{"report_id":"045c87f5-8699-4195-b7d8-356fb62a331d","version":0,"status":"done","tags":[],"date":"2026-08-31T09:25:41Z","url":{"schema":"https","addr":"kr20vk.xyz/","fqdn":"kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"title":"captcha.kr20vk.xyz/","dom":{"size":785,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (766), with no line terminators","md5":"ff129126ccd68e7e7b4f4ac352f2b0e9","sha1":"922b6a8af739a77a774ef33da008d2285f25d085","sha256":"ea3f815f4e73a5e23740c4f002fb5d5442415829373a2c4a6445c70d8f897052","sha512":"ffc0070e934fc4383cb46d8fff55e880dfa28e011ea5718d88fc60813901659353f15e3d72096f3128cf77691d8be4c7f191f940534f7f20208b7714cd016e56","ssdeep":"","tlshash":"c4017575d851f1d98bc020818c37e74e84207a42f411cf46d088514176d5fde0941ec6","dom_hash":"domhash9c3fd2d5a2124a78ba5da725fc7a165a","first_seen":"2026-08-31T09:25:44.655981Z","last_seen":"2026-08-31T09:25:44.655981Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kr20vk.xyz/","fqdn":"kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:25:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"captcha.kr20vk.xyz","ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-18","domain_rank":0,"first_seen":"2026-08-18T21:11:20.019875Z","last_seen":"2026-08-31T09:13:10.717068Z","alert_count":0,"request_count":22,"received_data":27495,"sent_data":13215,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"kr20vk.xyz","ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-18","domain_rank":0,"first_seen":"2026-08-31T09:09:17.61599Z","last_seen":"2026-08-31T09:09:18.321409Z","alert_count":0,"request_count":2,"received_data":1454,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d14ccb518d465852d856838ecc22dde3","sha1":"1d65139bd65fd8547d084c4d9c93dadcbfb26fb9","sha256":"322a41e523ff6befe8deec2222dce74e492d08258fb930ddcc9fb0dbdffe5afa","sha512":"ecb7a3907cb8298d651b3dcb126bf99759e36fcba74980f815b174b8de569f2b4991c75977fe6a2995a6b63c35079bc615d7bb47e5a892da665cceeebfe73374","ssdeep":"","tlshash":"18f04134e061b2ea8bc16051443b979fa0213a82f052cc4bc0094002bae6eee0685e96","size":589,"data":"","first_seen":"2026-08-31T09:25:44.679583Z","last_seen":"2026-08-31T09:25:44.679583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=67699","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65aeb9a2e2fb623159e858bfaf9b3dd","sha1":"047e9a59ff70464a8624cd1b56553ff9c43489d4","sha256":"10a50430d5ba794708dc4279299ca9c73e281ab09fe2847e2b55f68c21177cc8","sha512":"21049b3ce6955c24b40ba4a360ca0125563b6dd085eba371355ef23607141c668bf8be4db384b45f2c6f1a0f950468523d5cc796867dd1b0be1103d147679c8c","ssdeep":"768:wAmB0F3vZjosSe2IcU4iN1jEpMcUVGNN1gPSWYUr:w5B0F3vkeJPSWYUr","tlshash":"b2f222cb5bab28ae4d43317e9b5a51c2ea5600630521e84dfcec9564ffef13d80b4978","size":37281,"data":"","first_seen":"2024-08-20T15:21:52.048449Z","last_seen":"2026-08-31T09:25:44.680692Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=1","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"201ebf029bf1aa0ff51e875eac8ba4c2","sha1":"3d8a24cd94d3495e25dfe0551d66e299cb9e6f7b","sha256":"ebd3781bfef782db77b0c4e78ce993a39968b9b7e536426ac98de2d9da0e42b0","sha512":"fc194496b6713478eb1f5a4ba281a9f7d7471a3af3f5b3668ea3d0113e0bcd9f91af42fb7f2096cd9b9adc8de0b458226262d378c24512171149abc822e527d1","ssdeep":"","tlshash":"c3f04134e061b2ea8bc16051443b579fa0213a82f052cc4bc0094002bae6eee0685e9a","size":589,"data":"","first_seen":"2026-08-31T09:25:44.68169Z","last_seen":"2026-08-31T09:25:44.68169Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=2","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ad79ad4a69ed4699680d9e2b655c2d","sha1":"03a7ff42722cbbbf539567750a0fd9d3c941cb54","sha256":"1f54cd3c41f209f04ddbba97a3081d970abb31783a36935e6a6162d0ab5ac779","sha512":"20e84731290afdb434b71f91bbcf8702e8b160c387a51b4f07e15bfdeee04b93668178f2f2121cdc7a