{"report_id":"0ace6992-1dbc-4dbb-b2c5-636009df8e4f","version":6,"status":"done","tags":[],"date":"2026-03-13T02:19:43Z","url":{"schema":"https","addr":"gospelhappiness.com/?s=LuudMkQQJE","fqdn":"gospelhappiness.com","domain":"gospelhappiness.com","tld":"com"},"ip":{"addr":"138.226.237.203","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"title":".","dom":{"size":279366,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38217)","md5":"646b501eea836cdb850ae976eb70a05d","sha1":"5468783c3a2cd833d08653e4f8bfd0315c196ac0","sha256":"b486fc00e437cfc1c5641af36081e29a39ed6e929db6f4643cf5fbebbd990a19","sha512":"0560a0327765804da0098a381dc319220c0577de37da954ea28313cf556d5687d49f1eba6b345f311fe014a7785f13aa3388a1c31e30317e05a995c5f5300107","ssdeep":"6144:zEPoT3vq+hQUmClMBRVqNbSEFghGOQMI2/vqf:zEPoT3vq+hQUmClcRVqNbSEFghG+vqf","tlshash":"7e542234819f14dd1419f48bd91aaf0d3caa44fe7f6b6b6216183c7e79e6064cb2831b","dom_hash":"domhashc9c02a2e5240932a9677f9ee3743de9c","first_seen":"2026-03-13T02:19:49.507998Z","last_seen":"2026-03-13T02:19:49.507998Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gospelhappiness.com/?s=LuudMkQQJE","fqdn":"gospelhappiness.com","domain":"gospelhappiness.com","tld":"com"},"ip":{"addr":"138.226.237.203","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T02:19:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"d8nnui1j-gift.tooken6900.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-07-17","domain_rank":0,"first_seen":"2026-03-13T02:19:46.078789Z","last_seen":"2026-03-13T02:19:46.078789Z","alert_count":0,"request_count":58,"received_data":4073494,"sent_data":30485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":10,"received_data":385741,"sent_data":5615,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gospelhappiness.com","ip":{"addr":"138.226.237.203","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2026-03-12T22:59:19.528089Z","last_seen":"2026-03-12T22:59:19.528089Z","alert_count":0,"request_count":1,"received_data":195005,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":3,"received_data":231911,"sent_data":1939,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"c096c888f3bba1b55ba48bbe4a4b468a","sha1":"6042b744cc687c762b896f6c21ef9869dda46476","sha256":"67bc1abf3931959ddfd6a7baee78d6713fef7aad4fbc5dc1342006c8529f6407","sha512":"1fbc6c700a9d055aa4cfb257ca94d9e1e5704b510f396066457f0d0aed011ec21201652843fead2ef6de3d2baef420e10cc1eb6237f99d0c2452df342ddd5084","ssdeep":"","tlshash":"76c080f707020c7107d34112cd99d7503d3320cb200a744234198484455cf4d4657476","size":159,"data":"","first_seen":"2025-09-04T07:53:32.857743Z","last_seen":"2026-08-12T16:00:37.112867Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/lentevitti.js?1=1","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f76b79bd9533964d386e2d0c54954afd","sha1":"98c7240a84d4b95a1d7acdc73400a790cc844478","sha256":"5b857f14c4ae63b42815fea6a8c2d1c3d7bb95a88c79bd1db795ec0be7be7962","sha512":"c6f56df0cf2672b7705511ec812f156bda707ea2b5027d74bbc236b085717cab5d78d21050bf8581010e883a1e1d8c04f7bf31edf54b7bdc18e733b0fa726132","ssdeep":"24576:uKmbL1vpa7A7V4G8dUSLcGC6+CsE21BOKIm/1bXoin2qIcYSJEzZRXTZ8Zr9Wll2:2HZpa7A7V4u/nOKTqO","tlshash":"ce85e90076d0a499138b8b76b71ff4e9f81f086f3d88485be114fc647aa522bfae1571","size":1770615,"data":"","first_seen":"2026-03-13T02:19:49.555512Z","last_seen":"2026-08-05T10:33:26.383883Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/gift1.72a9338ddf46c87cef90.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.967Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/media/gift1.72a9338ddf46c87cef90.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":50,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/8.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/8.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9377\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:01 GMT\r\nETag: \"698e6b9d-24a1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"eb75febba2f5141cb87bf522d30ce33d","sha1":"b98cca84a787710076f4013e38c56415a4972d2f","sha256":"caafc14dd6f9f12891ac62ffe1248fce12b1d71f64ef3db277a71c1f3d0840c2","sha512":"a529bcddb9ee22fc15d0629c3c1606caf56d2ce0334017f15c535a88c1771074496bcf054a85e9bef5e0e51c6a7cf8ab6a715c27b6e14255e3cabd5dd30e50f3","ssdeep":"192:4Ld8fBkQ8hc74FGHwwgp9v26uFu7F103+wKvb4YSrBcnEKGL45OkVvi1dSiAH:4J0QhcEFpw+JyuROzYSrBgZGc5jVvi1Y","tlshash":"0012b09e6f11493db18f63ba6051d1804afd587a01e0c16dcc2c06967b290e2ed63bea","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.327392Z","times_seen":78,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/11.