1d368cec5ef181f12cd8258811a4f7af9c48b","sha512":"ec3be7f2b8001ea6a2ccb4ccb41890b515919cc84c4ca2234ddf98aa93d36b85f1a86b9ab6360ebb80e049fc8c0c93eadb612f78c70314e3a4cdc9afd0918ca4","ssdeep":"6144:ky5dK+BgQ79wCTa60TAsvVqiHHxHgk2x7aVOutx+gY3:PgC9wbwimRaVOutY3","tlshash":"0de406c97785b0224387a166503f040bf2399999740d905cb299eced7cbdd8ea277f3a","first_seen":"2025-07-31T12:46:08.97107Z","last_seen":"2025-08-04T09:49:07.628646Z","times_seen":27,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:14:20 GMT\r\nexpires: Fri, 31 Jul 2026 10:14:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 34105\r\nlast-modified: Thu, 29 May 2025 20:13:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T20:33:02.404434Z","times_seen":6276,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/80997668_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/80997668_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14396\r\netag: \"bace956b15f9933633e80928ce65a1e4\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:38 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 7\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af78c05697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bace956b15f9933633e80928ce65a1e4","sha1":"21fdb602d92edc8241cb7d08184da0c3a7532816","sha256":"b07497a0aae048a38674d9b81095c46025663403dfbd4bf49aeffb2bd287114f","sha512":"692d51bd2829d7bf16680e3479160712f00c40aa931a41d0911c2db7e2a904dcaa51e49cdae5287144fad1a67493aa1edb37537fcdf92bde115cf1088ee0681f","ssdeep":"384:QqfbqGKGGX+dI5o13F274vGeIP7YDNL8X+4yXBg:+kGco4USL8Xbl","tlshash":"3e52c015038da48672f0a6cb7267772832ac11197a5d79693fdfe4d8332eb194df0631","first_seen":"2025-07-31T19:43:34.732501Z","last_seen":"2025-07-31T19:43:37.458087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 31 Jul 2025 19:42:44 GMT\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"747973adfa31d87f40692214dd7788dd","sha1":"631b3a56337a49fc5cd5abfebebba25552bf940e","sha256":"b674e117906ed4a13b2a03294bbda09295a09a2fa05577f4912480ad186d5f82","sha512":"ef47e2b5008d15690ac6ec7b2bfa138b0a4f76b6800867cfc80551a06e1cc326a230eb07b04466d9dbe6ba422d9d5cd0cbb0391626bc67dc53e91ac9b76db1fb","ssdeep":"96:CYgFaTyYgFaSFZfYgFawYgFakLYgFar3YgFaKYgFaCJc+uDYgFaKNTOFa3yOFajB:XHTnH7HRHk0HrIH/HKVHe3Ij67ZB1dcT","tlshash":"45b178a1041bd4809a870cc237cfbd2aae4e61997445d1baaffe48dcacd6c639354b1d","first_seen":"2025-06-08T13:05:40.586172Z","last_seen":"2025-09-08T22:46:49.870011Z","times_seen":403,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/api/models?landing=WidgetV4Universal\u0026tag=girls\u0026language=en\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=NaN","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls\u0026language=en\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=NaN HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 31 Jul 2025 19:42:45 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94ab9ad0568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14987,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5c07cdc6afbbecae181f1e92a3a2025","sha1":"5e584f2b319187654d3fef2c3e31a24f7917d44c","sha256":"e97ac068b2669550a7634d31a867186beeed55bccbedcd8431fe2cd1ad416534","sha512":"4a1a9898e5c6fe7e7828ffe8ae0746daa40be075e2c4e6b311e9bf10c249a7fe3774cc1c0dc0764db1d6d79c5cdc629122f3ddf2cb780f7524a5df0b02e9608f","ssdeep":"384:O/PtzazBzdMdtzyzJzxZ6tzVzgzhK3tzxzszraGtz9z4zmcpzczbzQOhtzRzMzey:O/PtO1udtO176tBc03tNoCGth8dpQ/FO","tlshash":"5a6240f752cc0dab0f4a22cccc8d750cd997292765d9b395868f4f4b16b6dda3128a23","first_seen":"2025-07-31T19:43:34.737985Z","last_seen":"2025-07-31T19:43:37.436683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/149092324_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/149092324_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15280\r\netag: \"a018f8b6d4ee2a4250f29781668f9760\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:37 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 11\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af48565697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a018f8b6d4ee2a4250f29781668f9760","sha1":"eea80ccf90a4b3b6b8708ec378c77f9442a820f6","sha256":"995d8e2fefe213bbf2c1fcda871f668692c88b7a9ad8abf8ada81113ecf03695","sha512":"6637124cb38ad30a344276dc28b0c360c7bfd4af2d374e4844e8caa62eb79179d094feef180f5e91fb53321fbe642c324e3e239b3d32ed7f0b17f30e822b2f0a","ssdeep":"384:PGMXDDlEeMm4GuKsv90Onw3RG5BvpeYm9zKHy:++DDGe/9SV0RBeBePEHy","tlshash":"1a62d0858d781eebbd7f58bd2f097e4c195313b07589a05b5a9c1f3128e85e04e8c0be","first_seen":"2025-07-31T19:43:34.74092Z","last_seen":"2025-07-31T19:43:37.336185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":157,"dns":33,"connect":2,"send":0,"wait":40,"receive":5,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/app/domain-checker/check-result","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:46.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 20:50:09 GMT","end":"Tue, 14 Oct 2025 21:50:07 GMT"},"fingerprint":{"sha1":"CF:DE:7B:6C:80:79:C6:1C:F4:52:A6:C4:64:E2:01:C8:83:24:CB:1F","sha256":"3E:CC:EA:51:2F:4A:4A:97:3A:0A:24:7E:EE:A6:51:6C:20:4A:F3:74:59:ED:83:04:7A:8A:0E:E9:C0:DE:3D:C4"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 241\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 31 Jul 2025 19:42:46 GMT\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94b578667127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/css/style.css","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: text/css\r\ncf-ray: 967f9495b9255687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:09 GMT\r\netag: \"61795c95-e4e2\"\r\nexpires: Thu, 07 Aug 2025 04:19:19 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 55402\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dd277a98794da185d1471f43cd48403b","sha1":"bf556b8486a7c2b1fe41be064ae991065a9e4a7f","sha256":"0f571ea683ff1256444d7e0fa87f9c926ce900c43c143b0ed447843a053398ed","sha512":"7494753c39f566d8f4257cf596ac9a63caacb698394cd68ab77ddc91e989e470534ea0d9c273333efdd4e0e10bf810dac45b44d6122b16deccf1cb19fa2b0252","ssdeep":"768:IM6+SF3CFv1B7HX0XVF6FdTFdLYZG4FBtF1LFCF4sFz:7S0Y8f3LYc4Tt3cCsd","tlshash":"074384a65ea11a00742bc45c57c2af66f37c4013a50eccbd7ade200cefc67d8959e79a","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.432127Z","times_seen":323,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/1c4b7667/s/widgets/v4/MobileSlider/main.0fba9d28cca20124c90c.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:44.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 00:12:35 GMT","end":"Thu, 09 Oct 2025 01:11:05 GMT"},"fingerprint":{"sha1":"BB:65:94:D3:F1:02:00:EA:78:B1:21:8E:9E:C5:81:8F:06:96:49:30","sha256":"6E:F0:4C:A9:29:43:4B:B6:04:4D:7E:62:D0:88:BC:CE:FE:EC:42:A0:DE:83:AE:6D:9D:F2:F8:99:61:F5:61:60"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/MobileSlider/main.0fba9d28cca20124c90c.js HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LoLbNZZ9YHgRWzhUs1iUHBPmTx917zdPQAm60z8ccBe4BmF5G0QsjHxUqu0Pkrkx4HGkBIog7QixXS3pt%2BCrnpTUwLnZo78z6JW6vIeYIe1feYctg9wA8pNfwCa1Qd0xC952UPBOtEQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0fba9d28cca20124c90c.js\"\r\netag: W/\"2809d3210a4f05a662f30c211a0de4b6\"\r\nlast-modified: Thu, 31 Jul 2025 11:26:01 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nage: 782\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a79adab517-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=21371\u0026min_rtt=4888\u0026rtt_var=12164\u0026sent=21\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=5551\u0026recv_bytes=2441\u0026delivery_rate=110763\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18057\u0026unsent_bytes=0\u0026cid=0e5252d4e919256c\u0026ts=457\u0026inflight_dur=83\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678960,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50688), with NEL line terminators","md5":"43cca19d6839c1b4d98d77a85e2c917b","sha1":"5a8ee886b8e14cc83c3c42e5aae34b56c76af61a","sha256":"2e08a22b896e0bf1ef812bc7e3dd284fde2e58fe70941e9306e48f9bcef19e67","sha512":"f2fcf616773e98d6249bf88acedb32b65eb6accbd1cf13bf97b2a902b86a48669085ccc20f6a5782ab8991698b669ef17a8e9546c54e875db63ec1ba14b4ad5a","ssdeep":"6144:BOuPpu9nYakGXDyV+U3/V64eJwGu5ydA17DcbqB:wnYAMlwsh7Iu","tlshash":"4de4f6cd7785b0224387a166503f050bb2399995640e805cf299eced7cbdd8ea277f3a","first_seen":"2025-07-31T19:43:34.746257Z","last_seen":"2025-07-31T19:43:34.746257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/app/domain-checker/get-check","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94abaae3568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990740/80997668_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990740/80997668_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12884\r\netag: \"0905ca65999f0ae1b46f5d1647d1798b\"\r\nlast-modified: Thu, 31 Jul 2025 19:37:38 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 189\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af586f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0905ca65999f0ae1b46f5d1647d1798b","sha1":"5852b951c9e98991ef4a1e06b68d0f93231ae22f","sha256":"43ebc59f0e65ded844cfad824262d4b72c8eb6671a0df07a170ea49db6057549","sha512":"b60029d352b8faec82d0e593b1821073f75352f4b98979a39879a1c32bd4b72974eee0d6d7bf1b3a0eff6e565bbc7eb377c0082ad8ae248760c2403edcf0edd1","ssdeep":"384:QNZSvEvz1i/HHd78nayUFL7oLfcgRg9MlCmQcV:ZvEvzQHHd78aysL7oLfc/elh","tlshash":"4e42c007366438d8bff23f5914dd3a7326394c6a2d6d1db61cca0486b638517f86a613","first_seen":"2025-07-31T19:43:34.74954Z","last_seen":"2025-07-31T19:43:37.483007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/afr.php?zoneid=151\u0026cb=INSERT_RANDOM_NUMBER_HERE","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:43.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/afr.php?zoneid=151\u0026cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 819\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: OAID=2b1b10053ade915146abb8d688dee516; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (982)","md5":"17929aa8708c3985afe0f2e7c340109d","sha1":"d1e323e6a47bb780cee8ccd906ebb415e9a902fa","sha256":"343d21d39f64fd5fcd1216bc6a2e77b1001ba586ed60a36c471047873d577b41","sha512":"4e99bf8345b947c06ee8d5711a378e3bb5a3fc3482b28ec58f84561a71ad248b60560c9fcbdf1be3a621bca870482371615b805d85ab695a455557e2d32cdd1a","ssdeep":"","tlshash":"9b2166855196e10bd893a504e0e20668d91b928e9e406e88fb33a1bbd0ce8569871bfd","first_seen":"2025-07-31T19:43:34.752922Z","last_seen":"2025-07-31T19:43:34.752922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":227,"dns":72,"connect":20,"send":0,"wait":128,"receive":1,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763","fqdn":"a.bestcontentflight.top","domain":"bestcontentflight.top","tld":"top"},"ip":{"addr":"172.67.212.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=156","date":"2025-07-31T19:42:43.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bestcontentflight.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 17:20:14 GMT","end":"Fri, 12 Sep 2025 18:18:48 GMT"},"fingerprint":{"sha1":"5C:24:5D:D2:6F:06:BE:2A:6C:D2:64:DC:67:9B:92:EA:7D:C7:82:FB","sha256":"19:23:88:03:F5:1C:34:CC:53:58:60:6D:66:3C:60:60:D3:69:DB:20:C4:43:FC:9E:BB:05:15:18:A0:CD:CA:81"}}},"request":{"raw":"GET /loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763 HTTP/1.1\r\nHost: a.bestcontentflight.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Sun, 17 May 1998 03:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujFIdjkK4X0%2BGdLvG4xTkwCeFT2643VRmvUrYawbfaDiYS6DGSPT2eE0xod2dqN2JBGyfffEPg3YTaH7DP2lgBof73SvTdyIVvyUY9SqkbV21UlAXw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 967f94a34987b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2669,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5dcc42d1984833fdcd13e413219e2baa","sha1":"f52dfc44aecfcdcca573c04f2bb3d99eebf0da4c","sha256":"7c4056636b48dccbbd7c910ccf5ef4914fffa7c1843636f0fd43f72a9bd7d6b4","sha512":"4fd430bce6bb6b6e2b9f417a0b895640bbbc32ab8718ca0080c4c55e3077b491f0c6fbc7d7e0fda1852df3d57a4a2f0f6f7ab4876f36a77ff53fb8e0bf13fa6e","ssdeep":"","tlshash":"e551b673659225256033ea55b7e6e7ca71b18003f9438578b2ed9261cf4f9db0052709","first_seen":"2025-07-31T19:43:34.756281Z","last_seen":"2025-07-31T19:43:34.756281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":66,"dns":22,"connect":1,"send":0,"wait":163,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:44.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 31 Jul 2025 19:42:44 GMT\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"747973adfa31d87f40692214dd7788dd","sha1":"631b3a56337a49fc5cd5abfebebba25552bf940e","sha256":"b674e117906ed4a13b2a03294bbda09295a09a2fa05577f4912480ad186d5f82","sha512":"ef47e2b5008d15690ac6ec7b2bfa138b0a4f76b6800867cfc80551a06e1cc326a230eb07b04466d9dbe6ba422d9d5cd0cbb0391626bc67dc53e91ac9b76db1fb","ssdeep":"96:CYgFaTyYgFaSFZfYgFawYgFakLYgFar3YgFaKYgFaCJc+uDYgFaKNTOFa3yOFajB:XHTnH7HRHk0HrIH/HKVHe3Ij67ZB1dcT","tlshash":"45b178a1041bd4809a870cc237cfbd2aae4e61997445d1baaffe48dcacd6c639354b1d","first_seen":"2025-06-08T13:05:40.586172Z","last_seen":"2025-09-08T22:46:49.870011Z","times_seen":403,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:46.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:14:20 GMT\r\nexpires: Fri, 31 Jul 2026 10:14:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 34105\r\nlast-modified: Thu, 29 May 2025 20:13:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T20:33:02.404434Z","times_seen":6276,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/css/tailwind-dark.css","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/css/tailwind-dark.css HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: text/css\r\ncf-ray: 967f9495b9275687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:15 GMT\r\netag: \"61795c9b-497f46\"\r\nexpires: Thu, 07 Aug 2025 02:09:28 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 63193\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4816710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"74be854591781d81d980b8ecfda1dff0","sha1":"216d4e7fb1b1df568dc302d687bf10acb5b946e3","sha256":"3e2c7f5a222aa2f17501bb53f40615f2b101da57774c38f79281ece21116e0f3","sha512":"a5e064a6815bc4b8d9bab1be62614817646410d4976485f0b2ed0316c1cc0481a83f5b89ac590f5de03c5080b0b309324e7aef7217b7f14cddf08544c6b605ce","ssdeep":"24576:Vyx+oaim24KiuweQg4guww1c4UsNmEvSaQZE4Hp8eMkMkGMEzSWCl24qC2GQCah:tNmEvSaQZE4HIS0","tlshash":"0f25d07ca2a02537ac97b0d9f14dfc6dcd1b52e8ee3816e76c51620897b17fbc982640","first_seen":"2025-07-28T19:48:03.846118Z","last_seen":"2026-04-04T20:33:02.481598Z","times_seen":260,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxsrver.com/KstJsPp.js","fqdn":"adxsrver.com","domain":"adxsrver.