3e6c4135f8eda1006abfd846832c56604fc1e5a77bc33f","ssdeep":"","tlshash":"97f04134e061b2ea8bc16051443b579fa0213a82f052cc4bc0094002bae6eee0685e9a","size":589,"data":"","first_seen":"2026-08-31T09:25:44.684095Z","last_seen":"2026-08-31T09:25:44.684095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=4354","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65aeb9a2e2fb623159e858bfaf9b3dd","sha1":"047e9a59ff70464a8624cd1b56553ff9c43489d4","sha256":"10a50430d5ba794708dc4279299ca9c73e281ab09fe2847e2b55f68c21177cc8","sha512":"21049b3ce6955c24b40ba4a360ca0125563b6dd085eba371355ef23607141c668bf8be4db384b45f2c6f1a0f950468523d5cc796867dd1b0be1103d147679c8c","ssdeep":"768:wAmB0F3vZjosSe2IcU4iN1jEpMcUVGNN1gPSWYUr:w5B0F3vkeJPSWYUr","tlshash":"b2f222cb5bab28ae4d43317e9b5a51c2ea5600630521e84dfcec9564ffef13d80b4978","size":37281,"data":"","first_seen":"2024-08-20T15:21:52.048449Z","last_seen":"2026-08-31T09:25:44.680692Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=52831","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65aeb9a2e2fb623159e858bfaf9b3dd","sha1":"047e9a59ff70464a8624cd1b56553ff9c43489d4","sha256":"10a50430d5ba794708dc4279299ca9c73e281ab09fe2847e2b55f68c21177cc8","sha512":"21049b3ce6955c24b40ba4a360ca0125563b6dd085eba371355ef23607141c668bf8be4db384b45f2c6f1a0f950468523d5cc796867dd1b0be1103d147679c8c","ssdeep":"768:wAmB0F3vZjosSe2IcU4iN1jEpMcUVGNN1gPSWYUr:w5B0F3vkeJPSWYUr","tlshash":"b2f222cb5bab28ae4d43317e9b5a51c2ea5600630521e84dfcec9564ffef13d80b4978","size":37281,"data":"","first_seen":"2024-08-20T15:21:52.048449Z","last_seen":"2026-08-31T09:25:44.680692Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=48203","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65aeb9a2e2fb623159e858bfaf9b3dd","sha1":"047e9a59ff70464a8624cd1b56553ff9c43489d4","sha256":"10a50430d5ba794708dc4279299ca9c73e281ab09fe2847e2b55f68c21177cc8","sha512":"21049b3ce6955c24b40ba4a360ca0125563b6dd085eba371355ef23607141c668bf8be4db384b45f2c6f1a0f950468523d5cc796867dd1b0be1103d147679c8c","ssdeep":"768:wAmB0F3vZjosSe2IcU4iN1jEpMcUVGNN1gPSWYUr:w5B0F3vkeJPSWYUr","tlshash":"b2f222cb5bab28ae4d43317e9b5a51c2ea5600630521e84dfcec9564ffef13d80b4978","size":37281,"data":"","first_seen":"2024-08-20T15:21:52.048449Z","last_seen":"2026-08-31T09:25:44.680692Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=4606","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65aeb9a2e2fb623159e858bfaf9b3dd","sha1":"047e9a59ff70464a8624cd1b56553ff9c43489d4","sha256":"10a50430d5ba794708dc4279299ca9c73e281ab09fe2847e2b55f68c21177cc8","sha512":"21049b3ce6955c24b40ba4a360ca0125563b6dd085eba371355ef23607141c668bf8be4db384b45f2c6f1a0f950468523d5cc796867dd1b0be1103d147679c8c","ssdeep":"768:wAmB0F3vZjosSe2IcU4iN1jEpMcUVGNN1gPSWYUr:w5B0F3vkeJPSWYUr","tlshash":"b2f222cb5bab28ae4d43317e9b5a51c2ea5600630521e84dfcec9564ffef13d80b4978","size":37281,"data":"","first_seen":"2024-08-20T15:21:52.048449Z","last_seen":"2026-08-31T09:25:44.680692Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=3","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c1d05d52bb98e48ba57df70362cfa40","sha1":"d6b6ce53d7ac7bc51a0eccb50fb753796ef0fd3a","sha256":"4106f482abaedb43fd531f685a47e27140703a4488ab65daa675146fb7d7fbd0","sha512":"a43481ec70ef0c62bc4367dda46ac63eb9cb87e5479d92f7781cd5f503537f3a91a06289c979c7c59cac8d50abcf0123604cb9ab9e17b3adcd56b30dde664fd0","ssdeep":"","tlshash":"82f04134e061b2ea8bc16051443b579fa0213a82f052cc4bc0094002bae6eee0685e96","size":589,"data":"","first_seen":"2026-08-31T09:25:44.68574Z","last_seen":"2026-08-31T09:25:44.68574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=93422","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65aeb9a2e2fb623159e858bfaf9b3dd","sha1":"047e9a59ff70464a8624cd1b56553ff9c43489d4","sha256":"10a50430d5ba794708dc4279299ca9c73e281ab09fe2847e2b55f68c