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/11.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8237\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:03 GMT\r\nETag: \"698e6b9f-202d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"cece6b1cc06caa1910ea7d758e2a1e46","sha1":"81f75b727f517e4af73a1d670bcc074e224713d3","sha256":"49328b6d39dcfd384019019759fbfd65f4cfe25259e383ddc7861c0720722f56","sha512":"2d4cb229483ecd9a1247a3ea8e66dfe0b98482832d8179cc65f4f229cd89a91605eba1ad7b08c256892a852a8c3708bc438762fcf66b56988efe56d006f2d9a7","ssdeep":"192:A70AtH36S4+rSqEowo24aw3gcgSIOwzIlVLfCbsHuJq:A70O6SPrSqEof24VZ1IOwklVLfEsyq","tlshash":"28029ee073a88e22e8978cb0fe0a5b32fe45985106075f5dfc5683cdab9d4d94c88b4d","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.316586Z","times_seen":78,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":557,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/img/people/w1.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /img/people/w1.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6227\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:19 GMT\r\nETag: \"698e6baf-1853\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 225x225, components 3","md5":"48e5f8c96a03a8910ef9e8d900111a3b","sha1":"6eacbdeca42ecc33ca52a3c5d3630f06e1a715cc","sha256":"65ca7534b7ed3fb59b96d265fc510f5bdc9a1dbba51cc957d58694209f9dc21c","sha512":"6626c2b63a44e4e4ede4666397e69f2091c73ee3907bd1314748aaf2ff6191ee1b2e947a100d37d7e6f2f8a9c2810eaddbf188780028ed53eeeb504620be085e","ssdeep":"96:d1vlaLItkVQDBqgpUBS2U2JAR76sgx85fJMR/erSHVxJMFtAkf4SyHHuHIO:3dDtp9qBS2U2SR7jFfJMRmkxS4SynuHL","tlshash":"5cd18ee1b242690d717735ba14dc25e777406f49b0e78a2806ca9e3a1af70ca34b61e0","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.357393Z","times_seen":79,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 18:53:50 GMT\r\nexpires: Thu, 11 Mar 2027 18:53:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113133\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-13T19:24:09.455974Z","times_seen":11512,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":511,"dns":0,"connect":0,"send":0,"wait":41,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":47,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gospelhappiness.com/?s=LuudMkQQJE","fqdn":"gospelhappiness.com","domain":"gospelhappiness.com","tld":"com"},"ip":{"addr":"138.226.237.203","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T02:19:20.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gospelhappiness.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 12:59:54 GMT","end":"Wed, 10 Jun 2026 12:59:53 GMT"},"fingerprint":{"sha1":"E2:BA:41:0C:A9:25:41:12:92:4A:40:29:C7:10:9F:68:A7:16:CA:9A","sha256":"09:A8:EB:4D:2F:F7:05:13:9B:5D:D7:C7:92:33:12:40:14:C3:BA:7C:1E:0B:EF:3A:E9:95:E5:38:19:EE:86:E7"}}},"request":{"raw":"GET /?s=LuudMkQQJE HTTP/1.1\r\nHost: gospelhappiness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 13 Mar 2026 02:19:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Security-Policy: default-src 'self' https://static.me-talk.ru/ https://widget.me-talk.ru/ https://newassets.hcaptcha.com/; script-src 'self' https://me-talk.ru http://me-talk.ru https://static.me-talk.ru/ https://widget.me-talk.ru/ https://static.site-chat.me/ https://www.hcaptcha.com/ https://js.hcaptcha.com/; script-src-elem 'self' https://me-talk.ru http://me-talk.ru https://static.me-talk.ru/ https://widget.me-talk.ru/ https://static.site-chat.me/ https://www.hcaptcha.com/ https://js.hcaptcha.com/; connect-src 'self' wss://rivkaur.info/ws/ wss://widget.me-talk.ru/ https://static.me-talk.ru/ https://widget.me-talk.ru/ https://static.site-chat.me wss://widget.site-chat.me/ https://newassets.hcaptcha.com/; img-src 'self' https://cdn.jsdelivr.net/ https://esalvir.xyz https://static.me-talk.ru/ https://static.site-chat.me/ data:; style-src 'self' https://fonts.googleapis.com; style-src-elem 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://static.site-chat.me/ https://widget.me-talk.ru/;\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=5lj5kip309kc8h5n8oraqih9v0; expires=Fri, 20 Mar 2026 02:19:21 GMT; Max-Age=604800; path=/; HttpOnly; SameSite=Lax\nstream=LuudMkQQJE; expires=Fri, 20 Mar 2026 02:19:21 GMT; Max-Age=604800; path=/\ncommission=0; expires=Fri, 20 Mar 2026 02:19:21 GMT; Max-Age=604800; path=/\npayment-form=default; expires=Fri, 20 Mar 2026 02:19:21 GMT; Max-Age=604800; path=/\npayment-form-style=white; expires=Fri, 20 Mar 2026 02:19:21 GMT; Max-Age=604800; path=/\nsl-session=PZUCR6nFtGk+ceJdWTLgeQ==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly\r\nLocation: https://d8nnui1j-gift.tooken6900.com?FsxyoU=8F9vf81NUQ\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":193038,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":180,"dns":133,"connect":22,"send":0,"wait":541,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Mar 2026 02:19:22 GMT\r\ndate: Fri, 13 Mar 2026 02:19:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"25eb5e40bf7aefae07359052f21bb03a","sha1":"9ec43f0d2ba553ef24a658b34de2cf13ddbea534","sha256":"725d1829574b9314d85d325d27c177c854de8a8423aa72b90fc5ed9c81499d3c","sha512":"b7f04b25c9ae193e2487ca0208d3a6460aee805ac2eac413655358ee13ddb322cb66b2c447daa50c3943ba3641060ae9562a4bced71e12316c9f9feea14d5ee1","ssdeep":"768:aeo3Yj3TMUGjLnuwSXokZIqrvr1rYr0rkr1ra6Ij/PIRxXEQgXQwS9RhS/fpWaqp:7I","tlshash":"17e3ead1002ba440ba875cc233cf3f369e5ea2557091c5bd6ffd2889acaad26237475d","first_seen":"2025-09-11T20:35:37.001095Z","last_seen":"2026-08-05T10:33:26.365988Z","times_seen":227,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":258,"dns":1,"connect":41,"send":0,"wait":64,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":47,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":407,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/star.8eed6b0af5bd7189c444.webp","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/star.8eed6b0af5bd7189c444.webp HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/webp\r\nContent-Length: 9867\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:22 GMT\r\nETag: \"698e6bb2-268b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9867,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ec7ecbb01b7ab1c22f5b43d55e83d9a","sha1":"c20fee641b074bcecbc6da8689b570ba6819c1be","sha256":"f6ac1524dc590fde394e6972bd9728848dc0462ae5c483f21b48e0c066a8e6b8","sha512":"a1dbaa656790003b543af4c2ee07d60d4dd3e2b8025ff879668ff0b2808ae3d7cf891cd8f393959dd767e1dac792d3743116636c097357c51c3478cca9788210","ssdeep":"192:ZhH4vgNL0bGPf+aQIm3M1WDwdc++fRciv8VJ9R6ueXyP:ZNfJ0aOapm3AWMc5fvv8FSyP","tlshash":"4712cf4a23749bdfe2301a7a8d0eab92c5f541d9d5b20ce1f50696752bb2e10fda0f70","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-07-26T09:32:07.330324Z","times_seen":77,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":65,"dns":1,"connect":22,"send":0,"wait":39,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":236,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/10.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/10.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11486\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:03 GMT\r\nETag: \"698e6b9f-2cde\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11486,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"fd5d2139a56cd2ed55ef1ca5f8f6632e","sha1":"fab3a3c1ce6d807cb2f51827ac8fa97ac255eca7","sha256":"ae9099ee32976ae6ebebe3187f7c6dbad47df423309c3af44abd82b91a2f78a1","sha512":"e965591843dcd8b5d24b81279fbadc162653f66b6bc61a7eb6cd269e6087e375cd1b9c24b2f20a62b6d704686ebbf6b7c2e2c9c048e1efca848be741a24e6061","ssdeep":"192:CVDqWXLGHVYNjoCfAMvRYOgQFisURQ9Iru0V96D3FZrZszmnygqpeCgRbnFa:CQOL5cOAMvRrkmKrVX6DNszmygTzRbn0","tlshash":"cb32b0d962ece888dc94e471e9485732eb65978366c5fb03d50a9f983b0107e8e08da9","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.335549Z","times_seen":78,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":550,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":461,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":482,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/9.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/9.