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxsrver.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:9F:04:3F:F8:93:2E:24:50:1D:EF:52:17:69:AA:86:A3:D9:05:32","sha256":"BE:95:EB:07:A8:A9:F7:F3:F5:58:9D:CB:BE:11:2C:B8:F3:4E:D2:64:9A:BF:FF:19:78:FB:84:10:9C:C7:36:AB"}}},"request":{"raw":"GET /KstJsPp.js HTTP/1.1\r\nHost: adxsrver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 33633\r\nlast-modified: Mon, 16 Dec 2024 09:10:40 GMT\r\netag: \"15980-6295f8decc400-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: LBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8e1a645519f97751a908f8d47e5a35e3","sha1":"60fe247a0eaa2b7786ab0b00e1c2df40a88266ee","sha256":"4b1616bca20bad45d5c3cf4dccb933b52f3f40d992ef7cb7258ff26c15d46b59","sha512":"019365818e6617c9a3c9120a02023a00f35df1d8d815012f96c20bec3827e081e06aed6715358d3ff497901bc083a41b0d65f0deef50c211014cef165ccfd7ff","ssdeep":"1536:ddIjOTAo5m/W9LuU1ASanHcBsSccOT+AWF0qyhn6NnO93vqDqf:IK7mH8sGFk6NnO93vZf","tlshash":"5483f95571833055a2a3d7b9403f714b98bdcc59984a4cf4bbb0cbd2ec640c6c8a7afa","first_seen":"2025-03-30T16:10:09.926862Z","last_seen":"2026-04-04T20:33:02.44039Z","times_seen":234,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":274,"dns":24,"connect":22,"send":0,"wait":133,"receive":50,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:42.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fapello.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:58:16 GMT\r\nexpires: Fri, 31 Jul 2026 10:58:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 31467\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T21:44:33.699005Z","times_seen":133462,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":146,"dns":0,"connect":21,"send":0,"wait":21,"receive":30,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/1c4b7667/s/widgets/v4/MobileSlider/main.b5d0cb7bf60d08347a2c.css","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:44.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 00:12:35 GMT","end":"Thu, 09 Oct 2025 01:11:05 GMT"},"fingerprint":{"sha1":"BB:65:94:D3:F1:02:00:EA:78:B1:21:8E:9E:C5:81:8F:06:96:49:30","sha256":"6E:F0:4C:A9:29:43:4B:B6:04:4D:7E:62:D0:88:BC:CE:FE:EC:42:A0:DE:83:AE:6D:9D:F2:F8:99:61:F5:61:60"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/MobileSlider/main.b5d0cb7bf60d08347a2c.css HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F1sn1WUyIuVLQugOYYhY5ycW2ME9DB%2Bd5Yl9n2hb1jLw6jD6ZijKpt0JR1GVEVl2jtY%2FlNKKFV1EGhMfUQmzhxw0A20xVmxSP4kHKBM%2BqtVGrL3KBtrHfG8BEUVXarH9d2%2B2XYfyQig%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.b5d0cb7bf60d08347a2c.css\"\r\netag: W/\"ee24de44d4269cf555b1e0d583ddf366\"\r\nlast-modified: Thu, 31 Jul 2025 11:26:01 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nage: 790\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a79ad9b517-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=21371\u0026min_rtt=4888\u0026rtt_var=12164\u0026sent=22\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=6386\u0026recv_bytes=2441\u0026delivery_rate=110763\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18057\u0026unsent_bytes=0\u0026cid=0e5252d4e919256c\u0026ts=458\u0026inflight_dur=83\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9377,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9377), with no line terminators","md5":"ee24de44d4269cf555b1e0d583ddf366","sha1":"c26850d6c80345a5434a38e050ffe499ebecde10","sha256":"71841595077e508cde7897d5285533113280b4910b629d0978203c0979edea9c","sha512":"be4eb22afe39ec47f38af4723c1a79e6d207f1f1713109800fa4e0cbabf3f48deb5b66f6298b33666602162d03773e077358201952cd355bf42b168b190ef98f","ssdeep":"96:9y1kct+zw0gAnJnj/XW26oyI8kAUrdTvyP4ba8SIleYMedI:o1VIuimoy6RZyJIleyI","tlshash":"a712a73355612318e41bdd2167e417da9264c02be16337fdd8927a26cbc7ac70fb628e","first_seen":"2025-07-28T19:48:03.818439Z","last_seen":"2025-08-13T09:03:40.260672Z","times_seen":46,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/149092324_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/149092324_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15280\r\netag: \"a018f8b6d4ee2a4250f29781668f9760\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:37 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 11\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af588d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a018f8b6d4ee2a4250f29781668f9760","sha1":"eea80ccf90a4b3b6b8708ec378c77f9442a820f6","sha256":"995d8e2fefe213bbf2c1fcda871f668692c88b7a9ad8abf8ada81113ecf03695","sha512":"6637124cb38ad30a344276dc28b0c360c7bfd4af2d374e4844e8caa62eb79179d094feef180f5e91fb53321fbe642c324e3e239b3d32ed7f0b17f30e822b2f0a","ssdeep":"384:PGMXDDlEeMm4GuKsv90Onw3RG5BvpeYm9zKHy:++DDGe/9SV0RBeBePEHy","tlshash":"1a62d0858d781eebbd7f58bd2f097e4c195313b07589a05b5a9c1f3128e85e04e8c0be","first_seen":"2025-07-31T19:43:34.74092Z","last_seen":"2025-07-31T19:43:37.336185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/css/icons.css","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/css/icons.css HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: text/css\r\ncf-ray: 967f9495a9195687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:09 GMT\r\netag: \"61795c95-190c3\"\r\nexpires: Sat, 02 Aug 2025 06:56:56 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 477944\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102595,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"59c90f25da37448564d98a64c6fec551","sha1":"7acb5ab97a4a46bad93d4f094a8050149f4d6d7b","sha256":"25ad6d78e34d5177266c94e26b031b3cab30ff0b561bfa7e70d98d5983f3d3f7","sha512":"cd80363651148aa6bba0150867fe2b4013ce33fc1e2058f08ced19e498ae1d3ecfea4f0c9524e7f38b851af49e33891413be191504f2c1a7799cc4c36b2fd43e","ssdeep":"768:CCkwTatzKOkxBh7Ncx5Kr2sctDFvluycDFmUnwZK:pkwTu8hMXtDNl5WwZK","tlshash":"3ca312e8dcfc0d900309e1d523d2f371fb09a2e59d4b4e66d2b3799ca1da24585c6aec","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.410506Z","times_seen":320,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/porndude.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/porndude.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1773\r\ncf-ray: 967f9495c94c5687-OSL\r\nlast-modified: Fri, 09 Dec 2022 11:05:03 GMT\r\netag: \"6393165f-6ed\"\r\nexpires: Thu, 31 Jul 2025 20:36:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 601545\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3e140b0deb503706f2ca3f44c0cb77e3","sha1":"93af8a65b50d9b75ebbd6d3feca08f6b4ced64a7","sha256":"197b3784126e6bfdcb4a22381193ca2d082f31128fa28c888c6a235aaa7f07aa","sha512":"744d18060db5e02c828e4296beee56be619e261e174ddc13e8025d31a0a2a5644a6fbbb056c0e9ef3a5ffb9820f6844a7752747d1912af291b838d20c2761c40","ssdeep":"","tlshash":"77312b9c94e4bf3cd201e15d252a2e88fda198a511e5c01bf68508bf8ff0513c224c6b","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.440969Z","times_seen":249,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ourdreamstaticpages.pages.dev/adnium/fapello-desktop-300x250-general.html","fqdn":"ourdreamstaticpages.pages.dev","domain":"ourdreamstaticpages.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763","date":"2025-07-31T19:42:44.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourdreamstaticpages.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 07:03:13 GMT","end":"Sun, 26 Oct 2025 08:00:45 GMT"},"fingerprint":{"sha1":"DA:62:B7:C6:22:D4:F2:87:34:F8:5B:82:B1:0B:E2:A0:DF:0D:CB:88","sha256":"9E:DA:C9:59:71:55:FC:4F:55:C4:49:58:D2:9A:C9:3D:C9:86:DE:38:95:14:DA:FC:E0:41:9D:D0:5D:D9:88:7F"}}},"request":{"raw":"GET /adnium/fapello-desktop-300x250-general.html HTTP/1.1\r\nHost: ourdreamstaticpages.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.bestcontentflight.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-length: 0\r\ncf-ray: 967f94a72ee65685-OSL\r\nlocation: /adnium/fapello-desktop-300x250-general\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=28BOsdCcn1VTapjIb4tzC%2B2zFXh4HIONdXBoqeVD2C%2B8ePD9GXnlCpzr85P2jK%2BnINNxgbeixVymt9m9GTd2tjlGrO2F%2FFD%2FYa6YyQMIrU37F1srns%2BBRU7MD2C8QdPBF%2BbUl8ktIfkVaU%2BbaP2Jkw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=629\u0026min_rtt=487\u0026rtt_var=324\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3251\u0026recv_bytes=1189\u0026delivery_rate=6532330\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=517071e5e285c0d4\u0026ts=82\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2677,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2cd8d1d5565c0c4eb6b7720de4aaa5d5","sha1":"cbaa8d59bafcaef4ef7d6eef53498530a95fa80f","sha256":"bb8fa95368abe9d1cae2b703d9b88df846c300dc2aa68739ef135e0570e11376","sha512":"826eeb198d5565cb9e260913a54d70b45d4f839028b16e5f7dc2484e3903bbd4c6efd6a3f3f01202735a9e3ad9453eae69d159a9f2169e6d389300a9ac3f41dc","ssdeep":"","tlshash":"bd51322b69f720309527a2793f97b249273795071685ce083f8ec7818f95a48cda7bc8","first_seen":"2025-07-28T19:48:03.81278Z","last_seen":"2025-08-10T05:16:11.309214Z","times_seen":40,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":19,"dns":20,"connect":1,"send":0,"wait":46,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/163031604_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/163031604_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11116\r\netag: \"15c6e02b3367324bd6d1f773d00ced7d\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:35 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af587e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15c6e02b3367324bd6d1f773d00ced7d","sha1":"6119bbacd6004117865b646e3fa1439a505f6579","sha256":"121468b287c7f93c80161e4490aad131cadbffee2406903033031737128c847d","sha512":"a01b9d93d09905e3d511165f65d85920f5bcbe206d9487d4ede792b20ba9885d9bc847a808b46b7658f8e286a85125a481e25d62b0178c1937487b97282f8321","ssdeep":"192:sa7MPICBy0cIVapCYZZJvGGVhw6ILsbymkIE/47xsKyk/mWxqyomjn31:/MPIZaYZTvGghwJwy1P47DuHmj31","tlshash":"a432bee4fcf7009e06ff3db8aee3a4ad81017891c9554e7cf22ef731868e0524a1491a","first_seen":"2025-07-31T19:43:34.699126Z","last_seen":"2025-07-31T19:43:37.332531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0003_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0003_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17874\r\ncf-ray: 967f9495e9a75687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:17 GMT\r\netag: \"6834b5cd-45d2\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x529, components 3","md5":"0d65ef1bf4969c9b3efb1d38a45fce2d","sha1":"f660fff4626b0f1f2ece2e6def83ccedcfc33fa0","sha256":"0b3ba0c08a9bd72c2e84e5bef0cc0f935118e8969eba68b906af7f554016b52d","sha512":"1482395c9dbe4877cd3ba6a2e8a73a17b7ea28b635bf2b32cf69e08d11f149eded29737f051a6f11bb8ebc7eafefb0bb78f495071224dd0e1ae97bb40089ee16","ssdeep":"384:kAUAVoISvkGbOG3yd7LR3dWgm46WKa8WVV6W4rQlYhQbIXBU60WQQm:7EKGbj307LR3fohlWGOlYh2IRD0Sm","tlshash":"6482dfd8348242e7571ed13639bf6e4cf156f6edae20af0fa01d2e1e00644899fa19dd","first_seen":"2025-07-31T19:43:34.776085Z","last_seen":"2025-07-31T19:43:37.46536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/favicon/favicon-16x16.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:43.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/favicon/favicon-16x16.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nCookie: _ga_W0QKNEZ1J9=GS2.1.s1753990962$o1$g0$t1753990962$j60$l0$h0; _ga=GA1.1.476052009.1753990963\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1600\r\ncf-ray: 967f94a01a555687-OSL\r\nlast-modified: Tue, 09 Nov 2021 12:34:04 GMT\r\netag: \"618a6abc-640\"\r\nexpires: Sat, 02 Aug 2025 05:52:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 481787\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"cb4a1fe2d36cac346ddfda8e1153c8dc","sha1":"1a7a86cd5d9cddde16fa10769599e9d40753d03d","sha256":"c04715bf6af127bad65c92a30b5d18aa4664c465ad70d1103e514f32f5a365ae","sha512":"1261eb5ab3929bbef72937a4f96a5e99bdf1b377617c874f698a351c25bbd9e2eedc6dabcb61630916f1c84fb1d450096673ead3374c2e358af940e6bdaa890c","ssdeep":"","tlshash":"dc31c8dc9f61cab1c42f05177815b348d639bd8463db29257375d0823529ec49662ba4","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.404927Z","times_seen":277,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxsrver.com/license.11.js","fqdn":"adxsrver.com","domain":"adxsrver.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxsrver.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:9F:04:3F:F8:93:2E:24:50:1D:EF:52:17:69:AA:86:A3:D9:05:32","sha256":"BE:95:EB:07:A8:A9:F7:F3:F5:58:9D:CB:BE:11:2C:B8:F3:4E:D2:64:9A:BF:FF:19:78:FB:84:10:9C:C7:36:AB"}}},"request":{"raw":"GET /license.11.js HTTP/1.1\r\nHost: adxsrver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 32690\r\nlast-modified: Thu, 10 Jul 2025 20:28:46 GMT\r\netag: \"19d4c-639990a598376-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: LBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a2061e8a0ddd64f2823f0ad6f769371d","sha1":"95baccf34e230e927b63c9276c59acb1a828e1ef","sha256":"ff9a23b23ffbbf995e5b42385a9012838aedc290f44ff851418be927b1b0db02","sha512":"efb57232aa6c3e7423cde3f4afe6d6a57ce735b1dee4439db9ebe4933c6cb0ce06b46a7150ac5403e6a5132a6a8527bb8c6e0a38ae2121d7e493e82f2f7fd9e8","ssdeep":"1536:nRY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCio2uJK:28Ovaclc1Hl8Z0mn5pg4oGRZX2uJK","tlshash":"53a35561710750d630e1d26d166ab3c12d795402f4298ca6fc21fb9fcaaed93419faf3","first_seen":"2025-07-11T22:36:43.289304Z","last_seen":"2026-04-04T20:33:02.5204Z","times_seen":181,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":272,"dns":25,"connect":22,"send":0,"wait":133,"receive":57,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ourdreamstaticpages.pages.dev/adnium/fapello-desktop-300x250-general","fqdn":"ourdreamstaticpages.pages.dev","domain":"ourdreamstaticpages.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763","date":"2025-07-31T19:42:44.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourdreamstaticpages.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 07:03:13 GMT","end":"Sun, 26 Oct 2025 08:00:45 GMT"},"fingerprint":{"sha1":"DA:62:B7:C6:22:D4:F2:87:34:F8:5B:82:B1:0B:E2:A0:DF:0D:CB:88","sha256":"9E:DA:C9:59:71:55:FC:4F:55:C4:49:58:D2:9A:C9:3D:C9:86:DE:38:95:14:DA:FC:E0:41:9D:D0:5D:D9:88:7F"}}},"request":{"raw":"GET /adnium/fapello-desktop-300x250-general HTTP/1.1\r\nHost: ourdreamstaticpages.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://a.bestcontentflight.