21177cc8","sha512":"21049b3ce6955c24b40ba4a360ca0125563b6dd085eba371355ef23607141c668bf8be4db384b45f2c6f1a0f950468523d5cc796867dd1b0be1103d147679c8c","ssdeep":"768:wAmB0F3vZjosSe2IcU4iN1jEpMcUVGNN1gPSWYUr:w5B0F3vkeJPSWYUr","tlshash":"b2f222cb5bab28ae4d43317e9b5a51c2ea5600630521e84dfcec9564ffef13d80b4978","size":37281,"data":"","first_seen":"2024-08-20T15:21:52.048449Z","last_seen":"2026-08-31T09:25:44.680692Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=4","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5e0a4e1dcf72a9710dbccad5597bf6e","sha1":"080a5fea74eaffcc197e1fb3f9fef3bb4ea75b0e","sha256":"aa38b91a77a4112c6f7e3ef3a2e7d042982c1245b94406357057cafec3cd05dd","sha512":"bd8247a0370e39f08ac1d925bf33a801e5d93babb866e210a858d4919a36d1909a36e2030cd631d9aa0efc0360582213adfd09b1acb9848b392624b0dadd2efe","ssdeep":"","tlshash":"d2f02634e07173e68bc56152083f569fa0317e82b153cd97c4089142b9ebeec4685e97","size":564,"data":"","first_seen":"2026-08-31T09:25:44.687234Z","last_seen":"2026-08-31T09:25:44.687234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:13.515Z","timestamp":1788168313515,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kr20vk.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: kraken=JpWRQGlhw9uPV20; expires=Tue, 01 Sep 2026 05:25:13 GMT; Max-Age=72000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BoRdXQYon50EnTNdrqg4I%2Bb9O6MwHL%2F4mdaTYkdyd%2BzhybKt914cvpJHBQe1fUcj4QgsGW5tkZoQNktJmZCWRjJ66X%2FxmDkZqS%2B8NizpEJwNSegMpbUR0AjuOW%2Bvz%2BqNbn1BJTg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afc978fc70b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"kraken","value":"JpWRQGlhw9uPV20","quoted":false,"expires":"2026-09-01T05:25:13Z","raw_expires":"Tue, 01 Sep 2026 05:25:13 GMT","max_age":72000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"kraken=JpWRQGlhw9uPV20; expires=Tue, 01 Sep 2026 05:25:13 GMT; Max-Age=72000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=4606","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.kr20vk.xyz/?tck=2","date":"2026-08-31T09:25:26.887Z","timestamp":1788168326887,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.min.js?v=4606 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=2\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKfnI7or0Y91hXYb%2FeDXXdbzMeBDMY5fOcsLDJz%2B4t5lDq6cZGbqri2e%2Boy2oQKJMdk7pySmGRdAmN%2B4Yox0%2FIDZtzFpS0KvBzY6GCrz7BcMx2%2FbVyAoQBxdFnwb9ywu1kkC7PQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afceb1aaf0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=3","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:28.538Z","timestamp":1788168328538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /?tck=3 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=2\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7joZGdCFTheDbhn%2BASHvacxGSoG5yUqXB33SvUZevEu9tsJNYB3RIVGY%2Fq3FfMbAzku8d2iDup7%2FoBX%2B8O3fiDsULjRYJkZRDflRe%2BSTAxmXtmG%2FjWZdQvKCZmtz3dnfne%2FtcPM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcf56b3e0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":1355,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (766), with no line terminators","md5":"a8ff87efbbb249bb9cdbe6951f8f8d3b","sha1":"73ffed63653c06b3b5de8e84cd5e06e9b97619b4","sha256":"aac76130cf69098e945a72a718c2ef93e38b88544dd8201825c9d5e57b601cc0","sha512":"bc1e6a4d4f426ed61fab3b5e8631e0fa071573ed21b2c539d7b5f55237d3f4f302d4223dfc8c29a83bd72493c0ea38049bee63951e9fdb41a8c4be4152bf5f23","ssdeep":"","tlshash":"cd017575d851f1d98bc02080883be74e84207a42f411cf42d0c8515176d5fde0d45ec5","first_seen":"2026-08-31T09:25:44.664798Z","last_seen":"2026-08-31T09:25:44.664798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":992,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/favicon.ico","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.kr20vk.xyz/","date":"2026-08-31T09:25:37.250Z","timestamp":1788168337250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrXvyOhvUy8jczs0kKP9WXjDAq1QCtOGC1KieHN%2B1NrSIzGvur9q3l0jyovHjZTPDIFK5Zh1arstg%2Fkda3SIOKCPp6gSQQlmvVzP5RYC0RgrOmuyhGdDLXkfKbocrT5EOmEvwn8%3D\"}]}\r\nage: 