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11299\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:02 GMT\r\nETag: \"698e6b9e-2c23\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11299,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"7aca7b2ff1d74f54aa8f232c5fe24552","sha1":"c764aed681c45d6dba263eb5d34dec2ea607269a","sha256":"d2c7d0055c7c9e14b62a4fa979c0413a8b3da22f92635eb6df9368648bdfd941","sha512":"799432027fdcb53311bfeb8d878fbe34cad757d680732800aca4276db1eccda4bec2cc387c5859ef8340f49d18111b777bad61849d5c91adaade412dfcfb662a","ssdeep":"192:m9uq+EuvrlJnXzwFyKEUVEl6K3KedirKM0gib3SH8pIl51LzweIhJhi+D:mEVTllU8dIU6KZi+Zga3SnceIh6+","tlshash":"e832b028afa56a12d1171e3983da43e037445d703b445f94b5fa682cb2ff16a2c4bce6","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.32442Z","times_seen":78,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":538,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/5.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/5.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7790\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:04 GMT\r\nETag: \"698e6ba0-1e6e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"d2e6dafc17e3666ff0dd47b8919b9006","sha1":"b786124461a48dfc4aec94555b58014bc6aebcdb","sha256":"3c06457ba86564321a4596e8d24a5c3d7f05a08e5329522778c4b07788b63ff5","sha512":"bd7e5dd27402556ced622b38ed4035b6e49461bc5b129561be1961c45c2bd5c8461acb21b31c29035136c612db44a14b516782448b878e23d5ec00150fea91a2","ssdeep":"96:B38e2CjlULAldyWBNTF1NCMKG60GQqv+FEM4CXrbOvTjBgshl3YtLNmu3+DTdPxV:6e2CjLldywjJ60GQJEnkrX7tQI+f/V","tlshash":"32f18d13b2e86cb1f3952fb717882bda37a978b7c6d00a9531c60f49a32964d4c3631c","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.339601Z","times_seen":78,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":521,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 23:57:11 GMT\r\nexpires: Thu, 11 Mar 2027 23:57:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 94932\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-13T19:52:49.704799Z","times_seen":261357,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":534,"dns":0,"connect":0,"send":0,"wait":16,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/logo2.4a9d8accd3bb5b1b6b7d.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/logo2.4a9d8accd3bb5b1b6b7d.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 8426\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:22 GMT\r\nETag: \"698e6bb2-20ea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"755f72d2b88c32890a3809aa266d3469","sha1":"6ed5fd518c518acd99866ebcfd6c5b707db75c3a","sha256":"09f445724965e400c7fbfa55a1c5bdd336826e17834d60e0b3fdfac2c611f5b9","sha512":"87e68fc44bc09e345399f92dec588fdcde269fdae6820b2bfbc3f6fd1ae391dfa2e1625e3776c7c6005af5efd4fc57a0899be89eb6ac75854b3c67494a5c70a8","ssdeep":"96:AffKVX8pvkjvbwCevBo+EXAFqT8j/M1/mBcoFlqR0ESE9tMhVSjIXdcLsmh/UYlD:p8psj0Ce2+nqggAcwqZTMTd0smh/ZiA","tlshash":"ba02160bc71550bfc17e123618da0b45af9de2a268af17531db272627ca77ca7017f28","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.373059Z","times_seen":79,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T02:19:21.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /?FsxyoU=8F9vf81NUQ HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:21 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: mem=1; expires=Sun, 12-Apr-2026 02:19:21 GMT; Max-Age=2592000; path=/; secure; HttpOnly\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193038,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37761), with CRLF, LF, NEL line terminators","md5":"4c3cdf39a557e4b4d9d2e2126e3ba111","sha1":"358f896daa14d9aaae5d0dae0d7bf3bb4ef916a5","sha256":"0b1c44d1d0979dc3d89c0aa182dfdab5f9ac522b8435f8e926af9873ca401e16","sha512":"01e820d8978d3d5b7f2b920cc73a441b8face1bd2d19195c228aeca78ddaaf770cf2e8a2d83a6500e57f0db7da9d51b098ece82000d651baa490589cc8bf3dfb","ssdeep":"3072:zqry0L5rr1bAj7mKZ+eqK3rLfy+94URdMFNCuDg+GdhfNQ+wp:cPoT3vq+hQ/","tlshash":"75543119e23a60dd687f4893f8252fc11c70c9eeea9d197b021c977d9dcc3d68a252d2","first_seen":"2026-03-13T02:19:49.522983Z","last_seen":"2026-03-13T02:19:49.522983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":100,"dns":52,"connect":20,"send":0,"wait":88,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/lentevitti.js?1=1","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /lentevitti.js?1=1 