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8dA0BBh0XV75w6h0HMYxQluZne67%2F4evv1Q%2FueChvwqqOozzQkPSgzVNumCIsTIR%2FJbFxE3QOA8bgh5cxPZF3gFEVrFduiWjoRFItjPrG%2FBDnhpXlusvM%2BFacn3zEmHj7Sg7MRrl%2BKRHygXHk3BPaA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94a7d8c30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5433\u0026min_rtt=5432\u0026rtt_var=2038\u0026sent=13\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4201\u0026recv_bytes=1287\u0026delivery_rate=568584\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=f3406e95d56fff4b\u0026ts=109\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2677,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2cd8d1d5565c0c4eb6b7720de4aaa5d5","sha1":"cbaa8d59bafcaef4ef7d6eef53498530a95fa80f","sha256":"bb8fa95368abe9d1cae2b703d9b88df846c300dc2aa68739ef135e0570e11376","sha512":"826eeb198d5565cb9e260913a54d70b45d4f839028b16e5f7dc2484e3903bbd4c6efd6a3f3f01202735a9e3ad9453eae69d159a9f2169e6d389300a9ac3f41dc","ssdeep":"","tlshash":"bd51322b69f720309527a2793f97b249273795071685ce083f8ec7818f95a48cda7bc8","first_seen":"2025-07-28T19:48:03.81278Z","last_seen":"2025-08-10T05:16:11.309214Z","times_seen":40,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/71220142_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/71220142_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17390\r\netag: \"321239685620bcc5ddd412fc0df3ba68\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:49 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 11\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58905697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"321239685620bcc5ddd412fc0df3ba68","sha1":"c31458412d88a2dff43f876190a067e816f518a9","sha256":"49f9ae088bb35464e6513f241509689d597c2b28ff433ffe42d01708237b9020","sha512":"92a6df9e4386040289b355240ddaec86d6ebcdddd5261f53daa4697268e0fa3c60696bae2770572252566c092917dd4d41d301f2f41474a0a4dc83eaeecb62d3","ssdeep":"384:hfjDPALNtFbeDKMjGZV48x5KJFodwN5CEgwlbcjm4voYxx:hfUvWCV48DwN5/g2gjmor","tlshash":"9072c0bf819b25c1d75802216ff5f379bc04c04fa8e9c2b20a6634a6351999079ffb1d","first_seen":"2025-07-31T19:43:34.784417Z","last_seen":"2025-07-31T19:43:37.56227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/187414071_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/187414071_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11964\r\netag: \"f7b75177b6b515684c99167631a6e653\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:50 GMT\r\nx-proxy-cache-orig: EXPIRED\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 25\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58895697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7b75177b6b515684c99167631a6e653","sha1":"20e44172234feb3abcfab25f1d5fd09123870130","sha256":"8773d3dac6faca10999ca1115f0b5386e27d11c0ac11355b0a153d826456ba86","sha512":"3ba5b23ac8789de786707ed9b8c0429a6ae8e5c9b78c59f87ecfb1db602f92962ae8ea6213e449142b81bad6b1e9d55958d182285ba08b964c6189b6d7e220a9","ssdeep":"192:Laqe0uCfyii+NjGv9RAA+lLfbCccU3wzFHACiGNtwwXdCqJE0R1+wIb+d:LaqnuiyiFNalRAA+lLfbCbRzaLotlXss","tlshash":"6032c0d9314059d660d9ffed0bb9fb24081795b20d1ccc1f8631ab423da462e34b9a3e","first_seen":"2025-07-31T19:43:34.791408Z","last_seen":"2025-07-31T19:43:37.512602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redir.me/?https://fapello.com/godessela/","fqdn":"redir.me","domain":"redir.me","tld":"me"},"ip":{"addr":"104.21.41.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-31T19:42:40.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redir.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 17:01:32 GMT","end":"Tue, 09 Sep 2025 18:00:12 GMT"},"fingerprint":{"sha1":"96:6C:A3:10:50:62:26:E8:A6:45:EE:A7:5B:27:6C:28:31:9D:E1:39","sha256":"68:72:DA:26:60:87:D0:20:35:A5:8B:B3:32:23:63:AE:BC:47:E4:9A:39:06:63:45:86:26:5D:65:56:22:90:1C"}}},"request":{"raw":"GET /?https://fapello.com/godessela/ HTTP/1.1\r\nHost: redir.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://fapello.com/godessela/\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\nexpires: Thu, 31 Jul 2025 19:43:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=89CCM6kFQcb5euW3WOjQqIoncOvNH7EWcPm%2BHwcGHayPC5MIgRwar1bnZdYQb074KHEzLOmBhb8zLgHtSOTn%2FoW%2FHB18Pg%3D%3D\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 967f94908fad0b49-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41789,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":35,"dns":8,"connect":3,"send":0,"wait":443,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-W0QKNEZ1J9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-W0QKNEZ1J9 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\nexpires: Thu, 31 Jul 2025 19:42:41 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 131553\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":387978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"2a0e4ce91c584d7d13e1701ce8c064b4","sha1":"203116ef070e664f41fc0ce05e8c04328e0d616b","sha256":"af4631403d32125745573ba77679aae717458f3e03097b56cc8811d7c589a0f1","sha512":"c2e147657bc293e1c5ffb027cd35f0bcf9aee3c10efec7b063129c69553a70acec41da20d64033dc695e1e25a0cb5000fc0a3dae37fc6c1095618dcbbe747906","ssdeep":"3072:bRQyeWKA8xwym06ojI/fz0ie38JGXbrunAIH1EMHsNKlKZtcRWaWU5Fjt2YwrTyX:ngvm02tHnCKlo9aWU5Fh2nrGwK4m","tlshash":"e68418cd73c6742693a6f478503f018ba57b29a2f45cc899b189cce42e74a9a0177f7c","first_seen":"2025-07-31T19:43:34.794672Z","last_seen":"2025-07-31T19:43:34.794672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":272,"dns":0,"connect":9,"send":0,"wait":26,"receive":24,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0005_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0005_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21802\r\ncf-ray: 967f9495e9a35687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:17 GMT\r\netag: \"6834b5cd-552a\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x531, components 3","md5":"0286423b800c8979cf7905f1d1b1cc1d","sha1":"ffe46d458dd8f8f3346b63a85c55ec4f92bf619e","sha256":"7ed058f3679ea8a4e64ed25f2a16d478dad09dd4fcb800e209a9e9475ecd9408","sha512":"823a09a76fb0011c65d184b257c2988e76f936a31b8fd562526b8e16782f357d21f77be1b9a6ea7e2a8c4c2e87063778be97f7cdb56b386eaa824217c008d15e","ssdeep":"384:FHcIfSEu6ip0XXPTIQhy/WmaDqhL/dN3Pr6lymX2uBKumAn9UzE5gqaL9:FHcIfSEpHPTIrTaDqhL/dN3Pul7XLKu4","tlshash":"f0a2e171d96f63e5c383ccb571b35586fb225120cc27cf3da2399b650e4989127e9b88","first_seen":"2025-07-31T19:43:34.798032Z","last_seen":"2025-07-31T19:43:37.497803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/afr.php?zoneid=155\u0026cb=INSERT_RANDOM_NUMBER_HERE","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:43.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/afr.php?zoneid=155\u0026cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 685\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: OAID=46cb72e38167c7065dba721d9ac6eea3; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (728)","md5":"12d000112022abe697342da71045a9cb","sha1":"b0626ebd4c00433bdc4739eda08037a5455f7b11","sha256":"0219551d8512a6fb0e11849bec21a857a25a77f6d9c2ecdc704666378054983d","sha512":"fa42f109ffbcbfc88ac0f3805fd83821c68f4fa00f60f2ce760115f92ee2ae32fddb6c33828e5d04808685608c7e47947310c6fef6da02e80bd360f9b3dfb9b3","ssdeep":"","tlshash":"e31130aa90da811dd893924450e507ace02bdacdae414ee8ab3766a7d08e44398716fd","first_seen":"2025-07-31T19:43:34.802147Z","last_seen":"2025-07-31T19:43:34.802147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":218,"dns":51,"connect":19,"send":0,"wait":128,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0004_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0004_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17618\r\ncf-ray: 967f9495e9a55687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:17 GMT\r\netag: \"6834b5cd-44d2\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17618,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x398, components 3","md5":"9aadc444f6eb481e29d1a4eb02ab8ce9","sha1":"49afda3ca87d1646dc2f89ca91aa9495e4486828","sha256":"dba4a5261aa05cb36f6aa0dd4975009eb4b82c51d8ce3d1248c685bab9fb6df6","sha512":"4426287821b4ec4d25757ceeb2ca938e06d3770229c515550fae48c1f5bf276530e67e84b45f664741f152d949dcc94bbdf3a96f7067267e461fd3d050219424","ssdeep":"384:Y2Uql4zvcwf05Srlex8YA/cr62PdVI5c68IhA9/vh/Os:YIl4zvpwSrQNGaPdycImFb","tlshash":"bb82f1c336bb70e8ecb6d17048a0d95a950ba1116ff138fc06acf4d585894a4c1eee6a","first_seen":"2025-07-31T19:43:34.805244Z","last_seen":"2025-07-31T19:43:37.453541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990170/187414071_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990170/187414071_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9556\r\netag: \"02facee50df5ee1f9d08e4a20688b5f7\"\r\nlast-modified: Thu, 31 Jul 2025 19:29:20 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 762\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94afe99f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02facee50df5ee1f9d08e4a20688b5f7","sha1":"bc339794e55b91f78ff258bc058c7680aa478118","sha256":"08171025a6f4e8435047483347fdb5da2643b5416397396310e8ae92833b4799","sha512":"d2052b38a319108fe8ac25b7a1f0118b9bc57b55552b9d500a1e297aaa5b197664d14cf4e89ad6b777774b736b78f74aa749f4481146a582499fafef96f93c03","ssdeep":"192:P/+Xc3X7AIjTtzhZhw527AroSntLsY0Ixh1au/0EyRD22WlToXQj4lP2rO:z3rAIfTZhw5Lroass3a2vq6toAjxrO","tlshash":"d312c0a6f3274f3ab901c4cd3631bb42da59f11a8d27d925e00f5d4c2371d96e714a88","first_seen":"2025-07-31T19:43:34.808241Z","last_seen":"2025-07-31T19:43:37.404878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":240,"dns":3,"connect":51,"send":0,"wait":23,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0009_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0009_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14964\r\ncf-ray: 967f9495d9755687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:19 GMT\r\netag: \"6834b5cf-3a74\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x529, components 3","md5":"ca3efcea0a7c344f079ad4235d796987","sha1":"f1b801c1001a2237c50803fb1a81afaf571fb522","sha256":"5ce0522420168fba9af4b739d88e51b08e818055a6df520bf610799ef5ed9fcf","sha512":"9891064ae1cfc7e1aed4e755d27f63fe30171e038a03d942f102f0fd008dd33ab3ae4a3619954a86be01d73697d2b0e331bd04db7c449d0aeda4c4fc9a2be10e","ssdeep":"384:UX4ewKQJkgtUDWuL+CnJFyUVVAdosJEqInlELEgbgm1zKSer:UX41KQqgtUDX++rxoEqIlELEq1zmr","tlshash":"f162c08c61c0b7dd901ed27683c08f28252bae438d2da72dac6486dfb916176bc02d0b","first_seen":"2025-07-31T19:43:34.811466Z","last_seen":"2025-07-31T19:43:37.387982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/api/models?landing=WidgetV4MobileSlider\u0026tag=girls\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=9","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 20:50:09 GMT","end":"Tue, 14 Oct 2025 21:50:07 GMT"},"fingerprint":{"sha1":"CF:DE:7B:6C:80:79:C6:1C:F4:52:A6:C4:64:E2:01:C8:83:24:CB:1F","sha256":"3E:CC:EA:51:2F:4A:4A:97:3A:0A:24:7E:EE:A6:51:6C:20:4A:F3:74:59:ED:83:04:7A:8A:0E:E9:C0:DE:3D:C4"}}},"request":{"raw":"GET /api/models?landing=WidgetV4MobileSlider\u0026tag=girls\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=9 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 31 Jul 2025 19:42:45 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94aba96e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13442,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a16d6917eecd2c3bced365ecce43c51e","sha1":"3da2851a753eeab7527247e1f2007545eea2a2a1","sha256":"a619d542672c6ead28cde6f0778c76766c36f5c11b3d8a166363d7ec5fffdbf5","sha512":"f5aa0b5c57ba77f214f9ff79f86fa72edf1b282e8483221e4be66cbd5eef92529175a5951032affcea32209e21cb6d46c975d62f0f74d14abec7f0e123c4cb77","ssdeep":"384:hPtzazBzwMdtzyzJzIZetzVzgzwK3tzxzszhaBtz9z4zBcpzczbzFOhtzRzMzipT:hPtO1zdtO1SetBcv3tNoIBth8CpQ/4hn","tlshash":"9a5242f752cc0d9a0f4a22cccc8c750cd99b292775d9b395868f4f4b16b6dda3128a23","first_seen":"2025-07-31T19:43:34.814906Z","last_seen":"2025-07-31T19:43:37.327812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/191805809_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/191805809_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6812\r\netag: \"18438059aa05b57e3ece11c74dc3afea\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:11 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 0\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af68a15697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18438059aa05b57e3ece11c74dc3afea","sha1":"978ae478b1e8433bd66ac4e9379fc385268c3ba2","sha256":"a0cc36c101c699939f81c6f7858931ada9abe57df52337864eecb610911fe03e","sha512":"97cc3f78c7f03b22e93a45870b4b39ebccc84c250f9bce52b92723d8ed5695a311b2ac7e5c82dbd2fc7bc652512438e8d17d29522de33c20ff2d0a536d93e4d7","ssdeep":"192:FG/YbkgMUsTjiIXPIHNcbJwaUfJpzxKGCfER43:UwbkgG//e6VwaUfPVU","tlshash":"47e1bf1cfd3c235615bf968169317a334be441337ff1a2528f58d4aa3375a5bb06e802","first_seen":"2025-07-31T19:43:34.818314Z","last_seen":"2025-07-31T19:43:37.473712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/90975717_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/90975717_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7410\r\netag: \"e74baf15dd357f368d8282f89ffdc5a3\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:06 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 16\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af68a45697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e74baf15dd357f368d8282f89ffdc5a3","sha1":"68c27c43fd63d5758f2707d2c52580ddd3948fe3","sha256":"74bfb37cacc20987cfc5d01499a642d7e54e5013b928e15db4bd6fe2eb90036d","sha512":"a93af18feedfbaf4a8541fae2cad908216f8aa1c69ce52914e00ad0dd525d07347860a91f25952aee64e23a542ca6755502032cbeae0e724ece2fe437074f549","ssdeep":"192:0b0DB1DJVHjQLRfiJo4pkHiAq8UFd3UlbwWW0eqhbT/cJvB:j9FJVHc1fGNAyf3iwWW0eQT/cj","tlshash":"cde1adbe6adad0c58d7156e832a85fe55897a8674103e0b8fbf380fd145280ee72251e","first_seen":"2025-07-31T19:43:34.684066Z","last_seen":"2025-07-31T19:43:37.432401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/js/tippy.all.min.