998\r\nlast-modified: Mon, 31 Aug 2026 09:08:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd2bdcac0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":989,"mime_type":"text/html; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fd0d947f8297dbff5d5219ab687935b0","sha1":"4b83c573d676f559f907f575eb3253a4ee49f6c5","sha256":"b338361393551cec6e142d9cd49ba34e2d2a89703d61b7f0d417c7d8a09ca3d0","sha512":"f0a9236241e41d0cee0c02d45e5730d7820fa0919b29c9ce9eb4aa794b995141997a3ba6924fea5687c9e310f931f874b812d934aef7c890e4d2cf3d0972de70","ssdeep":"","tlshash":"47219272b2420370c5e50bb03cfb4795ea7974c9e8aa0754c11c8152d75220ca9dae3d","first_seen":"2026-08-16T15:21:29.401166Z","last_seen":"2026-08-31T09:25:44.667473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=1","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:37.966Z","timestamp":1788168337966,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /?tck=1 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /?tck=1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvL5amjhFoYkjoIh0faEFzPZ%2FhP1JyFXhEwff3HL%2FK4qNCWc3jZry2T8Lr83gv%2FBY295hyjtzK12Gli6ZzaIATSh%2B4Krtw%2BPW3tHY95FaUDBdijH4Qxwit7GiTwq1PVbChTNi%2Fo%3D\"}]}\r\ncf-ray: a33afd304cd40b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=1","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:22.646Z","timestamp":1788168322646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /?tck=1 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icEL%2BGDKlW5lzhKJSn6e%2BYexOGsoYOu8z%2FKojvYADx2b%2F4njo%2B5%2B1DFJMMCSu2gqTCasyC4QYXXzn4B1K8qmrNBMtGy3acN66B8%2B0rtPuUmyesfRlfyAOAA29LRL%2FG5YQp8TIxA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcd089900b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":786,"size_decoded":1358,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (767), with no line terminators","md5":"b8434cb40cfd18854e615a0529e6f001","sha1":"355e79817483968251325179a919bc5eced48f14","sha256":"2cb0ca23ca2e866864b285372973db7f1502072f788a43188180cf0a116cc7d2","sha512":"5144598775718eae39e9df275ddc14fb89ddf6e832d49263dd129da7295c6ec5ffa562a3321cad38841446cae7ae3f198af56587d788c7c69167b096a538bc31","ssdeep":"","tlshash":"3d016a75d851f5d98bc021c1883be75e84317a42f411cf46d0c9515176d5fde0d46fd5","first_seen":"2026-08-31T09:25:44.6685Z","last_seen":"2026-08-31T09:25:44.6685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:34.201Z","timestamp":1788168334201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://captcha.kr20vk.xyz/?tck=4\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYD4LeQjFmxme149h4QJ1K1V45NqSc1Z93Jq5zfZOJXHPtTTbfID7OHOgVdisdgMyPHNaaQS98NPBCZTYXN7e7DMeJn1kVprJoWUftbNenZRfDal0nQ7A5Bjc7KfstgikuH0rfI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd18dc2a0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786,"size_decoded":1341,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (767), with no line terminators","md5":"bcc77e5005ef5dcd7e5e38b1536c6c8d","sha1":"8306c7efc14c37294944ab88fb4c1de868a880f6","sha256":"a88c9a9f16d93ac73eba65e0aa2456d7e2e88213adbf5f794182c440ed2ef408","sha512":"1b22c8de3d491c735be1cc82cbc67b294ec093049fb691664a48f10a23b7a969ee231c8625098d77db36a420fb004c3884887f915ce54a9c2b7314781fbd60d6","ssdeep":"","tlshash":"9e017575d851f1d98bc020818c37e74e84207a42f411cf46d0c8514176d5fde0942ec5","first_seen":"2026-08-31T09:25:44.671075Z","last_seen":"2026-08-31T09:25:44.671075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1795,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=52831","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.kr20vk.xyz/","date":"2026-08-31T09:25:36.050Z","timestamp":1788168336050,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.min.js?v=52831 