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:22 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:08:49 GMT\r\nETag: W/\"698e6b91-1b0539\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1770809,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60226), with no line terminators","md5":"09fceda8cf579c1d408057f27f4e8370","sha1":"7121d4013bb8857b3e3805ee7fcf2a7b7f7a4548","sha256":"49fee68e54cc9fd3d48dbd1b6b193b3044bc03dc85ea0587da6573cdea460e4b","sha512":"af71d1783285724ead3275394b6d4aaa67071881df58b40b16e418d64e832679ee19fd49fd11edc8e23cb3b035067226f2890f46579d47c36aa3a541cd3102c7","ssdeep":"24576:uKmbL1vpa7A7V4G8dUSLcGC6+CsE21BOKIm/1bXoin2qIcYSJEzZRXTZ8Zr9WllA:2HZpa7A7V4u/nOKF","tlshash":"ff35a34077c0b84913979fb6b21fb5e9e86a086f3c58485be210fca075e5627faf5831","first_seen":"2026-03-13T02:19:49.524124Z","last_seen":"2026-07-26T09:32:07.329343Z","times_seen":22,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/logo9.f496b8edcca5bd41d6c6.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/logo9.f496b8edcca5bd41d6c6.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 12526\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:23 GMT\r\nETag: \"698e6bb3-30ee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 4-bit colormap, non-interlaced","md5":"5fdb25b90d2ffcd7536dcf44af21f596","sha1":"11b3814153922a6f5ecd64eb419c46bf6b6f9181","sha256":"94ed0a873902f8ee7c88a45203e0c3dc7448f3f50299626c1e5f530989796dc7","sha512":"87db1f682085ad9c6cbc950c27a74c7960f51f1bd8cf591921336e8dabead77c05b2105f3669af5fee84cd051190ddf4b22a96169f451cab1f03f643eeaab261","ssdeep":"384:WeAyoCjOCx+Kz7hwJDpxs/drR9h02EulS:WXyozCxvhONxs/d1g6S","tlshash":"7542c0ef5b29d1ac7027447a0b8e1d4886fe32bf5340282e5f6d5c292dce40619d486f","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.32264Z","times_seen":81,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":82,"dns":13,"connect":20,"send":0,"wait":39,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/gift1.72a9338ddf46c87cef90.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/gift1.72a9338ddf46c87cef90.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 30127\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:23 GMT\r\nETag: \"698e6bb3-75af\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"143a24a8851402f0a078612c41070db5","sha1":"e6022319932911c30355bbd7a7c11ebdf581ada7","sha256":"ea77b1b8ca55ef370a248c24b7282dc0225e108e7be0447298bf1ce059da93d5","sha512":"64332b818bed6ece10c629887a32f84bf0017c6f3ce5bf882d99614be34e8088e33b158018443a12675b57060e2359d8a5e571601c5492e9c6e7f4abec8caa6c","ssdeep":"768:I4RTtXp3YZcxWeryL/8MvHtUz1MgfzL3jsJqfXt:I4v1Epayj8MtUz1ffnTsJqvt","tlshash":"7bd2f1c11ea2f6a57221d1ce6907928708262c9d7bc6379ec5b73b32543726f99d8f01","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-08-05T10:33:26.37561Z","times_seen":82,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Mar 2026 02:19:22 GMT\r\ndate: Fri, 13 Mar 2026 02:19:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-05-18T21:19:02.50619Z","times_seen":4089,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":280,"dns":1,"connect":43,"send":0,"wait":62,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/box.3af34c06dfa92629e9c3.webp","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/box.3af34c06dfa92629e9c3.webp HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/webp\r\nContent-Length: 26434\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:25 GMT\r\nETag: \"698e6bb5-6742\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"39f14943f8d0ac42a97cf449224a7c6d","sha1":"01ef14b4f41ee5d9e3ed2c52b1d9af6c722e836b","sha256":"ef44e6ceeb8b6068afedd2a6868967e33bfad0adbee76e7e188c0568e6e219b0","sha512":"f0a8d6f2c211059526ffed7355b68d20be012ee3dd97f1e0e1ac4663e8f260db74850f0b68f1404ca5c538cd23bfe4bcf553964f6c4d00ef3a00591832997f74","ssdeep":"768:tEfHE+M1yQzOSMOQQNM2PetBfDwChzbafI:ydM4XOPpGXDNzbaf","tlshash":"85c2e1210aa63045e212483f4d4214c2469eb4ced5d566dcab75908ed929fcf223fbfe","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.362724Z","times_seen":78,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":749,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10XxCF8jA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10XxCF8jA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 