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/js/tippy.all.min.js HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 967f9495a9095687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:12 GMT\r\netag: W/\"61795c98-cf28\"\r\nexpires: Fri, 01 Aug 2025 19:03:25 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 520755\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53032,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53031)","md5":"a8de2cb7ccef669d8af468703a403055","sha1":"1236a8b68e0a3edc2ca51ed543397983bad9379b","sha256":"10566881ee2269cb5a3b80346042c5060dd26af795fe72027b0ea972d9160e95","sha512":"b97eb58aa4a4947629b2fc34031fa3846f9214cb8eb0f06a9683ce9e88d13953b356cd97577bb0aaf79814e20977dfae00cbf1578192fa9da1ea45ae8febf905","ssdeep":"768:clmU82nOnbQ9irqwxr/bifSTXOLc0mWbGAwF5+VAHpna8u+cMh7yfD6kpXagmfe5:cYw4biirqwxrtU0D+6feIFPu","tlshash":"cf33e88eb1907265026b4113d1df532d713ba175344b4868b259a8ca6e34feca3efd3b","first_seen":"2023-03-07T12:11:28Z","last_seen":"2026-04-04T20:33:02.422888Z","times_seen":407,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/js/simplebar.js","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/js/simplebar.js HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 967f9495a9165687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:12 GMT\r\netag: \"61795c98-24b9a\"\r\nexpires: Thu, 07 Aug 2025 04:16:50 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 55550\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"74c6c582c6bc6e2f900aa0741c4e6aeb","sha1":"c6c2968e8c1b4f01d06c5a76fc0db52f6411d9ef","sha256":"debf7e3134f924ee7dad356bee4184f8a8ec56c13873839c93dbbb75c0eef3a5","sha512":"3c6564a134c4ccf3722729b22b73b413a8b2707a2083d64b924414b691cd6175719a06229d033620970ea67d90bf7ac7efd58c8f6f107809d80dee505f920aa9","ssdeep":"3072:ZpLPboAJ5cbXH21VJDfSeuDJecIpUZaZA6i5ZkGHm8wKz:fLPboAJ5KXH2dDfSeeJecIpGaZA6ifkE","tlshash":"29e3b75a7ee261e2447771798b5f6104f638811b021de994bc9cd3e41fb0b3843baee9","first_seen":"2023-06-24T14:41:18Z","last_seen":"2026-04-04T20:33:02.490077Z","times_seen":500,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/logo-light.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/logo-light.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1009\r\ncf-ray: 967f9495c9455687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:11 GMT\r\netag: \"61795c97-3f1\"\r\nexpires: Wed, 06 Aug 2025 02:02:00 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 150040\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 86, 8-bit/color RGBA, non-interlaced","md5":"139dd93b8fe935379d13ff9df92b6e29","sha1":"f67a2ff13b00e4ca41b8a3b85f9ab2b05e820ca8","sha256":"95c11747f8d827618fe8712fad469ce436b774c5e908050b2c1d0a7f640eaf46","sha512":"69df64f7550de2ec36b05bf6649722400870a8e9f71f33fa4ed9c25c2e5882a0f21447632613e8df106a984f3221a10a2fe6b5d8f4c752ee01baa29f61cac7ab","ssdeep":"","tlshash":"b411a88a338282b4414d06984d9e3d9c2022341bc51373c63e575cade9ef0042c9d385","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.411199Z","times_seen":346,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/config?url=https%3A%2F%2Fcreative.rmzsglng.com%2Fwidgets%2Fv4%2FUniversal%3FsourceId%3Dheadermobile_fapello%26modelPageOption%3Dmodel%26tag%3Dgirls%26language%3Den%26autoplay%3DonHover%26thumbFit%3Dcover%26hideLiveBadge%3D0%26hideModelName%3D0%26autoplayForce%3D1%26playButton%3D0%26thumbType%3Ddefault%26actionButtonPlacement%3Dbottom%26thumbSizeKey%3Dmiddle%26thumbsMargin%3D2%26responsive%3D1%26hideButton%3D0%26hideTitle%3D0%26hideButtonOnSmallSpots%3D1%26hideTitleOnSmallSpots%3D1%26hideModelNameOnSmallSpots%3D1%26buttonColor%3Dee3b79%26liveBadgeColor%3De53c77%26userId%3D8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.rmzsglng.com%2Fwidgets%2Fv4%2FUniversal%3FsourceId%3Dheadermobile_fapello%26modelPageOption%3Dmodel%26tag%3Dgirls%26language%3Den%26autoplay%3DonHover%26thumbFit%3Dcover%26hideLiveBadge%3D0%26hideModelName%3D0%26autoplayForce%3D1%26playButton%3D0%26thumbType%3Ddefault%26actionButtonPlacement%3Dbottom%26thumbSizeKey%3Dmiddle%26thumbsMargin%3D2%26responsive%3D1%26hideButton%3D0%26hideTitle%3D0%26hideButtonOnSmallSpots%3D1%26hideTitleOnSmallSpots%3D1%26hideModelNameOnSmallSpots%3D1%26buttonColor%3Dee3b79%26liveBadgeColor%3De53c77%26userId%3D8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745 HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 31 Jul 2025 19:34:23 GMT\r\ncf-cache-status: HIT\r\nage: 501\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94a9f95656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"809c0e696300d4922a950b1abcc53b69","sha1":"42f60c6cdec2eafa78079e2f7a6cc82951da821d","sha256":"911ebaabba9fd9c31163b0dfe6aceb8ed39ff9f262fefee968bb979b09847a3a","sha512":"a4361d39989d80870d5663dfe2581eff0cedc85158495da98eaa56379741f6135fe81926bcb2de148f31a47a6da2e0c2c34ea93aa6934fa0f018739739323ff5","ssdeep":"192:sDyGKSRWYVEUIcQVXZ184Hh8nyayqh13/7VlloqJIwQ13YlyQ13/7VlloqJIwn:hGg6E9cQrO+lg2eN","tlshash":"91e102eb922e64f706c04d4dbe2d68d46e9c40eb4e8188efdc494534466d3b712b778d","first_seen":"2025-07-31T19:43:34.832836Z","last_seen":"2025-07-31T19:43:37.560127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":84,"dns":40,"connect":14,"send":0,"wait":39,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/b/r/brittanywillow/1000/brittanywillow_0004.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/b/r/brittanywillow/1000/brittanywillow_0004.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15475\r\ncf-ray: 967f9495c9625687-OSL\r\nlast-modified: Thu, 17 Apr 2025 05:55:34 GMT\r\netag: \"680097d6-3c73\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"40d9dad431083b69610700ed98687976","sha1":"1d9a0dec0eaa9d27ac554f494217967bdcda5426","sha256":"b4888061f30fa4ac5cfeabfbe5868060ac0e8e88bd1e1d24125fb1a1801006ae","sha512":"514b15898921e8e62405e24111c2b221c8d96d3c37846214dcb9b50d71253c67f935bb55af8d433ffd184ca14fc88fa669f36a58ae9c6ada3f9997550217c133","ssdeep":"384:dlWRP1RUfQFoMZ/1aWym3z3sEcgtflEFXQaw68ZW:T81RAA3VEWb3TcgtflEFgawzW","tlshash":"d662d05a712db4d1c1a3e7b089e2393ed299547edbc1af0ea5e110c216326d72a1d4dc","first_seen":"2025-07-31T19:43:34.836211Z","last_seen":"2025-07-31T19:43:34.836211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0001_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0001_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8575\r\ncf-ray: 967f9495f9d15687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:09 GMT\r\netag: \"6834b5c5-217f\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8575,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x300, components 3","md5":"470d66a50f49c675a2060006a20e5500","sha1":"eda32c95037578753300ca5f3488704bb6fc0ec8","sha256":"abf7a7e23728110284c0fa7ff8ead857e3ca96da096ecd6f0eea0d200826b7bf","sha512":"c1173a85ed78bcae40de95f56a58b386d76459d1ce71d559294eea60adab48f3f99c45b1e394166c66c46f44749d071a4779ef1a3d44d42648b04f761a55b691","ssdeep":"192:rP8FWUBp7Awd6eNbkxUjYSXvJzdKYRwy9e7qB5cbj/DJWP:rP8FWUBqK6Wbkx6XvFdKYRF9PMbj/De","tlshash":"f002ad27f7b9b2a9eea1c23e56516b32333236e50c8d671c3f1713847c5245a32aa11c","first_seen":"2025-07-31T19:43:34.839656Z","last_seen":"2025-07-31T19:43:37.356885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/welcomebar15.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/welcomebar15.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 8600\r\ncf-ray: 967f9495f9d65687-OSL\r\nlast-modified: Mon, 25 Mar 2024 13:01:20 GMT\r\netag: \"660175a0-2198\"\r\nexpires: Sat, 02 Aug 2025 03:55:30 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 488831\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 140, 8-bit colormap, non-interlaced","md5":"927ecd3a637e9aab45fdb408521fdf3d","sha1":"ccdac5558cc570a3c6635b41d266ad1be02c5991","sha256":"035b2489ca122411b784dfeabd0cfd78362f86efb36dde55d3395626812e25de","sha512":"71950b53f356aadbb369f6d59a7f386af013339bbc3d9d53a119fe02f0e5d4d73eb51cfd06d7a52b8774f95f5e3dfafd674a31486302281c662e5d8651f6ed87","ssdeep":"192:Qh4lymQJybUwh6dG4UDUPPRyK0snfrY3NavXZKI6AarY:s4lHSybUw54UINrY3N+ZKI6A5","tlshash":"8b028fe8d20976fdeb5043b36fece0959d93042262b6d24b0ec6ee399c4c498c485789","first_seen":"2024-05-08T01:50:33Z","last_seen":"2026-04-04T20:33:02.400224Z","times_seen":250,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/fonts/Material-Icons.ttf?e8u1sb","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:42.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/fonts/Material-Icons.ttf?e8u1sb HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/assets/css/icons.css\r\nCookie: _ga_W0QKNEZ1J9=GS2.1.s1753990962$o1$g0$t1753990962$j60$l0$h0; _ga=GA1.1.476052009.1753990963\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 25548\r\ncf-ray: 967f949e3f275687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:10 GMT\r\netag: \"61795c96-63cc\"\r\nexpires: Sat, 02 Aug 2025 03:02:09 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 492032\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25548,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, Material-Icons","md5":"2fd57ee8ed6a7c3b1dd2093d68e4eb30","sha1":"e353d0935b6f4033dbf50217a057e8d7feccab82","sha256":"e3a1715a8802de8b0bcea54c766ecf62c66de8a831b76d1ab27e7f034ed43773","sha512":"ae6750444e08cd7b08f826cc15b5a5a5ce91923faca29956c1db12ab2de13a64ca129b55fe6eff7b138c1ad293c2098746ae6d786913c530011af6aedde5f7f0","ssdeep":"768:GjKm3C0YcRvpjajZJduI8PTTLKCAhx922a/wx8LuPGeQsFfJkvrId09G5DGz5A/P:GjKYC0YcRvpjajZ7u9TTLKCAhxM2a/wg","tlshash":"bfb23b13cb9fe91df819bb340d2a96512ddca959d138a3c729c42c82854fcf95adcac0","first_seen":"2023-05-25T13:24:56Z","last_seen":"2026-04-04T20:33:02.434417Z","times_seen":336,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/afr.php?zoneid=152\u0026cb=INSERT_RANDOM_NUMBER_HERE","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:43.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/afr.php?zoneid=152\u0026cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 826\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: OAID=a4b4fec66631c5c04ace570745c71625; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1377,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (995)","md5":"c5ab201a11d8c5581c53e7fcb775624c","sha1":"3a3d525fffba8025debbf04bdf5af167294714ce","sha256":"d68ef14d7385efc8326bb4fc331cc92441201cd4262f2bff84bfa1f965f1ce8a","sha512":"3a205797eaa09d0d66ce2b011c7c1cd2403a023ac429951aebf82001c65e3a8e5bec6e2dda11ff2032cc75319cce1496fc36b56b4085c78080508a2f11ed986e","ssdeep":"","tlshash":"6e2186966096d10bd892a908d0d303689a2b97cd9e806f48ff33727bd0ce44758b17be","first_seen":"2025-07-31T19:43:34.84838Z","last_seen":"2025-07-31T19:43:34.84838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":188,"dns":63,"connect":20,"send":0,"wait":128,"receive":1,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapchatvip.com/checkUrl","fqdn":"fapchatvip.com","domain":"fapchatvip.com","tld":"com"},"ip":{"addr":"77.93.81.1","port":443,"asn":43293,"as":"Proxility B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapchatvip.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 15:43:38 GMT","end":"Thu, 25 Sep 2025 15:43:37 GMT"},"fingerprint":{"sha1":"6A:A2:F0:1B:65:52:84:3E:E7:29:13:7F:9A:F6:29:64:14:E8:FF:AF","sha256":"2D:C5:07:E0:39:90:52:0B:1E:ED:45:BD:2F:8D:51:6B:55:B9:A3:D8:1B:A2:60:C4:90:A7:47:5A:87:54:CB:8F"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: fapchatvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-04-04T20:33:02.413243Z","times_seen":7514,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":175,"dns":2,"connect":17,"send":0,"wait":32,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=151\u0026cb=INSERT_RANDOM_NUMBER_HERE","date":"2025-07-31T19:42:43.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745 HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Jul 2025 08:14:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQyRm%2BHWN63BZ3Ok96fK3ym8HtwyzD1okkQpMIs14Sd4SLaermT1aqKyvBcfSXNQr6UYfx%2BMfHvWCDn%2F3YH92PJF5rQbZ0yWVBnHInaUOhMms0E%3D\"}]}\r\nexpires: Thu, 31 Jul 2025 19:42:45 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 7\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a36b995697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (790), with no line terminators","md5":"d127896981a0ccde08f5eb3a3798414a","sha1":"40c6525b4ec1e08d4e252b819fe67ecb37a6b383","sha256":"139dce0e43156d926cb7c25c294bb368eed38c93a024f1f3fb0b07219ab1f173","sha512":"afea344138ef38c63af921f39f0867319ac4814bd3d5d9ccefd878b3587bc3d5f03ed46af05acc8b7281ff69194182dd887e1397ff6887630f3d70e509d8030a","ssdeep":"","tlshash":"4e01b162cc20440da1b196b6fd903329914e771eb2927ed4f810189fa8afec9827a549","first_seen":"2025-07-31T12:46:08.939941Z","last_seen":"2025-08-04T09:49:07.682335Z","times_seen":27,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":56,"dns":6,"connect":1,"send":0,"wait":12,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vid.ourdream.ai/300x250%20Video%20Banner%20-%20General.webm","fqdn":"vid.ourdream.ai","domain":"ourdream.ai","tld":"ai"},"ip":{"addr":"172.67.74.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ourdreamstaticpages.pages.dev/adnium/fapello-desktop-300x250-general","date":"2025-07-31T19:42:45.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f8de4446.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 03:37:40 GMT","end":"Mon, 22 Sep 2025 04:37:19 GMT"},"fingerprint":{"sha1":"AC:13:78:10:8C:A2:61:72:BB:C7:28:9B:6E:93:4B:34:E6:94:F7:C6","sha256":"21:77:EB:E7:29:38:A3:6D:FA:26:68:A1:DE:BB:49:1B:13:9E:F5:FF:76:08:04:3B:A7:F4:83:53:AD:D4:4C:88"}}},"request":{"raw":"GET /300x250%20Video%20Banner%20-%20General.webm HTTP/1.1\r\nHost: vid.ourdream.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ourdreamstaticpages.