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17CfnASC0tZPqTA3%2FdG2OgUgFEsSYwIUv%2BOgDeAYkYSU8uFSPTavUeoh2Xv%2FVpqjhl0AZre4au%2BeMOVh%2FOuuBiLOuE%2F8JaM%2BkAxQoBfN%2FexmixvdFgSoNUk3701x%2FS6M6QSeSUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd245c8b0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=1","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:38.979Z","timestamp":1788168338979,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /?tck=1 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://captcha.kr20vk.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kr20vk.xyz/","fqdn":"kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:12.588Z","timestamp":1788168312588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: kraken=yrFcjcijfmHjRy8; expires=Tue, 01 Sep 2026 05:25:12 GMT; Max-Age=72000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSlcKJSuvi2n1ZYCmzdkoi%2Fnyc5MoffT4He%2Blf3OaqyStT4SD7nMIzHSYAJ%2FyB2FX1pJU1M%2FOl8zr5jKF5B7Gl5jakeNmyLytOjBXkqaJBVgGWftXHy0KZSMfFhm\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afc922fa00b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"kraken","value":"yrFcjcijfmHjRy8","quoted":false,"expires":"2026-09-01T05:25:12Z","raw_expires":"Tue, 01 Sep 2026 05:25:12 GMT","max_age":72000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"kraken=yrFcjcijfmHjRy8; expires=Tue, 01 Sep 2026 05:25:12 GMT; Max-Age=72000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kr20vk.xyz/","fqdn":"kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:13.430Z","timestamp":1788168313430,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kr20vk.xyz/\r\nCookie: kraken=yrFcjcijfmHjRy8\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=rjql4areb64ncg0dhc8m4ejges; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://captcha.kr20vk.xyz/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1HsAOVR0NngF4qesXPw4VwmcKCGGDjeC3hjhPqlanp%2FNR7bt9oRDiO5kX40hEvvJPqq8tmubcOWtJlDqbiZXz1D2czh%2F%2FHzeZvq%2FjW9DMDJReSXPwWuDvD48SRH\"}]}\r\ncf-ray: a33afc96ffc30b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"rjql4areb64ncg0dhc8m4ejges","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=rjql4areb64ncg0dhc8m4ejges; path=/"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/favicon.ico","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.kr20vk.xyz/?tck=1","date":"2026-08-31T09:25:25.269Z","timestamp":1788168325269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=1\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJYze%2BwrT4rFigi7ZWo8VJhEcws0%2Fvm4A%2FgNBVMs%2FdRH%2BDHkCUj9NQFN%2FK5BaEA291WsObSfho5Ov1rhIXp1N25aYL2ZrnCfrW3i2B2TbXND98EsQObh3VRm%2BRIYbM%2BRqX6LpRI%3D\"}]}\r\nage: 986\r\nlast-modified: Mon, 31 Aug 2026 09:08:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afce0fa320b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1001,"mime_type":"text/html; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fd0d947f8297dbff5d5219ab687935b0","sha1":"4b83c573d676f559f907f575eb3253a4ee49f6c5","sha256":"b338361393551cec6e142d9cd49ba34e2d2a89703d61b7f0d417c7d8a09ca3d0","sha512":"f0a9236241e41d0cee0c02d45e5730d7820fa0919b29c9ce9eb4aa794b995141997a3ba6924fea5687c9e310f931f874b812d934aef7c890e4d2cf3d0972de70","ssdeep":"","tlshash":"47219272b2420370c5e50bb03cfb4795ea7974c9e8aa0754c11c8152d75220ca9dae3d","first_seen":"2026-08-16T15:21:29.401166Z","last_seen":"2026-08-31T09:25:44.667473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=2","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:25.602Z","timestamp":1788168325602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /?tck=2 