98564\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 22:01:52 GMT\r\nexpires: Tue, 09 Mar 2027 22:01:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274651\r\nlast-modified: Mon, 08 Sep 2025 18:05:23 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98564, version 1.0","md5":"e2e5476b5eb7e8241038afb0234a425c","sha1":"c62ea34a30925ef7d481eecdbeb792d115829a68","sha256":"86c4a19d6742fcd22c42db5891d1ab26292790607e15afe0d52674d10f9ce93d","sha512":"b0d1d66aeb76a1cf150236565d3a624a82e2b68ced9350eccc0d87bad624e2d1e56399ea2066d0e962cb62656072763de711905ac221bcbce5731383aa71403a","ssdeep":"3072:92jFehI8xblsy6wedn3cwvloW1qZnKDB52Q8Ca/2Gx:92S5sybedn3ciYJQNq2q","tlshash":"d6a31382f90bef7aaf59003f61a7559e508bbf8814f622c4dbb9560c2f1120677650bf","first_seen":"2025-06-06T23:51:17.089524Z","last_seen":"2026-08-01T02:32:19.790422Z","times_seen":235,"resource_available":false,"data":null}},"time_used":1608,"timings":{"blocked":789,"dns":22,"connect":21,"send":0,"wait":17,"receive":5,"ssl":747},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 17:26:27 GMT\r\nexpires: Thu, 11 Mar 2027 17:26:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118376\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T19:52:04.893184Z","times_seen":258201,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 18:53:50 GMT\r\nexpires: Thu, 11 Mar 2027 18:53:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113133\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-13T19:24:09.455974Z","times_seen":11512,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/cc5.59e820be6af2d2e73240.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/cc5.59e820be6af2d2e73240.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 61915\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:22 GMT\r\nETag: \"698e6bb2-f1db\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit colormap, non-interlaced","md5":"b8165bcc4fd13b422b693a53f318255d","sha1":"a0d748657d467afbbdabf09c3c933ccef937061d","sha256":"6dbfdeda550f6a91cc6370d5685c3d3fac797770596544666419c74662a43c6d","sha512":"2fc3e2986943377d2f60b9e8680da3c98eba153b0bd9dc3cc39d287561434175a20bbfc6578a2b8ee61119af7de4bf5df62b6a4d6d40b8cc8b9de7b727d28948","ssdeep":"768:hePtfTPnjCoA9O5qugTVSlj+VPrQquNRv+m1+lWGdfliaUxpJ8DpMXYmjjl5n/3f:ytfTfj935qNTuegr1+MGne2NmjjDein","tlshash":"515302bda62ea85cdcab35f0c97079d15cc3cae1d037bb727a61d80d0d951a35324692","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-08-05T10:33:26.372223Z","times_seen":82,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":68,"dns":0,"connect":21,"send":0,"wait":70,"receive":32,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 17:57:37 GMT\r\nexpires: Tue, 09 Mar 2027 17:57:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 289306\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-13T01:32:02.081745Z","times_seen":7903,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":601,"dns":3,"connect":17,"send":0,"wait":17,"receive":1,"ssl":583},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Mar 2026 02:19:22 GMT\r\ndate: Fri, 13 Mar 2026 02:19:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ab850d710cb8d2c822eca52fcb39630d","sha1":"6b1016a61cb54834b42380de194088a39d0673b5","sha256":"acbf6e2b73bf91ea123df383211a180d57eb23c883a466afdec45a80fd03587d","sha512":"75908bb4facb97dbdbb3df2cdd51b28165d7d9c0dbd60997f507c7e79d44709c97566f25b5249bae201225d5fb83877c43734052ebfe858a19edfd9ba4ef471f","ssdeep":"768:yDdD9DADNDgBDUKD7DnDWHncXgLUahdPuOJ+gaULUIIV1ClghUULPy7bYLgXU+l5:GyDSegtxyllff","tlshash":"6b630e91041b5440ab834ce223cebf35fe1f92507151d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T23:42:18.856088Z","last_seen":"2026-08-13T19:22:31.143975Z","times_seen":10996,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":368,"dns":0,"connect":43,"send":0,"wait":65,"receive":0,"ssl":327},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/box2.7c398908d2b8ff5c9bff.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/box2.7c398908d2b8ff5c9bff.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/logo8.e503125f73ac5172ba10.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/logo8.e503125f73ac5172ba10.