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: video/webm\r\ncontent-length: 1012912\r\netag: \"cbe65bcc9285794949fcd100825b7794\"\r\nlast-modified: Tue, 15 Jul 2025 00:54:20 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 3076\r\ncontent-range: bytes 0-1012911/1012912\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Kc2u4EQ2KC5kaR2vGVWusp66rdu2gd6wt3t%2F3KRDiqH3Rrtfm%2B2RhY%2FQWOQJ1m0M3T%2FjH687xbLapg8Xf43HC9OZWGbD0Hs2jXyh854url8Bts6uuPbP0yA70KwKyrqcBQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 967f94abf824b517-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=759\u0026min_rtt=622\u0026rtt_var=283\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3316\u0026recv_bytes=1285\u0026delivery_rate=6552036\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=2b0476782ee0d4c9\u0026ts=50\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012912,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"cbe65bcc9285794949fcd100825b7794","sha1":"47eec82194623ff31e668793fe32b1e927c98769","sha256":"10897a92732a169a4b28034a0a8e1e954db84b74f966609b09b7ae5cbbca7f47","sha512":"da01ecbcbcb8802861091b1a85027e0adca6e77607195d2f221cccbbad63344aa388a960b576dfd96dd36214ef710854f02ec3d2985e8226322f364896829f4e","ssdeep":"24576:Q9+Qupc8ihF8WKVjUJWBWEOz3XIvMnIW3n:Rd+8ihF8WKVoJgWEOUvs3n","tlshash":"042512e89a12acdfa0e3aba9d20bfa9a444d71c61121785c35f1c33585718eff11ca77","first_seen":"2025-07-28T19:48:03.843066Z","last_seen":"2025-08-06T15:20:08.562536Z","times_seen":28,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":58,"dns":35,"connect":1,"send":0,"wait":103,"receive":150,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/80997668_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/80997668_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14396\r\netag: \"bace956b15f9933633e80928ce65a1e4\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:38 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 7\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af587d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bace956b15f9933633e80928ce65a1e4","sha1":"21fdb602d92edc8241cb7d08184da0c3a7532816","sha256":"b07497a0aae048a38674d9b81095c46025663403dfbd4bf49aeffb2bd287114f","sha512":"692d51bd2829d7bf16680e3479160712f00c40aa931a41d0911c2db7e2a904dcaa51e49cdae5287144fad1a67493aa1edb37537fcdf92bde115cf1088ee0681f","ssdeep":"384:QqfbqGKGGX+dI5o13F274vGeIP7YDNL8X+4yXBg:+kGco4USL8Xbl","tlshash":"3e52c015038da48672f0a6cb7267772832ac11197a5d79693fdfe4d8332eb194df0631","first_seen":"2025-07-31T19:43:34.732501Z","last_seen":"2025-07-31T19:43:37.458087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990710/149092324_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990710/149092324_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17678\r\netag: \"f05fcefc2ed82ef15c284a3df483bae3\"\r\nlast-modified: Thu, 31 Jul 2025 19:38:37 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 212\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af48585697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f05fcefc2ed82ef15c284a3df483bae3","sha1":"1aedd0f94c5e9862cbf7be141002b428f0c99ddf","sha256":"6acc825d8fca5aca57ddb89969b9d7d3fb56149b0ff1a1b27b684f8aa2ec69e6","sha512":"acb0dd0c64e8c23756076f252553ba17abca2fc4cd2f77af72dcea2d35076fa4e14b69837d273449d79ccca9db4f88a2a5e069dc58a31faffc7c457d35ff13a3","ssdeep":"384:CUMmqwMvkibKNrNGHp/s4a3ZsNjetzqBfRO1E6/Z:CUMHlsibKNJGHG4usNVZoR","tlshash":"bf82d071cb6e24707174856e4fe97a69c46b2c569cdef30167868cd01a58c36f842c9a","first_seen":"2025-07-31T19:43:34.858119Z","last_seen":"2025-07-31T19:43:37.569679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:44.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 31 Jul 2025 19:42:44 GMT\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"26ea2082d53d76412a04032b5dc5cc82","sha1":"440efb7f3ecc66a9f8f302a0be339f97196ebfc4","sha256":"6e88cd5aa79de2e7ad5742fbd1b6442b9af38601dbdf2b63edae06450a925e8e","sha512":"19156e63b244ac2f1fc9845b1066541b1aa0fc518a25b41bcc2c50b7bb7e9fa91ed5d83f4c68d60adeb03d217690c9a0b832bfd7b42f5ae534261472ea1d31ca","ssdeep":"96:aYg4aAzqYg4aWbFZHYg4askYg4a4J3vYg4aoRYg4a0GJc+uTYg4aV6NDO4a7qO4b:vyEfyZy6yG3gyLyZVyV77xd6n3UQjHJ","tlshash":"79a1ec91002b8144ea471cd52bcf7e32ad8e51956482e2bd6ffe2cda9cdbd22132870c","first_seen":"2025-05-29T20:33:40.749721Z","last_seen":"2025-09-10T15:27:31.628458Z","times_seen":3161,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mjpRY1B80ctraj%2FP6eMeGzlsc3o%2BCe%2BCTg%2B4sfgkL031dV1DeT9sVJWsWVXHYZ%2Bz2SEc0CFC3c6jRd2bswwpXplaZJJyZ4u%2BSw2NJbUTaKPAjb%2BH186rg4Mdxlo9UxiVqoVYuX3kibo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\nlast-modified: Thu, 31 Jul 2025 11:25:51 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a94f147130-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2297\u0026min_rtt=414\u0026rtt_var=1315\u0026sent=312\u0026recv=69\u0026lost=0\u0026retrans=0\u0026sent_bytes=379117\u0026recv_bytes=6538\u0026delivery_rate=17060712\u0026ss_exit_cwnd=35478\u0026ss_exit_reason=2\u0026cwnd=26775\u0026unsent_bytes=0\u0026cid=c06699bab01f66cc\u0026ts=922\u0026inflight_dur=101\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-04T20:33:02.403769Z","times_seen":3552,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fv4%2FMobileSlider%3Fautoplay%3DonHover%26hideModelName%3D1%26hideTitle%3D1%26hideTitleOnSmallSpots%3D1%26hideModelNameOnSmallSpots%3D1%26buttonColor%3Df46ef3%26liveBadgeColor%3Df46ef3%26tag%3Dgirls%26userId%3D0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:44.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 20:50:09 GMT","end":"Tue, 14 Oct 2025 21:50:07 GMT"},"fingerprint":{"sha1":"CF:DE:7B:6C:80:79:C6:1C:F4:52:A6:C4:64:E2:01:C8:83:24:CB:1F","sha256":"3E:CC:EA:51:2F:4A:4A:97:3A:0A:24:7E:EE:A6:51:6C:20:4A:F3:74:59:ED:83:04:7A:8A:0E:E9:C0:DE:3D:C4"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fv4%2FMobileSlider%3Fautoplay%3DonHover%26hideModelName%3D1%26hideTitle%3D1%26hideTitleOnSmallSpots%3D1%26hideModelNameOnSmallSpots%3D1%26buttonColor%3Df46ef3%26liveBadgeColor%3Df46ef3%26tag%3Dgirls%26userId%3D0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 31 Jul 2025 19:34:07 GMT\r\ncf-cache-status: HIT\r\nage: 517\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94aa2e790afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7364,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"65cbf17aebdaadeb5cee170be5269790","sha1":"3875f092152848c1afb67762103d94b6fc93a2fa","sha256":"950c01edf053cd843f3efa7aa246dee3d76cd40bf4f7c19dc9d096bc95c646f8","sha512":"ee4f0119f8953524cedc78290b972827ee8d97a6fbc5c3bb03c637e325eba6f3a799388ba730b461edcc5d01fe2ab401ef0365dabf688ebe5c8bfdd963e2287f","ssdeep":"192:ADQIwyZjhEHeABUKh+0ln/44Hh8nyayqh13/7VlloqJIwQ13YlyQ13/7VlloqJIA:ejZchBF9h/4+lg2eN","tlshash":"bee145eb820e68f717c44d4dbebda8d8659d80ab4e8148efdc494838426d37213b7b5d","first_seen":"2025-07-31T19:43:34.865995Z","last_seen":"2025-07-31T19:43:37.521902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":59,"dns":30,"connect":1,"send":0,"wait":25,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/60952913_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/60952913_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13856\r\netag: \"28ef1d436587da3f8fb215332e5fea1b\"\r\nlast-modified: Thu, 31 Jul 2025 19:42:14 GMT\r\nx-proxy-cache-orig: EXPIRED\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 11\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58715697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28ef1d436587da3f8fb215332e5fea1b","sha1":"d66937f2f2e110b22c27c965bab2b1f9efdd49db","sha256":"f147b33a3a1a75e967bd6b725bdd7fc1ba4058e7870f28e59f76b5936186f570","sha512":"53481dcbdc610a9d3a39313af7cb0fbfca3b33ce01b0409f340e171a7e09b059520a254bbafbd5280a138a99b551f3828a5bdc6a3e2e72c0cce90bbd89a8beb8","ssdeep":"192:goPcUsngW9rfXjikcMfEsYqoRPzyze5gSghAxUONLkO1BodhbIM5gZQ4:lTyXjikvEsY5Pzy+uCUOBL1tUgZt","tlshash":"3e52d0ae34e0f130e9632f2915f595b0946c03dba31ca5b94ee210df33728166ee1f98","first_seen":"2025-07-31T19:43:34.869405Z","last_seen":"2025-07-31T19:43:37.395814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/191805809_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/191805809_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6812\r\netag: \"18438059aa05b57e3ece11c74dc3afea\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:11 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58765697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18438059aa05b57e3ece11c74dc3afea","sha1":"978ae478b1e8433bd66ac4e9379fc385268c3ba2","sha256":"a0cc36c101c699939f81c6f7858931ada9abe57df52337864eecb610911fe03e","sha512":"97cc3f78c7f03b22e93a45870b4b39ebccc84c250f9bce52b92723d8ed5695a311b2ac7e5c82dbd2fc7bc652512438e8d17d29522de33c20ff2d0a536d93e4d7","ssdeep":"192:FG/YbkgMUsTjiIXPIHNcbJwaUfJpzxKGCfER43:UwbkgG//e6VwaUfPVU","tlshash":"47e1bf1cfd3c235615bf968169317a334be441337ff1a2528f58d4aa3375a5bb06e802","first_seen":"2025-07-31T19:43:34.818314Z","last_seen":"2025-07-31T19:43:37.473712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/abc.gif?sourceId=headermobile_fapello\u0026language=en\u0026thumbFit=cover\u0026thumbType=default\u0026thumbSizeKey=middle\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\u0026quality=original\u0026stripcashR=0\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=10\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.adxserve.com%2F\u0026i=0\u0026abTest=widgetv4universal_thumbwon230525\u0026abTestVariant=widgetv4universal_thumbwon230525_bestdefault_37\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A942%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A278%2C%22duration%22%3A287%2C%22transferSize%22%3A179950%7D%5D\u0026mh=615676024","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"GET /abc.gif?sourceId=headermobile_fapello\u0026language=en\u0026thumbFit=cover\u0026thumbType=default\u0026thumbSizeKey=middle\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\u0026quality=original\u0026stripcashR=0\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=10\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.adxserve.com%2F\u0026i=0\u0026abTest=widgetv4universal_thumbwon230525\u0026abTestVariant=widgetv4universal_thumbwon230525_bestdefault_37\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A942%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A278%2C%22duration%22%3A287%2C%22transferSize%22%3A179950%7D%5D\u0026mh=615676024 HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94aeb84c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/45689039_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/45689039_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6592\r\netag: \"40f89f8ecef54871eed022d5a1429dcf\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:44 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 2\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58845697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"40f89f8ecef54871eed022d5a1429dcf","sha1":"22953ef6c424ceb0905a8d72329e7c70a00fd890","sha256":"5cde2598550e0e7b75825a5d278fa3f3986b42c836d468ac1e6ace465b19184b","sha512":"25250dd68862e7eabe284fcd7e6a1e51684d59e683f753dd09ae945d140f41294a1eabab749cafb1c84df81ca08173962350e5c356746d3f043e98e8701ea4a2","ssdeep":"96:JJaLv7PFtY64KBx2lKX7QR2LXWcBBzYUT3OUcSQgOZtBc95WLfqCDrS++tUe1U5y:qf0KBxNMkWU+UMZw6DqUl5bZM","tlshash":"5fd19fb72f70021684877122d19f587a66e782a2b91e246b6a8305cab0fdf9c3165478","first_seen":"2025-07-31T19:43:34.872469Z","last_seen":"2025-07-31T19:43:37.58083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/60952913_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/60952913_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13856\r\netag: \"28ef1d436587da3f8fb215332e5fea1b\"\r\nlast-modified: Thu, 31 Jul 2025 19:42:14 GMT\r\nx-proxy-cache-orig: EXPIRED\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 11\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af689c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28ef1d436587da3f8fb215332e5fea1b","sha1":"d66937f2f2e110b22c27c965bab2b1f9efdd49db","sha256":"f147b33a3a1a75e967bd6b725bdd7fc1ba4058e7870f28e59f76b5936186f570","sha512":"53481dcbdc610a9d3a39313af7cb0fbfca3b33ce01b0409f340e171a7e09b059520a254bbafbd5280a138a99b551f3828a5bdc6a3e2e72c0cce90bbd89a8beb8","ssdeep":"192:goPcUsngW9rfXjikcMfEsYqoRPzyze5gSghAxUONLkO1BodhbIM5gZQ4:lTyXjikvEsY5Pzy+uCUOBL1tUgZt","tlshash":"3e52d0ae34e0f130e9632f2915f595b0946c03dba31ca5b94ee210df33728166ee1f98","first_seen":"2025-07-31T19:43:34.869405Z","last_seen":"2025-07-31T19:43:37.395814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0008_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0008_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9771\r\ncf-ray: 967f9495d97b5687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:19 GMT\r\netag: \"6834b5cf-262b\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x345, components 3","md5":"1f28a9b9be8f9eebf161e6a324104ee6","sha1":"1caed89333793bbc50d21f6ef54782e284d52d4b","sha256":"b3464a75127a298b579f371c626bdf66b5c2763f3f6b20070b3afbf7848bc03c","sha512":"4144dc681175f81d8e1a841f9e1c118364aff6e37d140192fb1e71334888288a848c272d1910c59ae30fd18d3e682ac2f8313dcc10ad4aaedc2dde31d913addf","ssdeep":"192:H2BhiFOfEn+hTm2/hk9tOmF2qLHx9oMKYYdvOsJTiyEI7uXxC3aLG1uoj1:Hch8OfMWssqzznKBdmsViAaLwuox","tlshash":"1a12ae01b99e0664f89bcfb156491e603d1bfa6cca66f20e8f94e62c131d3e8b0904d4","first_seen":"2025-07-31T19:43:34.875541Z","last_seen":"2025-07-31T19:43:37.413229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/api/models?landing=WidgetV4Universal\u0026tag=girls\u0026language=en\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=NaN","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls\u0026language=en\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=NaN HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 31 Jul 2025 19:42:45 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94abaae0568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14987,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ccdc5d2490a0351b6fdd0222bc0692ff","sha1":"ed8306eb79365dcdf0ba8c26f68e670693171ad7","sha256":"f233d1a3ed81ac1fe64a8a865b272f2fba721a46d319673ac988c0ac3e71e2c8","sha512":"c7768084a4383af181abc4816c8737e30b8fb4c57ab7476c05a00fddbdad0021feb1bb15ffa838829061a76d79c875c7d1539f4dddf2c21548427d87ae1ad958","ssdeep":"384:BPtzazBzDMdtzyzJz5ZetzVzgzzK3tzxzszVaBtz9z4zmcpzczbzQOhtzRzMzgp6:BPtO1EdtO1jetBc63tNosBth8dpQ/Fhc","tlshash":"7f6241f752cc0d6b0f4a22cccc8d750cd997292765d9b395868f4f4b16b6dda3128a23","first_seen":"2025-07-31T19:43:34.878494Z","last_seen":"2025-07-31T19:43:34.878494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/godessela/","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-31T19:42:41.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /godessela/ HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 967f9493ae035687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41789,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1338), with CRLF, LF line terminators","md5":"1df65db005c4b1a57dcb50efa8e1fe97","sha1":"2d8a30675dd499751137c4bd23b3321ac3ad085b","sha256":"027ba94a9e91240b63e6305aafb27340a95e7b35116d5227f762a013ff914f64","sha512":"edf4a5d98424d206119ae8cfd038f231c527fd031f4ebf678d746c63c3f83ecb28581766fda719c0577e96c9007b26f2e68fb6abff53db5cf1f0b8b4bfa7cac4","ssdeep":"384:gd1p1AM22IlQ2e9yEBsowzN8GEOpT1c450338XVXMrQihN+ISeBMDeMyNsn+dHvT:gp1Ao0lz5UJt5dXdHZDq1nOV3QpGtdD","tlshash":"2d13d5bb334d182f03264292a13179ad852fcf31da6399e6f1bb853a7289cc51a5d178","first_seen":"2025-07-31T19:43:34.883824Z","last_seen":"2025-07-31T19:43:34.883824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":51,"dns":25,"connect":1,"send":0,"wait":76,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/logo.