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=1\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QnlGdUt%2FboZ0N8fITS3O%2Faw7IbqsViRG7PbhY04c3XyUebGuMtDWcB3zLjMIa5jlulOj%2BhyNf2A5W4dr3XAkbwEQzaSukusxHSyoc0eJGGdBomUv%2BiVCdcWQJDaSl4MYDsuIh4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afce30a3e0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":785,"size_decoded":1349,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (766), with no line terminators","md5":"fcef2e50ba34e290af3fe7f73125f78e","sha1":"7b4bc945125d9d3a77fc8b600bcfbcb25c68e91d","sha256":"1da36d2d81356773ee4057f6b4188dd8208d6bd90be518e26c33255f4530f4d2","sha512":"be2b3637895e6d5bcaa6c1269e924cd1193a3c1335fe358b931617c45c6852ecd57879b31f122cef7d6e71d5ec63d80f0c6d7e1bab92093a8b13a2d4c74ea90d","ssdeep":"","tlshash":"2801ba75d851f1d98bc020808837e74f84207a42f811cf42d0c8518176e9fee0d41fc5","first_seen":"2026-08-31T09:25:44.67291Z","last_seen":"2026-08-31T09:25:44.67291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/favicon.ico","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.kr20vk.xyz/?tck=2","date":"2026-08-31T09:25:28.089Z","timestamp":1788168328089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=2\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtXcw9tPSMBIppBSFuQa2KvIey%2BhdmYE4Jh4BZyEZK3qw43sUTZh2URVyqE2u2fu%2BFutAbjDFpHVnZkH67%2FQdOduRticI5vAbAuoOQG9C0Nc1gOlAKCwiqKbwiVO9vD%2BdjD%2B6VQ%3D\"}]}\r\nage: 989\r\nlast-modified: Mon, 31 Aug 2026 09:08:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcf29b2a0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":995,"mime_type":"text/html; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fd0d947f8297dbff5d5219ab687935b0","sha1":"4b83c573d676f559f907f575eb3253a4ee49f6c5","sha256":"b338361393551cec6e142d9cd49ba34e2d2a89703d61b7f0d417c7d8a09ca3d0","sha512":"f0a9236241e41d0cee0c02d45e5730d7820fa0919b29c9ce9eb4aa794b995141997a3ba6924fea5687c9e310f931f874b812d934aef7c890e4d2cf3d0972de70","ssdeep":"","tlshash":"47219272b2420370c5e50bb03cfb4795ea7974c9e8aa0754c11c8152d75220ca9dae3d","first_seen":"2026-08-16T15:21:29.401166Z","last_seen":"2026-08-31T09:25:44.667473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=4354","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.kr20vk.xyz/?tck=3","date":"2026-08-31T09:25:29.556Z","timestamp":1788168329556,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.min.js?v=4354 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=3\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAU%2BS7UoN8U9Tu85rHTp%2B3Cb7s%2BKyc8Og5ouiaXmxZ2OKIPd%2FQoiIBrjHd5vAzgeIQoC1aHeT5u7E7gHw%2F2aCJwSiBCMolyGdtBC7xYKQfMOw8GTGbrraXpWfxcWbvZlp%2Fpsduo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcfbbb9b0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/favicon.ico","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.kr20vk.xyz/?tck=3","date":"2026-08-31T09:25:30.762Z","timestamp":1788168330762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=3\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lvYn9CPywnj1uATrZFDCNUoExD6I2zfwlMWuVZdIGRWeO8oOCMckw%2BZKv0N4F6Z23qheY3RF6Wlo84eZBam8Vzygy3afBLZwYISKWEgS0dn8qmJI%2FtLciubBzx21A8qv6IwOfc%3D\"}]}\r\nage: 992\r\nlast-modified: Mon, 31 Aug 2026 09:08:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd034bcc0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":989,"mime_type":"text/html; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fd0d947f8297dbff5d5219ab687935b0","sha1":"4b83c573d676f559f907f575eb3253a4ee49f6c5","sha256":"b338361393551cec6e142d9cd49ba34e2d2a89703d61b7f0d417c7d8a09ca3d0","sha512":"f0a9236241e41d0cee0c02d45e5730d7820fa0919b29c9ce9eb4aa794b995141997a3ba6924fea5687c9e310f931f874b812d934aef7c890e4d2cf3d0972de70","ssdeep":"","tlshash":"47219272b2420370c5e50bb03cfb4795ea7974c9e8aa0754c11c8152d75220ca9dae3d","first_seen":"2026-08-16T15:21:29.401166Z","last_seen":"2026-08-31T09:25:44.667473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/blocked","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:34.105Z","timestamp":1788168334105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /blocked HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=4\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwBgunatfIM5n2rJSpSNWJbOY9G53O0b8Lnt7W9laT1Ea6oorigXdSFKo%2Fs68%2BhW%2B6qDItYDwA9FqLmFdadkuGIGNHxBbOe294ywWnLLwd5TeQxLnjTX2hWLOyWRUxWY5xx8VaI%3D\"}]}\r\ncf-ray: a33afd183c290b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:13.719Z","timestamp":1788168313719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxB1eS1B%2BZ8HK6%2BC%2BYDHQDQZKLNlpQnD9q%2FLnw1DNx8Mfg5BiZT%2Fx6mDupb4B%2FNcuTvf3zB2tIt%2BpEp11zvtggcfS0d9j1BavITsoYBLreb%2FLcGZTRkL46SVW5l7dHB5IOmRTtE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afc98cfcb0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":786,"size_decoded":1358,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (767), with no line terminators","md5":"bc86aa2c8e1bcae06f1fe5ab838323d3","sha1":"e29fea2b90bca479fdcba6117927bd892ba5b82b","sha256":"f93be1374380b7b8fae8fa11f3ce8b6c956f6a95d6c1505b51d5a0c772c8c22b","sha512":"7e9b9f4408fa9fff62032a29f1ddeb2ee8a1a7c1b6f557d40faf1cde9462a5e933948e66574b69ac81c4f431d0ed2c095c341e793a1eda633acb904bbf90baf9","ssdeep":"","tlshash":"680175759851f2da8bc020808837e74e84207a42f811cf46d0c8518176d5fde0945e85","first_seen":"2026-08-31T09:25:44.675253Z","last_seen":"2026-08-31T09:25:44.675253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=67699","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.kr20vk.xyz/","date":"2026-08-31T09:25:21.141Z","timestamp":1788168321141,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.min.js?v=67699 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNUGMk3819bUCoN2gtX9qiE0R4cWZ3NjZ6uDXMGXeV7TM7JgnqnuocK1Ac7WMWbCb4WUevsoCmYMaF17G8JtPCJvQPRqSwTrevIYmDx4xFl9BA%2FBb%2BXXLXFhZ3HmesTI2qARb%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcc729090b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/favicon.ico","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.kr20vk.xyz/","date":"2026-08-31T09:25:22.348Z","timestamp":1788168322348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLRb2XruxcGkQkr635qqVLFnrx8LF6Ll0ROr9kdfe25avV8RvoCYcwfLUGyAGEkyvd1yYYJ0zVDTte2PAraic%2BsTuemB2veGTy%2FFpo1SUobi%2Fa5H6kqAay0omb6jwHsqJmf795g%3D\"}]}\r\nage: 983\r\nlast-modified: Mon, 31 Aug 2026 09:08:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcceb97e0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":991,"mime_type":"text/html; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fd0d947f8297dbff5d5219ab687935b0","sha1":"4b83c573d676f559f907f575eb3253a4ee49f6c5","sha256":"b338361393551cec6e142d9cd49ba34e2d2a89703d61b7f0d417c7d8a09ca3d0","sha512":"f0a9236241e41d0cee0c02d45e5730d7820fa0919b29c9ce9eb4aa794b995141997a3ba6924fea5687c9e310f931f874b812d934aef7c890e4d2cf3d0972de70","ssdeep":"","tlshash":"47219272b2420370c5e50bb03cfb4795ea7974c9e8aa0754c11c8152d75220ca9dae3d","first_seen":"2026-08-16T15:21:29.401166Z","last_seen":"2026-08-31T09:25:44.667473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=48203","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.kr20vk.xyz/?tck=1","date":"2026-08-31T09:25:24.052Z","timestamp":1788168324052,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.min.js?v=48203 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=1\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYxttIOVyx974AWit6l1BHO8mvHjMM8YLSbsxMzwgy9k3atI59WXvm8qSfYn8w7MQOyRWNI%2FtZufRbZ2SF8mzfOhafhVUvY3oAEp2oQE97qwA74sKNZ2051pITl3UUnfC8cy%2Bg8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afcd959dc0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/?tck=4","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:25:31.323Z","timestamp":1788168331323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /?tck=4 