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 50691\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:24 GMT\r\nETag: \"698e6bb4-c603\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"ce366daca2b667dfeaf5a879494babaf","sha1":"9479e2b6f3fbde7527d7914c36f29b779465c123","sha256":"e2ab6c6bb58945f811fad74946abefe14ea45c3ad229e8ef32a37a6dc69dcd47","sha512":"b3630ff463f547f2f9b934183334d033f340e0f009c4c2e1eb1a87be3d596f2eb9ffb6d0d0946e0cb6f93e8d3e382d046eddf36c0b9e6f58e8887207da3a05ed","ssdeep":"1536:p2AFFc4vwSAbuBuEY/Vuukj1cZNRrpIhl1+lVGbH1M8:p22iowFbLjDkJczRqhl1+lVGbHq8","tlshash":"1e3302f117c60fff986a60a557d294e74a0d6942d9f193fbabc2a498d8ec3f03785018","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.307854Z","times_seen":81,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":6,"dns":3,"connect":20,"send":0,"wait":69,"receive":21,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/logo10.09da436bbc6e9556681c.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/logo10.09da436bbc6e9556681c.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 27835\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:26 GMT\r\nETag: \"698e6bb6-6cbb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"c79fc8db5fbcc29b6e2d6563623a112b","sha1":"36adf7c20ad6762feca653b982f37c472af3ce3d","sha256":"a0d9f60ba58da9b498aa2a59c1509a1c3f595a86cbceea6aca9c57d0b9677e01","sha512":"60e35dbb6e8ed09e4cf3ddc60b124712e738df331e9b7517be5fa7029d7b3de6ef8ab750611d4a45326893970627ab8e7c39d02e2bc3b41b341e63261e1b8331","ssdeep":"768:SYksj/Opl0vaha/bfd2T3ufzK0KlnFSAeS:jkszOoahAbfQ+umS","tlshash":"0bc2e1f962205ef9ae0aa5b3e9fc1870be7dc4e53371331c155a172fb094d0ae247994","first_seen":"2024-07-07T20:33:12Z","last_seen":"2026-07-26T09:32:07.342175Z","times_seen":80,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/16.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/16.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10106\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:02 GMT\r\nETag: \"698e6b9e-277a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"5bd83109a799306863207f91b7d2c125","sha1":"3d483f7972498b107788ddae2da8368b01d7ef32","sha256":"8e91630d19ac32121ccae71adbefb60bbc1466a263908352ebed1a3ce35774d4","sha512":"8e4f40983b62e855c8e3b90c656873b6c109fd3b34515331a83a69b9ab446cc8a692297109c021943b86b2e31d8be333172fbbd9a39538645576bbe55ff68d73","ssdeep":"192:WhgwCmGxmUxTgi4xF6L/yb2dyy2btr3jRTp98i3eS6Bz+cNiv8RY/v9K:6/CFxmUOxF0KidyPb1VTp98iuSa+iRYw","tlshash":"b922bf5ef3e5daa7cac165bdc89524a9dfa29e5056702a532c68ce42d80827902b10db","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.3616Z","times_seen":79,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":269,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/img/people/m1.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:38.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /img/people/m1.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8093\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:16 GMT\r\nETag: \"698e6bac-1f9d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 225x225, components 3","md5":"0494a27d95a44e39ecc75c26bae88d80","sha1":"24e08e6d8e2fb7aa59b03e79a2e7be88c9e0d9aa","sha256":"b3e969bf2f65119e1e98aeb49bdbd4b7cdb46ec3e7b4b1bbbd2497ff8c614d9d","sha512":"c76a1bf4f31b5e67edcfdc7605023d3e5f00611d7fca7c88a208e38f70ec7947c142af981589aa3c57d7b93307a1244e62c83139d0f93f11c7d960b2d03ee200","ssdeep":"192:Y/kVqp4tKtUvzDyW+h6TCh86dRs/QuIcshO0dXcm:Y/kEUvz9+hz86Mou+","tlshash":"4bf19f55d192386bd539aeb9cac87b8fd3da38522542d51378c342c5bc99bac08bbc31","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-08-05T10:33:26.379219Z","times_seen":76,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/lorealkino.css","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /lorealkino.css HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:08:48 GMT\r\nETag: W/\"698e6b90-e4ee\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58606,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (39840), with CRLF line