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4243\r\ncf-ray: 967f9495c9405687-OSL\r\nlast-modified: Tue, 09 Nov 2021 12:04:05 GMT\r\netag: \"618a63b5-1093\"\r\nexpires: Sat, 02 Aug 2025 06:46:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 478553\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 94, 8-bit colormap, non-interlaced","md5":"ebf882d122feeab7ec0b15d6b1bba480","sha1":"ff1c948205bb1ac710db0b3d12c03c6e3956faac","sha256":"6ab3545f14cd7742151d7a55e014ff265758ef504ebbbb3d57e7f5cbe8121e90","sha512":"74a41c6666599a0ddf8539bcc230c4deede9270febddced001c5fd68e1d8c9606a066de88c092296f895f7c547c34e59d2fedcb96e907ea4f049563f60617f49","ssdeep":"96:1Xy47hutOsF5I9IK/KNGiO/wPFHobljoIUIpaxxyn:1r7YX+SNFUqFIbNOxI","tlshash":"7b916e7b74d3f6daf8e1c8e57ee5ad12b8e926861ff6c64b411ced051407030c25ac4a","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.457599Z","times_seen":254,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0006_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0006_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24377\r\ncf-ray: 967f9495e99c5687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:18 GMT\r\netag: \"6834b5ce-5f39\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x531, components 3","md5":"65251977e9b47509b483062e32fcbeee","sha1":"fa94af5095a7fbab6cef425350e17bb128f2036d","sha256":"ae1fbfece9a5b39290112417efd7f9839bab50964df9bbeb62ab34ab09301253","sha512":"20ae7e373d2a6144d34635f583e67737646916251fd3bc3cd587fb1b736b5fa7c0e11a0ad9d78db7fbaba18231b768f3320464bfc9cad5aecb5762b17a5b9f6e","ssdeep":"384:GvScAHlcICPFIIrfulGFSO1Gw1k6OQ839/LcPi1gQOu+LdnkCjS4+y+/9LlzdGa/:GTAHl6d3rfLTkwW6cKPmrOTdnDQ/Jlzh","tlshash":"84b2e0bef18319d6a304df7aa83d571fb19c7b1860618e7c95affb608502b13b8041a6","first_seen":"2025-07-31T19:43:34.891328Z","last_seen":"2025-07-31T19:43:37.491365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0010.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0010.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10439\r\ncf-ray: 967f9495d9705687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:20 GMT\r\netag: \"6834b5d0-28c7\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"785b28d95a3ea9dcb335b21cf88dc9a8","sha1":"99223a8a8ea5c8c300c3a31ab7edd8ebf98959b5","sha256":"6a44bfecaa10770748e977f669cf979e6085ac3e880a6979e3c19a98e5bad6f1","sha512":"cb80057008dc441245454102adad0dc15a6f0406af4189c14bb639c70661fe8cc766cb30dfaed83c61c5a5771183587dba3c97cd14083260f81d4c66cc7e4f94","ssdeep":"192:FbWNGEK8dedl7GX4JxyIgLt3uRyGJV39uvRLUgwBAZXS/SKgDRNuC4FPOA:F6NKVp6/bzUKvpUgEAMlwTED","tlshash":"5622a034f0dd4d069914e7fe42b01e744bbb061bb205144db972b4a9451c5cea2a3ef2","first_seen":"2025-07-31T19:43:34.894496Z","last_seen":"2025-07-31T19:43:37.514815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0007_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0007_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18339\r\ncf-ray: 967f9495d9805687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:19 GMT\r\netag: \"6834b5cf-47a3\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x533, components 3","md5":"ab5d867a6f14f7cba8ad23f9237c993a","sha1":"8e501733073edb7d4a4f0051a792897c97eb9e6c","sha256":"3e1e70eebbe9df31a10ceca4666667767451f47fd3391b7370eb3ea3b342679a","sha512":"f6eca0e414ec4bb4187b6d770953a4aed11959b5a4ca6719bdcd2bceadae6204a524d0ed41709de210398fc4f55c14e4784d7db7ad5a0effe67e429761e43451","ssdeep":"384:39nIpk9Ogf734t4wa5AEyaowZfwrRpzc3fwIOQV:ZIpkFf73cNvEyjdpLIOQV","tlshash":"3582d065330b0d8a376fff71c0ec991daf65461376daa5cd4d48ac2144e149211c8a3e","first_seen":"2025-07-31T19:43:34.897681Z","last_seen":"2025-07-31T19:43:37.398246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/logo-mobile.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/logo-mobile.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 3652\r\ncf-ray: 967f9495c9665687-OSL\r\nlast-modified: Tue, 09 Nov 2021 12:21:52 GMT\r\netag: \"618a67e0-e44\"\r\nexpires: Sat, 02 Aug 2025 01:06:59 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 498942\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 85, 8-bit colormap, non-interlaced","md5":"e03aab02ba30409b6b266fcd45e4848d","sha1":"bf03a1568609629e851bec8550399011071610c9","sha256":"1ffebdefe939a01fb1dcb492fd61dc38483d470dbb188ec29482bc00850726e9","sha512":"434f4b40448d8790c5756ca5720a1e53575d7b6d0a49325273f21cf9f1a76c22d4c758bbe2523cb1468475ec8154e90ff2fb50222153bf1aca2a5c9658de778e","ssdeep":"","tlshash":"af716df17ec489e7055c18256a458847ed0c3f373e2ac22f46819d2029ba499917bf13","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.483488Z","times_seen":235,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/logo-mobile-light.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/logo-mobile-light.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1009\r\ncf-ray: 967f9495d96b5687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:11 GMT\r\netag: \"61795c97-3f1\"\r\nexpires: Wed, 06 Aug 2025 17:36:36 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 93965\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 86, 8-bit/color RGBA, non-interlaced","md5":"139dd93b8fe935379d13ff9df92b6e29","sha1":"f67a2ff13b00e4ca41b8a3b85f9ab2b05e820ca8","sha256":"95c11747f8d827618fe8712fad469ce436b774c5e908050b2c1d0a7f640eaf46","sha512":"69df64f7550de2ec36b05bf6649722400870a8e9f71f33fa4ed9c25c2e5882a0f21447632613e8df106a984f3221a10a2fe6b5d8f4c752ee01baa29f61cac7ab","ssdeep":"","tlshash":"b411a88a338282b4414d06984d9e3d9c2022341bc51373c63e575cade9ef0042c9d385","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.411199Z","times_seen":346,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bestcontentflight.top/i?tid=d3a8843a-eaf6-4c5e-b699-c2c4b9f31d31\u0026cf=agecii0ifc","fqdn":"a.bestcontentflight.top","domain":"bestcontentflight.top","tld":"top"},"ip":{"addr":"172.67.212.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763","date":"2025-07-31T19:42:44.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bestcontentflight.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 17:20:14 GMT","end":"Fri, 12 Sep 2025 18:18:48 GMT"},"fingerprint":{"sha1":"5C:24:5D:D2:6F:06:BE:2A:6C:D2:64:DC:67:9B:92:EA:7D:C7:82:FB","sha256":"19:23:88:03:F5:1C:34:CC:53:58:60:6D:66:3C:60:60:D3:69:DB:20:C4:43:FC:9E:BB:05:15:18:A0:CD:CA:81"}}},"request":{"raw":"GET /i?tid=d3a8843a-eaf6-4c5e-b699-c2c4b9f31d31\u0026cf=agecii0ifc HTTP/1.1\r\nHost: a.bestcontentflight.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.bestcontentflight.top/loader?a=4797351\u0026s=4780038\u0026t=1\u0026p=12763\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 60\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6VgRt1Yss7ScrJCDJZoyxnrl9gX6EyZXYXQW2Fw2JpOc2RTnkCVR1HRrxND0dxojpW2aXD5oMqmhESbS1IYeleMG9quUWuU7ROyCJX6u7YMVB6yeW5aRzNEJ2Mgn%2BYdXLFfpWIQ1oEZ7xg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Sun, 17 May 1998 03:00:00 GMT\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 967f94a6ee8456c3-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4194\u0026min_rtt=722\u0026rtt_var=3689\u0026sent=82\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=8929\u0026recv_bytes=6249\u0026delivery_rate=556575\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18098\u0026unsent_bytes=0\u0026cid=212cee4db87ad319\u0026ts=616\u0026inflight_dur=38\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":0,"mime_type":"image/gif","magic":"ASCII text, with no line terminators","md5":"cea81d6017b53c6c7bd076407db21a0a","sha1":"063acf4f87ec5b0c7f9631779c264ee045945c52","sha256":"1665c0045c0d9a05857431f46362283793d0b844d9e157692079bcbc69ff6154","sha512":"36587d952f3f2c041ef8bd2d6d5fd90a903746b3367c100c575a4dca8a8f8e4a2520755e2b04022d745024cfa9513c97a12e30e9655c3efff5aea36283ce970d","ssdeep":"","tlshash":"9da0023529d2ac4117067c588404af419c5400d7975511949c4d11b256c5040efacc21","first_seen":"2023-04-08T06:44:01Z","last_seen":"2026-04-04T16:20:37.442419Z","times_seen":1452,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/static/1c4b7667/s/widgets/v4/MobileSlider/lang/en.json","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:44.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 00:12:35 GMT","end":"Thu, 09 Oct 2025 01:11:05 GMT"},"fingerprint":{"sha1":"BB:65:94:D3:F1:02:00:EA:78:B1:21:8E:9E:C5:81:8F:06:96:49:30","sha256":"6E:F0:4C:A9:29:43:4B:B6:04:4D:7E:62:D0:88:BC:CE:FE:EC:42:A0:DE:83:AE:6D:9D:F2:F8:99:61:F5:61:60"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/MobileSlider/lang/en.json HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5WNli%2BuRGcuEUbB1lBYYz%2FiIG5oM5JwnC%2BaVCHTZ4wSLWbg7lHX%2BzLXrmSx7BFgqADWAT3i6Dtx7xe0JVzRD9CYSvalVWky6dLj22YRLXtCstzHKqK0FSFOqfJVBw8PzdDlUHpuURmk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\netag: W/\"e216ac16aac968fbbb5e403243015ce3\"\r\nlast-modified: Thu, 31 Jul 2025 11:25:51 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nage: 528\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a9daefb517-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1960\u0026min_rtt=0\u0026rtt_var=1839\u0026sent=162\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=194749\u0026recv_bytes=4065\u0026delivery_rate=40513818\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=28540\u0026unsent_bytes=0\u0026cid=0e5252d4e919256c\u0026ts=814\u0026inflight_dur=114\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e216ac16aac968fbbb5e403243015ce3","sha1":"aed30d5d7b17438e5620101035192aa884aa7ec2","sha256":"0a893c5d0c2fc8fe56b8a93d9856c3944c66af5118cb994221dfbc91a7879721","sha512":"a92fc34e2eded6fc158d4236f9b5ac58d1b39b39c20f9c295e1b44a023bfd1f5df25b93006e38e0fe50c0938226a2fc81c25b1347617720d7fcb5a3e3f827e06","ssdeep":"","tlshash":"2dd0c90a32170f0349c82c576762351a2b526aaadb03aa30c3a2d362189c5b734b33d9","first_seen":"2025-04-30T17:10:02.424453Z","last_seen":"2026-04-04T20:33:02.422256Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/187414071_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/187414071_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11964\r\netag: \"f7b75177b6b515684c99167631a6e653\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:50 GMT\r\nx-proxy-cache-orig: EXPIRED\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 25\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94afb9555697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7b75177b6b515684c99167631a6e653","sha1":"20e44172234feb3abcfab25f1d5fd09123870130","sha256":"8773d3dac6faca10999ca1115f0b5386e27d11c0ac11355b0a153d826456ba86","sha512":"3ba5b23ac8789de786707ed9b8c0429a6ae8e5c9b78c59f87ecfb1db602f92962ae8ea6213e449142b81bad6b1e9d55958d182285ba08b964c6189b6d7e220a9","ssdeep":"192:Laqe0uCfyii+NjGv9RAA+lLfbCccU3wzFHACiGNtwwXdCqJE0R1+wIb+d:LaqnuiyiFNalRAA+lLfbCbRzaLotlXss","tlshash":"6032c0d9314059d660d9ffed0bb9fb24081795b20d1ccc1f8631ab423da462e34b9a3e","first_seen":"2025-07-31T19:43:34.791408Z","last_seen":"2025-07-31T19:43:37.512602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":229,"dns":29,"connect":2,"send":0,"wait":40,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/button.png","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/button.png HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 955\r\ncf-ray: 967f949609eb5687-OSL\r\nlast-modified: Thu, 11 May 2023 09:07:38 GMT\r\netag: \"645cb05a-3bb\"\r\nexpires: Sat, 02 Aug 2025 03:55:30 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 488831\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"2a6c1843678d05c36232bb1ea2f9c6e3","sha1":"3bf048107506897d5a46735f073b983c5ffeb59f","sha256":"fccbd253591977b8d8c491a253d292759d659241f5e883ce7e3cb1a19f0cdf39","sha512":"8aad49066c64a530bd96b00227735d007f12ee62b284c7a8483420c37b6de9f09303ad06864a9078eea4f4f40486094f0508bdf0061c08d12515aac1e230d5ae","ssdeep":"","tlshash":"6a1184d75f30b52ac932067ed37274564e56c888190370c8c21a0c0f8fa35eaccd9218","first_seen":"2024-05-08T01:50:33Z","last_seen":"2026-04-04T20:33:02.426681Z","times_seen":304,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/main.df51cea83c3bfe94c814.js","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/Universal/main.df51cea83c3bfe94c814.js HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kKO4VPxzho%2FvZPkLi9h40p9h%2BHgcs0K2f4phUgmo2GItUU9hd54j7UTfw8b357CrfRQNlEIQeSYBvos7uIqNzJSFc%2BTAdi9eXVZvECr9fyKVldzt%2BdW2ZShBp6W5yGbjJJtCi0Z0KEU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.df51cea83c3bfe94c814.js\"\r\netag: W/\"ed0122b73e6d996aa938a2826c6bd5f7\"\r\nlast-modified: Thu, 31 Jul 2025 11:25:51 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a59ef27130-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4693\u0026min_rtt=1032\u0026rtt_var=3234\u0026sent=36\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=6365\u0026recv_bytes=4854\u0026delivery_rate=466889\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18061\u0026unsent_bytes=0\u0026cid=c06699bab01f66cc\u0026ts=333\u0026inflight_dur=23\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":672553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50688), with NEL line terminators","md5":"ed0122b73e6d996aa938a2826c6bd5f7","sha1":"b06917b1ebc30f0458ba726ff8229ea5e25c8768","sha256":"fcdb860688394376ce17be5be3e1d368cec5ef181f12cd8258811a4f7af9c48b","sha512":"ec3be7f2b8001ea6a2ccb4ccb41890b515919cc84c4ca2234ddf98aa93d36b85f1a86b9ab6360ebb80e049fc8c0c93eadb612f78c70314e3a4cdc9afd0918ca4","ssdeep":"6144:ky5dK+BgQ79wCTa60TAsvVqiHHxHgk2x7aVOutx+gY3:PgC9wbwimRaVOutY3","tlshash":"0de406c97785b0224387a166503f040bf2399999740d905cb299eced7cbdd8ea277f3a","first_seen":"2025-07-31T12:46:08.97107Z","last_seen":"2025-08-04T09:49:07.628646Z","times_seen":27,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/config?url=https%3A%2F%2Fcreative.rmzsglng.com%2Fwidgets%2Fv4%2FUniversal%3FsourceId%3Dwidget_belowcontent_mobilefapello%26modelPageOption%3Dmodel%26tag%3Dgirls%26language%3Den%26autoplay%3DonHover%26thumbFit%3Dcover%26hideLiveBadge%3D0%26hideModelName%3D0%26autoplayForce%3D1%26playButton%3D0%26thumbType%3Ddefault%26actionButtonPlacement%3Dbottom%26thumbSizeKey%3Dmiddle%26thumbsMargin%3D2%26responsive%3D1%26hideButton%3D0%26hideTitle%3D0%26hideButtonOnSmallSpots%3D1%26hideTitleOnSmallSpots%3D1%26hideModelNameOnSmallSpots%3D1%26buttonColor%3Dee3b79%26liveBadgeColor%3De53c77%26userId%3D8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.rmzsglng.com%2Fwidgets%2Fv4%2FUniversal%3FsourceId%3Dwidget_belowcontent_mobilefapello%26modelPageOption%3Dmodel%26tag%3Dgirls%26language%3Den%26autoplay%3DonHover%26thumbFit%3Dcover%26hideLiveBadge%3D0%26hideModelName%3D0%26autoplayForce%3D1%26playButton%3D0%26thumbType%3Ddefault%26actionButtonPlacement%3Dbottom%26thumbSizeKey%3Dmiddle%26thumbsMargin%3D2%26responsive%3D1%26hideButton%3D0%26hideTitle%3D0%26hideButtonOnSmallSpots%3D1%26hideTitleOnSmallSpots%3D1%26hideModelNameOnSmallSpots%3D1%26buttonColor%3Dee3b79%26liveBadgeColor%3De53c77%26userId%3D8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745 HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/\r\nOrigin: https://creative.rmzsglng.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmzsglng.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 31 Jul 2025 19:34:37 GMT\r\ncf-cache-status: HIT\r\nage: 487\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94a9f94d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"293e4c1858d3ad82aad8cef1dd814a79","sha1":"2f1ce6653d189f0abad176cb01c8bdac12d32947","sha256":"70f78c5c41dd60097023dd88c9e9e1126557adb066f4857817f796404983fac1","sha512":"b8c135c1fda92e85e9c063236b08ab686ee1b7a86139673535d682177503ff81b51cec0fac8460cf19a1614a369252fcb64536ab5b9c28e16c90f6b80710c9c0","ssdeep":"192:sDyGKSRWYVEU6thly/Zz4Hh8nyayqh13/7VlloqJIwQ13YlyQ13/7VlloqJIwn:hGg6E7/y/Z+lg2eN","tlshash":"a0e102eb922e64f706c04d4dbe2d68d46e9c40eb4e8188efdc494534466d3b712b778d","first_seen":"2025-07-31T19:43:34.919335Z","last_seen":"2025-07-31T19:43:37.406974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":96,"dns":58,"connect":1,"send":0,"wait":17,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PVbBVTDWcdHt2cYRlXB6d5pSHT73zpbElslPes9KF5Ug2Ny9PUiBLI3iiBGhRdJNQsBe9BAYmPZIsP275M47zJZAM4d3pEn42Z7EgM0M6LJahxx3Hj64ZUF%2F5r%2FHbGn9yiTaPoTq9Es%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\nlast-modified: Thu, 31 Jul 2025 11:25:51 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a96f157130-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2186\u0026min_rtt=414\u0026rtt_var=1207\u0026sent=315\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=380039\u0026recv_bytes=7237\u0026delivery_rate=17060712\u0026ss_exit_cwnd=35478\u0026ss_exit_reason=2\u0026cwnd=26775\u0026unsent_bytes=0\u0026cid=c06699bab01f66cc\u0026ts=936\u0026inflight_dur=103\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-04T20:33:02.403769Z","times_seen":3552,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/211645473_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/211645473_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7200\r\netag: \"541ca26182338533af4e79d0d2224daf\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:49 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 9\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af689f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"541ca26182338533af4e79d0d2224daf","sha1":"241c8e37f574d48dbde6a4c24f9a8b2ebe9298be","sha256":"5331ada8c0dea5eed1bc019b0f3a68d06cf1a23db406aceede93e41bd07599bb","sha512":"c7218ea3d0846cc55d8239627c1f63f30cea934108879ea94444f7a3570c8f02d42b7f9253e9723d780033a11b0e3ef63bbc6f200ff8d26486f4a60a9ca929ce","ssdeep":"192:8JZe3DHvhke2FypbZU8LV5zeUx77Tm09jhVkotpaNIwfRPN:8JWDP7VJBptTmKjhVkozaN351","tlshash":"63e1af7bb0ba4e11a3fc36e7ade7fa79592ac97291036463354f14b434809bc3d112ad","first_seen":"2025-07-31T19:43:34.923807Z","last_seen":"2025-07-31T19:43:37.420353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxsrver.com/kstst.js","fqdn":"adxsrver.com","domain":"adxsrver.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxsrver.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:9F:04:3F:F8:93:2E:24:50:1D:EF:52:17:69:AA:86:A3:D9:05:32","sha256":"BE:95:EB:07:A8:A9:F7:F3:F5:58:9D:CB:BE:11:2C:B8:F3:4E:D2:64:9A:BF:FF:19:78:FB:84:10:9C:C7:36:AB"}}},"request":{"raw":"GET /kstst.js HTTP/1.1\r\nHost: adxsrver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 19220\r\nlast-modified: Thu, 29 Jun 2023 16:28:44 GMT\r\netag: \"cccf-5ff4731adbf91-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: LBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52431), with no line terminators","md5":"0828bef1d3757bb8373b2b8690745e96","sha1":"00da816d45500544c3a70f5dfa67c40efff6f26c","sha256":"a95d3e5d1ac4d97b602f4526487f82bab0f6d87757f8f92bcc7a91545bdc364a","sha512":"515e4e480d54c63e7d6e9255c65c5398f04de47c795c79e14f576a6e1cd03afbacfc07c05dba3d13b719bc42fdbf3ca03bd58e8c2607d69a2bc886f9104594d0","ssdeep":"768:V8q9Qq1Lf3FU33oLIsJ35N+DgsNsYcXyK407APsB3KxTaHC44a1p/VKCLlqGCWDE:UMTddr48XI7aoerb0TxltjJDlj","tlshash":"4e334ec177d5bc851397ab7a731bb1e6f03a5cd97584488ae004bca0f0e8601fee56b5","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-04-04T20:33:02.511296Z","times_seen":256,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":271,"dns":18,"connect":22,"send":0,"wait":127,"receive":36,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/images/avatar.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/images/avatar.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23256\r\ncf-ray: 967f9495c94f5687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:11 GMT\r\netag: \"61795c97-5ad8\"\r\nexpires: Thu, 07 Aug 2025 04:09:25 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 55996\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"8a1ac59b9e065a985c89b2629788794f","sha1":"43ed6a1245b4b5e14cff583d2cf68c964dea6ae6","sha256":"db919fb34776685a94fb260c2704f28e67cf14c571f508b1bf02df55eb745442","sha512":"03a9d76421c30901c63e3d5e757ad6fe2d0d2903f1df95c5bf7362d3cc0613d8d3fa8a1ded779e54a94adee4c487c91f754d3cc593aa054f339ca887d383c666","ssdeep":"384:Rkkm6lSUpw1+ujn1861mAcJaP6maBg+iAVu81KWS48c81OZOtEb0yw:TFcXDjnOycJjhBgCuFWS700x","tlshash":"53a2d0a1d4202ef2c4209338714b4f12c5bae6aef24576d2356550393b3bb6766df1f2","first_seen":"2023-05-08T22:34:11Z","last_seen":"2026-04-04T20:33:02.416341Z","times_seen":128,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adxserve.com/adx/www/delivery/afr.php?zoneid=156","fqdn":"www.adxserve.com","domain":"adxserve.com","tld":"com"},"ip":{"addr":"216.18.168.167","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:43.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxserve.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:3E:0F:9E:C2:7C:8D:C7:78:4D:92:33:A1:AA:88:AD:F0:58:6F:AD","sha256":"AA:32:D4:2E:76:1D:B6:04:8E:1A:43:E5:1A:57:A7:14:A7:3F:57:B5:C7:83:93:93:7E:FE:FF:88:68:E2:C4:F6"}}},"request":{"raw":"GET /adx/www/delivery/afr.php?zoneid=156 HTTP/1.1\r\nHost: www.adxserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 600\r\nx-powered-by: PHP/7.2.30-1+0~20200419.40+debian9~1.gbpb1b799\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nset-cookie: OAID=ddd7b9686a364006bafc31628152b216; expires=Fri, 31-Jul-2026 19:42:43 GMT; Max-Age=31536000; path=/\nLBSERVERID=ded5133; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":957,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (575)","md5":"cd626ff5c8ca00bb56d6fe5fc3cfb634","sha1":"aa0781142767d7ada6f4725470ae1cd16b508f60","sha256":"aef6bf64f529a4ed942119b5dbfe994b3aecbb7ed5acf29698fdaaba515eb8bf","sha512":"9b3d2b09663a4839f7b0ac8ca52bf20ed7d9352fcda3533f339bb8bd395d1d7f955837e3ad2e5745b6820469629a8575b450902c0b90628a2f88dcd395c88347","ssdeep":"","tlshash":"bc116136808ad10de002949061e49a2db823e3ccab8088686ba336b6c0cd41f9c713bc","first_seen":"2025-07-31T19:43:34.931897Z","last_seen":"2025-07-31T19:43:34.931897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":189,"dns":54,"connect":20,"send":0,"wait":125,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/45689039_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/45689039_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6592\r\netag: \"40f89f8ecef54871eed022d5a1429dcf\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:44 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 2\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94afb9495697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"40f89f8ecef54871eed022d5a1429dcf","sha1":"22953ef6c424ceb0905a8d72329e7c70a00fd890","sha256":"5cde2598550e0e7b75825a5d278fa3f3986b42c836d468ac1e6ace465b19184b","sha512":"25250dd68862e7eabe284fcd7e6a1e51684d59e683f753dd09ae945d140f41294a1eabab749cafb1c84df81ca08173962350e5c356746d3f043e98e8701ea4a2","ssdeep":"96:JJaLv7PFtY64KBx2lKX7QR2LXWcBBzYUT3OUcSQgOZtBc95WLfqCDrS++tUe1U5y:qf0KBxNMkWU+UMZw6DqUl5bZM","tlshash":"5fd19fb72f70021684877122d19f587a66e782a2b91e246b6a8305cab0fdf9c3165478","first_seen":"2025-07-31T19:43:34.872469Z","last_seen":"2025-07-31T19:43:37.58083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":231,"dns":27,"connect":1,"send":0,"wait":41,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990560/60952913_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990560/60952913_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15064\r\netag: \"d99d6605196db6a3e88883191643be60\"\r\nlast-modified: Thu, 31 Jul 2025 19:35:13 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 370\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af485d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15064,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d99d6605196db6a3e88883191643be60","sha1":"3c9de14ae7d04c5c033efee1c3c38f93eb83e2cc","sha256":"716860d92d60d0f6c478c22ebb02635c4067fb84d8a0ff151dc208783637af0c","sha512":"d00ae572d27f08cadd783c3189d798f7a5b22a3b614a8fa310442b2d0faa554198b5bc5dd3bd292a66f51a361726d285e83e630b21993ff6bc23fa0bb2c4bfff","ssdeep":"384:CeNqxs3Y1HgDt2jda5bO8CVkoA7pAzxtyzacowCz24:kIgCtudAbOVA7Kjym64","tlshash":"b962d02af6de150297939712161f7f382263cc79b10fb9ed574f2a89f68e90b30b1205","first_seen":"2025-07-31T19:43:34.935409Z","last_seen":"2025-07-31T19:43:37.469809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990500/71220142_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990500/71220142_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18282\r\netag: \"2ce81d1a4fcbb03b9ee585dbe3935092\"\r\nlast-modified: Thu, 31 Jul 2025 19:35:19 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 417\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af485a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2ce81d1a4fcbb03b9ee585dbe3935092","sha1":"8451fc8b69178d6adf72684486e35034e1aac93b","sha256":"ad2afc47f27d20a5f05bce4471a13c35646734e8c895aed8eb8cb6ecc7f913bf","sha512":"75dc04276d7f7619c537712f483b6fee6f180af26e793342b273d01d788769629197dcff806d171abab719fc50b313f3403cbc21f627a8b2a1db1fa1df3cb422","ssdeep":"384:DMU1L3vM7AJh1TsBo6yvGbn+VSsC+HmVkStVyJV+lBBANbH:Dn1rM09TV6jbVsCMOuH+zBC","tlshash":"cd82cff035b658c5932d53f40067f387c3a80c72a6606df41e3b2de295abc146a29bbc","first_seen":"2025-07-31T19:43:34.939566Z","last_seen":"2025-07-31T19:43:37.393189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.67.182.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=155\u0026cb=INSERT_RANDOM_NUMBER_HERE","date":"2025-07-31T19:42:43.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 00:12:35 GMT","end":"Thu, 09 Oct 2025 01:11:05 GMT"},"fingerprint":{"sha1":"BB:65:94:D3:F1:02:00:EA:78:B1:21:8E:9E:C5:81:8F:06:96:49:30","sha256":"6E:F0:4C:A9:29:43:4B:B6:04:4D:7E:62:D0:88:BC:CE:FE:EC:42:A0:DE:83:AE:6D:9D:F2:F8:99:61:F5:61:60"}}},"request":{"raw":"GET /widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Jul 2025 08:12:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8QzhHjRL9jKazLhbjy7O5%2FsBIjhl3ESN%2BZWVLQ8AqlMJvndyifMG2mR%2BwoFxsJgHqcejtpWcMTUM9vWC88dtmm3bVQDQkhoHCmWESQQRnsxCps%3D\"}]}\r\nexpires: Thu, 31 Jul 2025 19:42:53 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 967f94a3bae8b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (799), with no line terminators","md5":"88d4c5b25ad370aef7e5abcef22b2ccf","sha1":"c4c3a6b698e3f6e8c50e5c07ac8f7570e410261c","sha256":"a884f68b8e4946d3abc64e69180e639321ad6e7a96d82f4cd49535681ec43c4f","sha512":"ba0424b9dbbdcf759e04716e51751e5c60c346f972ad6e3acfe3721740ed5dcfc7ba4a057225adfae1046d1d42b78dc6f17b58687fc30685e9665417958c27aa","ssdeep":"","tlshash":"45016151c910800da1b1967afee17229c0ce791c7952adc5fc241ddfa8affc38276865","first_seen":"2025-07-31T12:46:09.015849Z","last_seen":"2025-08-03T14:51:00.769719Z","times_seen":13,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":69,"dns":22,"connect":2,"send":0,"wait":116,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/71220142_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/71220142_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17390\r\netag: \"321239685620bcc5ddd412fc0df3ba68\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:49 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 11\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94afc9625697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"321239685620bcc5ddd412fc0df3ba68","sha1":"c31458412d88a2dff43f876190a067e816f518a9","sha256":"49f9ae088bb35464e6513f241509689d597c2b28ff433ffe42d01708237b9020","sha512":"92a6df9e4386040289b355240ddaec86d6ebcdddd5261f53daa4697268e0fa3c60696bae2770572252566c092917dd4d41d301f2f41474a0a4dc83eaeecb62d3","ssdeep":"384:hfjDPALNtFbeDKMjGZV48x5KJFodwN5CEgwlbcjm4voYxx:hfUvWCV48DwN5/g2gjmor","tlshash":"9072c0bf819b25c1d75802216ff5f379bc04c04fa8e9c2b20a6634a6351999079ffb1d","first_seen":"2025-07-31T19:43:34.784417Z","last_seen":"2025-07-31T19:43:37.56227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":234,"dns":35,"connect":3,"send":0,"wait":32,"receive":1,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990680/90975717_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990680/90975717_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6076\r\netag: \"788196068a370b6f7efd1c9c1712c476\"\r\nlast-modified: Thu, 31 Jul 2025 19:37:36 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 258\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af586d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"788196068a370b6f7efd1c9c1712c476","sha1":"751aaf64bf671ed19766bad73606238f2b7911c0","sha256":"6726ed0d4513c0cb1dee08c15a13b2643414d0a959bf79e198edb8f5702c20ed","sha512":"0e3dd50a070f5481be0b49e3582de814e8b8290dc264e41210a214d03004616a5e078aaf5d7f6c1e0c79e7675226a66c31368adbba5ae6c122a7849844130c9d","ssdeep":"96:qYpQ57DzlLsK+j1TnrtFIaIthgI+ZK6wjH3XwGqszq1vpSPNT+5yCRtUBdT8l:qUQ57npp+BrtNM+MTXAGq1l4R+/e0","tlshash":"a1c19edfe6c552e0ea25082ba869f24cd3c7601d6d7477df4afd7184db82e9035460e2","first_seen":"2025-07-31T19:43:34.945956Z","last_seen":"2025-07-31T19:43:37.35404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmzsglng.com/abc.gif?sourceId=widget_belowcontent_mobilefapello\u0026language=en\u0026thumbFit=cover\u0026thumbType=default\u0026thumbSizeKey=middle\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\u0026quality=original\u0026stripcashR=0\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=10\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.adxserve.com%2F\u0026i=0\u0026abTest=widgetv4universal_thumbwon230525\u0026abTestVariant=widgetv4universal_thumbwon230525_bestdefault_37\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A961%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A290%2C%22duration%22%3A225%2C%22transferSize%22%3A5635%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A291%2C%22duration%22%3A266%2C%22transferSize%22%3A180103%7D%5D\u0026mh=601662071","fqdn":"go.