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=3\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0LkD6tXIWLw6jmBUGuh7E5EsxLqjc8pk2D%2FqoGBuLfFkUpllhZ2DfGv2U%2BFURIve6FYvseUJCHD%2BEM0g0g%2FfpSDHL1IqcoyAUILDVXhHjHVM%2F9wWMg0%2BCxifG%2B11u6KRn7XFt8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd06cbdf0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":761,"size_decoded":1336,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (742), with no line terminators","md5":"10a92624e0d24cb3222f5fc2292991f6","sha1":"d3928976506a84cfbfd1082f1a6d934e38274a2a","sha256":"4c4127ad7fae4e9b399a07a58c78427d546f86c8d40ce5b0de6f8a1efd878b76","sha512":"ba7137003871d03af1a027b4ecc936ce1484f150d2b1520626a3cbcb2e13d16b59e75a2e5a98d93768ecf5bd8c8aee45b3c897834249a379e72bf9a0c2f09892","ssdeep":"","tlshash":"56016a75d851b5d98bc021814837d65d84307a42f401cf42d08c515175eafdd0955ed6","first_seen":"2026-08-31T09:25:44.677454Z","last_seen":"2026-08-31T09:25:44.677454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/aes.min.js?v=93422","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.kr20vk.xyz/?tck=4","date":"2026-08-31T09:25:32.378Z","timestamp":1788168332378,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.min.js?v=93422 HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=4\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wf4l6MxnzbGgyJoz7dBcDbCVu0%2FHSorADV2emCYXs1FO0yA9BZQbp3%2F5u3NXfuhkLn3w7GE65W1gc3Xhofio2etts8tySRn%2FxZvskDNsnbAAz0fXzarHIsLUQ8k%2B9sotAKVWf5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd0d6bf20b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"t546kn60svrgokvoscgc0kbnfv","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=t546kn60svrgokvoscgc0kbnfv; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kr20vk.xyz/favicon.ico","fqdn":"captcha.kr20vk.xyz","domain":"kr20vk.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.kr20vk.xyz/?tck=4","date":"2026-08-31T09:25:33.578Z","timestamp":1788168333578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kr20vk.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 14:47:51 GMT","end":"Sat, 21 Nov 2026 15:46:34 GMT"},"fingerprint":{"sha1":"DC:A4:6A:51:F3:3C:35:F3:00:87:93:FD:CA:3A:44:76:2B:D5:5E:99","sha256":"58:19:22:01:06:03:31:81:E1:F1:27:82:8A:6B:F9:F8:8D:CF:D0:87:1B:1F:B8:93:C2:8A:A3:33:92:2D:69:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.kr20vk.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.kr20vk.xyz/?tck=4\r\nCookie: kraken=JpWRQGlhw9uPV20; PHPSESSID=t546kn60svrgokvoscgc0kbnfv; TCK=b261ae67ca9db9c74de4e8bc0e10c7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:25:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XY4wky01fArVTZwwKr%2FANE%2FnG7V0viYEwywWJuuIBpsBvQfQHzAMyBh6xEMpcm2n8c%2F1LxRIK%2B4J%2BNW%2BaocjqRLp4vSbLs5CWgMyjBIK20jblkIVTKEse0%2F3yQeZuSFiKjw2jrU%3D\"}]}\r\nage: 995\r\nlast-modified: Mon, 31 Aug 2026 09:08:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33afd14ec0f0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":999,"mime_type":"text/html; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fd0d947f8297dbff5d5219ab687935b0","sha1":"4b83c573d676f559f907f575eb3253a4ee49f6c5","sha256":"b338361393551cec6e142d9cd49ba34e2d2a89703d61b7f0d417c7d8a09ca3d0","sha512":"f0a9236241e41d0cee0c02d45e5730d7820fa0919b29c9ce9eb4aa794b995141997a3ba6924fea5687c9e310f931f874b812d934aef7c890e4d2cf3d0972de70","ssdeep":"","tlshash":"47219272b2420370c5e50bb03cfb4795ea7974c9e8aa0754c11c8152d75220ca9dae3d","first_seen":"2026-08-16T15:21:29.401166Z","last_seen":"2026-08-31T09:25:44.667473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}