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 11:52:01 GMT","end":"Tue, 14 Oct 2025 12:51:51 GMT"},"fingerprint":{"sha1":"5F:BE:96:18:24:00:85:4A:BF:5A:A7:48:FF:94:2F:26:D1:58:B3:73","sha256":"F2:83:62:D4:1F:77:2A:E8:E4:A0:70:03:61:4B:AC:20:9B:A3:5C:9A:6B:D5:99:6B:7D:B6:A7:19:F6:C6:F3:B1"}}},"request":{"raw":"GET /abc.gif?sourceId=widget_belowcontent_mobilefapello\u0026language=en\u0026thumbFit=cover\u0026thumbType=default\u0026thumbSizeKey=middle\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\u0026quality=original\u0026stripcashR=0\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=10\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.adxserve.com%2F\u0026i=0\u0026abTest=widgetv4universal_thumbwon230525\u0026abTestVariant=widgetv4universal_thumbwon230525_bestdefault_37\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A961%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A290%2C%22duration%22%3A225%2C%22transferSize%22%3A5635%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A291%2C%22duration%22%3A266%2C%22transferSize%22%3A180103%7D%5D\u0026mh=601662071 HTTP/1.1\r\nHost: go.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 967f94af493b568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/g/o/godessela/1000/godessela_0002_300px.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/g/o/godessela/1000/godessela_0002_300px.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19681\r\ncf-ray: 967f9495e9bb5687-OSL\r\nlast-modified: Mon, 26 May 2025 18:41:09 GMT\r\netag: \"6834b5c5-4ce1\"\r\nexpires: Thu, 07 Aug 2025 19:42:41 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19681,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x400, components 3","md5":"d5fa15d034313bf4042f0408cb737884","sha1":"779aa3f23965783d3f999e87f8d258f00e67c6d6","sha256":"bc083ec58205690fd7c65971322ece660066caa3a32839e467791fdb65906442","sha512":"872520690262132cd01fb65289c512416354460e2925a8a19b0c907b3445d7e3f96cc9c02b5a90a4fd51e2521ca48773f63052910017e3ff95c677e50c170257","ssdeep":"384:oIkvrxFG+ERncNZc9RRlepMfA4Kg1nAwlcQ81+RebfoEekuN4:irxAgC9Plep4AfoLn82Ifo47","tlshash":"9492d0b97c689ed6681fe73234024849f95694ea9c50ffdf9511c426287f08f20b8dc9","first_seen":"2025-07-31T19:43:34.95112Z","last_seen":"2025-07-31T19:43:37.493571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:42.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fapello.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:58:16 GMT\r\nexpires: Fri, 31 Jul 2026 10:58:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 31467\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T21:44:33.699005Z","times_seen":133462,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":235,"dns":4,"connect":43,"send":0,"wait":27,"receive":7,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990770/45689039_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990770/45689039_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5384\r\netag: \"38c126295b2c877de42e60818cf9ecc1\"\r\nlast-modified: Thu, 31 Jul 2025 19:38:44 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 172\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94afd9875697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38c126295b2c877de42e60818cf9ecc1","sha1":"2a5e884ea333f0332c24e03c0cc797f9e3f5efab","sha256":"acf96c20657df721210f8bcb143937eb1f75e196297855e56f416dccbc4d65f7","sha512":"f3413a8c77c435a8d06dd945416dd7a743c63264602c8cacca99e95f6bf78bfd429dfa34ca9d577acc221cc44153cc9a84934313255e5199d25e3fa600de052a","ssdeep":"96:8vtTfYyszA4YVPD7z0m9X7n1Hj0DAKaCOOUnxssN222mJG2NCZp1NFfsiGMJ:aTfYZm5/YkZkAsOOUnxssNCm4Ff/GA","tlshash":"5ab19fb93653bbf9f4daad5288226b154901b2884aa5353f40bf0d4b95f8435c7102ae","first_seen":"2025-07-31T19:43:34.954229Z","last_seen":"2025-07-31T19:43:37.374634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":230,"dns":2,"connect":51,"send":0,"wait":22,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.rmhfrtnd.com/widgets/v4/MobileSlider?autoplay=onHover\u0026hideModelName=1\u0026hideTitle=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=f46ef3\u0026liveBadgeColor=f46ef3\u0026tag=girls\u0026userId=0a3f4c313a4be7fd76098620cc05989ae56a74cddaf7d9e1b80aa1268a680f7e","date":"2025-07-31T19:42:45.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:14:20 GMT\r\nexpires: Fri, 31 Jul 2026 10:14:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 34105\r\nlast-modified: Thu, 29 May 2025 20:13:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T20:33:02.404434Z","times_seen":6276,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.adxserve.com/adx/www/delivery/afr.php?zoneid=152\u0026cb=INSERT_RANDOM_NUMBER_HERE","date":"2025-07-31T19:42:43.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745 HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.adxserve.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Jul 2025 08:14:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cH8CpXu2%2BHcruBB3tDulCOn7sf3V%2FxI9fyzIk%2BAa6JmYnF0PIfJbTfLP7Nd8e2S2je615vuBrrSJyM8YkANjMOT46gDzskRlVADWLiyFzK5wagI%3D\"}]}\r\nexpires: Thu, 31 Jul 2025 19:42:45 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 7\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a35b765697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (790), with no line terminators","md5":"d127896981a0ccde08f5eb3a3798414a","sha1":"40c6525b4ec1e08d4e252b819fe67ecb37a6b383","sha256":"139dce0e43156d926cb7c25c294bb368eed38c93a024f1f3fb0b07219ab1f173","sha512":"afea344138ef38c63af921f39f0867319ac4814bd3d5d9ccefd878b3587bc3d5f03ed46af05acc8b7281ff69194182dd887e1397ff6887630f3d70e509d8030a","ssdeep":"","tlshash":"4e01b162cc20440da1b196b6fd903329914e771eb2927ed4f810189fa8afec9827a549","first_seen":"2025-07-31T12:46:08.939941Z","last_seen":"2025-08-04T09:49:07.682335Z","times_seen":27,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":62,"dns":22,"connect":1,"send":0,"wait":18,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmzsglng.com/static/1c4b7667/s/widgets/v4/Universal/main.5d13f15339ab4bf872e8.css","fqdn":"creative.rmzsglng.com","domain":"rmzsglng.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:44.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmzsglng.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 18:24:02 GMT","end":"Wed, 08 Oct 2025 19:21:00 GMT"},"fingerprint":{"sha1":"BF:87:14:C3:D3:A3:8A:31:1D:AD:02:28:F6:93:21:A0:29:81:EF:3B","sha256":"33:12:14:5A:CF:8C:DF:FE:3D:13:6B:5F:F9:8B:4D:0E:51:0B:83:1B:56:02:80:93:5C:0A:B9:F5:63:89:F6:FB"}}},"request":{"raw":"GET /static/1c4b7667/s/widgets/v4/Universal/main.5d13f15339ab4bf872e8.css HTTP/1.1\r\nHost: creative.rmzsglng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=widget_belowcontent_mobilefapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:44 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tr9cNgttMivtRSCqYJ%2BZoBMzwLel51ZtzrBEX0RCpA%2FG3jEUkDTTw7FrphG1tt8rTfUyFi823RqACJ1RbiljI5sgm9ZpoctZkZqQZb0%2Bzl6J%2BoMHdGS7Uw%2BfeqQ4%2BpC5ej96g3QLKSg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.5d13f15339ab4bf872e8.css\"\r\netag: W/\"279dc2e9f0a5349a8f87c1fbb7aeaaa8\"\r\nlast-modified: Thu, 31 Jul 2025 11:25:51 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 967f94a59ef17130-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4693\u0026min_rtt=1032\u0026rtt_var=3234\u0026sent=37\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=7205\u0026recv_bytes=4854\u0026delivery_rate=466889\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18061\u0026unsent_bytes=0\u0026cid=c06699bab01f66cc\u0026ts=333\u0026inflight_dur=23\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14254), with no line terminators","md5":"279dc2e9f0a5349a8f87c1fbb7aeaaa8","sha1":"2887adc1ef15b6172300eaab2c3dfb0115597e40","sha256":"1539e4c2d41c5deccfc08c50142b69a5f1e2ef24c9137f34738d1fa477905cfd","sha512":"ca0a7cc12c7c1f50ed92e850476bb0efa21f9454617950df10081ccc5338ddf5064f113541d334cfc10da472ed3c0c3bba7ce567a50ee9c8216c0c1437329c8d","ssdeep":"192:cQoDNHrs9zUukVtroyfvylwLq+JBuHhAjgoBkiFUX:c3DrukkZ+JgHhAjgoCdX","tlshash":"8c52d73355a12708b01bcd616ba527da6264c41be15327fceda27a25cfcb4c70eb618e","first_seen":"2025-07-31T12:46:09.208634Z","last_seen":"2025-08-04T09:49:07.678233Z","times_seen":27,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/css/uikit.css","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/css/uikit.css HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: text/css\r\ncf-ray: 967f9495a9205687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:10 GMT\r\netag: \"61795c96-5978e\"\r\nexpires: Thu, 07 Aug 2025 04:07:43 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 56097\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (409)","md5":"8402f76cb01648a1d60e2eefa8bcbc65","sha1":"967a94b11fb2046a68b5caec0a454a223cc9fb18","sha256":"3edf8bb2830e007abfa384ac510aa542e8e46898b3c359b33986f69efee90306","sha512":"9df742452177e26a0f53301b74b48ef954ba9c917d5e5ef35b431e3f3798815dd742ea35b6c4e6f7844ccb69cb5cd0df2f78251df0cb3a87e16ca1f23213a408","ssdeep":"3072:U1F1hxO+/1eC6HLu8TynGAjQ4zyIbhLaEj6syl:+1hxO+/1eC6HLu8TynGAjQ4zyIb1rjY","tlshash":"b57410d5a1927afe95330196906ab5fbf7991fc2a13a6dabbbdd01c04f047830132d8d","first_seen":"2023-05-09T17:59:11Z","last_seen":"2026-04-04T20:33:02.45235Z","times_seen":353,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/l/a/ladythedoll/1000/ladythedoll_0049.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/l/a/ladythedoll/1000/ladythedoll_0049.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/godessela/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15280\r\ncf-ray: 967f9495c95a5687-OSL\r\nlast-modified: Tue, 25 Mar 2025 06:33:58 GMT\r\netag: \"67e24e56-3bb0\"\r\nexpires: Wed, 06 Aug 2025 17:50:18 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 93143\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15280,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"9863744da2c93351ea332f2152f7e383","sha1":"3ac3dcb60c96edc1a047ca532feed023da3bdec9","sha256":"6894b867d94eafed431ef33f6cbf156d0d44e4abc564e1be06807785aa14f712","sha512":"9c986bd5ce486e7bf06b4e93eed533c75f837643a2b38048737d8f7685984a7238dd92dcd822d1ed3800e94a2dc39257b6eeea4af770dbd9227ceda21fa45155","ssdeep":"384:x+LynvouMv2MT3y2C0t+d9fJJ94x+lTIygDcJY+mj:7mv2WbCy+bxJ9hTIytW+mj","tlshash":"df62c0f9f568f3301481f9f607bd26bea78b4f6ba1b65d1d54d284e03c004b41a5986d","first_seen":"2025-07-31T19:43:34.965392Z","last_seen":"2025-07-31T19:43:34.965392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:41.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 31 Jul 2025 19:42:42 GMT\r\ndate: Thu, 31 Jul 2025 19:42:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cefac584f3f405f13ebc242087b72fe2","sha1":"61e8908b3e6e2916f21305489b2be622918c4f5a","sha256":"57716caf3f4f606e956c7e14583dd52347337da28f85085c20193dedd325eed3","sha512":"792a95b2193a70300bd5bf1874ec6f114b793453a618d63208329372b35f365e7d297ad8b24400cd32f8e661231b550d9f7b8e4fa9472cf2b79c24abc6a54ff9","ssdeep":"192:wxAZgq3lblifxNktq346lDYxOLuq3/pl8xxruLq3iwllCxEtkq3RXlGV:Ye0bGo4VuCI","tlshash":"b4428b92402b9400ab971cc233cf7f3aaece50896485d1b96ff90cd59ceeda6436875d","first_seen":"2025-05-29T17:27:56.369842Z","last_seen":"2025-09-10T17:15:45.025994Z","times_seen":4055,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":109,"dns":0,"connect":7,"send":0,"wait":21,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/assets/fonts/unicons.woff","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapello.com/godessela/","date":"2025-07-31T19:42:42.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /assets/fonts/unicons.woff HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapello.com/assets/css/icons.css\r\nCookie: _ga_W0QKNEZ1J9=GS2.1.s1753990962$o1$g0$t1753990962$j60$l0$h0; _ga=GA1.1.476052009.1753990963\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:42 GMT\r\ncontent-type: font/woff\r\ncontent-length: 216020\r\ncf-ray: 967f949e4f555687-OSL\r\nlast-modified: Wed, 27 Oct 2021 14:05:11 GMT\r\netag: \"61795c97-34bd4\"\r\nexpires: Sat, 02 Aug 2025 06:02:05 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 481237\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216020,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 216020, version 1.0","md5":"bf075325fc6a4255699b8ad064e46ec5","sha1":"cefb4e8aec67bb93ff3def7235ab8cb4ed795bfb","sha256":"2d282daf87bb7159e394521d12a3fab8660f40fcef8295e0ad121696b277c2b9","sha512":"ccb812995b7dda1093d0c8bf6fa86c6a88b33190a141117e14c6bcdee9e71bbf3e2d4b1a32c92295e4d1e649c1bf73c1377b0aca163b1aa1ff4d6e976f38ca0a","ssdeep":"6144:PGW9YfSwS1oJBZ66dCM5JzYFi480fKE76Jc:t9KxSCJB5dCmJzYY4VfF6Jc","tlshash":"fe24132ef77224586d914d39547fb53eb473902b6dc339eabb9052aeb31280017361f2","first_seen":"2023-04-24T21:09:38Z","last_seen":"2026-04-04T20:33:02.527188Z","times_seen":589,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1753990920/211645473_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmzsglng.com/widgets/v4/Universal?sourceId=headermobile_fapello\u0026modelPageOption=model\u0026tag=girls\u0026language=en\u0026autoplay=onHover\u0026thumbFit=cover\u0026hideLiveBadge=0\u0026hideModelName=0\u0026autoplayForce=1\u0026playButton=0\u0026thumbType=default\u0026actionButtonPlacement=bottom\u0026thumbSizeKey=middle\u0026thumbsMargin=2\u0026responsive=1\u0026hideButton=0\u0026hideTitle=0\u0026hideButtonOnSmallSpots=1\u0026hideTitleOnSmallSpots=1\u0026hideModelNameOnSmallSpots=1\u0026buttonColor=ee3b79\u0026liveBadgeColor=e53c77\u0026userId=8d5170a6ce91d9c4c200f35d472d57000a0df3f5eb19ce222a9067d9b663c745","date":"2025-07-31T19:42:45.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 06:38:12 GMT","end":"Wed, 03 Sep 2025 07:38:02 GMT"},"fingerprint":{"sha1":"EF:02:D8:90:71:5A:64:52:DB:52:29:F4:4C:9F:4A:28:57:20:1A:F6","sha256":"48:A4:6A:2A:C7:B2:07:A9:DA:DF:08:0A:CA:C7:52:4A:7C:7E:22:71:B8:C7:E5:2F:59:38:D1:85:A5:6B:07:F3"}}},"request":{"raw":"GET /thumbs/1753990920/211645473_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmzsglng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 19:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7200\r\netag: \"541ca26182338533af4e79d0d2224daf\"\r\nlast-modified: Thu, 31 Jul 2025 19:41:49 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 9\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 967f94af58745697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"541ca26182338533af4e79d0d2224daf","sha1":"241c8e37f574d48dbde6a4c24f9a8b2ebe9298be","sha256":"5331ada8c0dea5eed1bc019b0f3a68d06cf1a23db406aceede93e41bd07599bb","sha512":"c7218ea3d0846cc55d8239627c1f63f30cea934108879ea94444f7a3570c8f02d42b7f9253e9723d780033a11b0e3ef63bbc6f200ff8d26486f4a60a9ca929ce","ssdeep":"192:8JZe3DHvhke2FypbZU8LV5zeUx77Tm09jhVkotpaNIwfRPN:8JWDP7VJBptTmKjhVkozaN351","tlshash":"63e1af7bb0ba4e11a3fc36e7ade7fa79592ac97291036463354f14b434809bc3d112ad","first_seen":"2025-07-31T19:43:34.923807Z","last_seen":"2025-07-31T19:43:37.420353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}