terminators","md5":"185767078ecbee059c0d4700689b37a6","sha1":"a0cbc4666613aa1f0bbeaddedbd106142010afe9","sha256":"e7bdb06ed48d5d2489c361567e308a9a0081ac59f0b3a2ad6001e1b0cb04ffdc","sha512":"e38c2eba1c7eec434fb7c2605f779268065f07c9bdaf020d45682a629f0dba7997a2d05793dc190cafc77ea785c0e329b111548f0281ae073a4fd6d0ac26ac66","ssdeep":"768:RvsL+/Qo9oLVxa7iKdBh8W7iKdBhAqWsUwt5elfR+LMo:h0XKWQvnWQvAMbedto","tlshash":"3a436ca66708100cf90bfaf4fdb15feaa1215443b20350faa5e17499d9cf2e50377b8a","first_seen":"2025-08-19T01:44:40.543962Z","last_seen":"2026-08-05T10:33:26.374728Z","times_seen":51,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":48,"dns":1,"connect":20,"send":0,"wait":69,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 17:26:27 GMT\r\nexpires: Thu, 11 Mar 2027 17:26:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118376\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T19:52:04.893184Z","times_seen":258201,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":50,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":51,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":535,"dns":0,"connect":0,"send":0,"wait":46,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/logo3.3213fab10944ca343dfd.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/logo3.3213fab10944ca343dfd.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 13155\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:25 GMT\r\nETag: \"698e6bb5-3363\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 4-bit colormap, non-interlaced","md5":"eb440b0f396c21ad4bc8dc71d802cf96","sha1":"3a401d549281b5b5ddd50c9e5711a50e329cb89c","sha256":"48278dd9e707b56656f6c6fa7d6474520396ef2e33dd06a7eccd47333f3e9930","sha512":"326d7348465d192f2e4cbc96ea392c1b44a276a2f4e45b5f6bd5d7b03648951e1b294fc3fe58d01853bdf9fce069a3c5b3521b64caa58b489f4f8ed6b8c114c5","ssdeep":"384:dptLsMYVB61orAUOSEw0hWgFh3i6CnMYJ9rLxwTK4p:dp1sMY361orAUfLA3mR95wxp","tlshash":"9642bf297a5fd1e0bd9c8e861e28945740c5bc9b7112bf73994315acc02c22d9dc9f1a","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.333816Z","times_seen":81,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":43,"dns":1,"connect":21,"send":0,"wait":61,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 17:26:27 GMT\r\nexpires: Thu, 11 Mar 2027 17:26:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118376\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T19:52:04.893184Z","times_seen":258201,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":520,"dns":0,"connect":0,"send":0,"wait":58,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":522,"dns":0,"connect":0,"send":0,"wait":46,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/1.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/1.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12914\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:05 GMT\r\nETag: \"698e6ba1-3272\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12914,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"5cc46a667e35e5cdfd1718f74766c414","sha1":"efe5df228cd5232d689bcfadaddb303bdead5a49","sha256":"0e4bed1c6ac1dab94b9eebcb013641b463fec05aee854cc52338b55a96d8cd3d","sha512":"53c422c5845ceb87df825187a8355acd0047949a77d00910b5ba11262f8079d405c6e87ea199d0c12250742fd1aec60016eca6bf63d7fb582659f1951503dd11","ssdeep":"192:FPr2muKmzJD6Y9h1xOBPms5IqvGcN7MJb2oa7rGSv3h5UX3hU0hGpyCLUFIyt4Kr:tyma5Hx6PVZPJmna7rGMR2X3hUKGpyVL","tlshash":"7942b066308dbc34dd7938c938e10883a25d4ce326add54de34315a76a6bcefec6406d","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.367055Z","times_seen":79,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/4.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/4.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12741\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:04 GMT\r\nETag: \"698e6ba0-31c5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"305a66f652b6d42333bed692dfae2fe2","sha1":"a13c7b566837b007bdabec05b0ca8f36a7b7d67a","sha256":"688788cc84c1e47a85ad8c5268dbda119af2b234ace7a49e33c2f8d88ff810f1","sha512":"23bd66261e9ed589b5660aeccfe9c332af0b141968673816143ec5fa5b154587a2fa70ff5b86c2ddc882732e9726a7c69c7ed7eb1bc2353f361620c95b79fa18","ssdeep":"384:gsjyJ6da5j7NDOxIKn0xrKwh+ZhKJCrgx:rsAa17NDOjnWcKIrW","tlshash":"8f42cfc9d6b4a008e1b1b23519624b759ede2e64d69843cb4c6807f480f31ce9ea9fd3","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.323457Z","times_seen":78,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/favicon.ico","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:08:47 GMT\r\nETag: W/\"698e6b8f-3c2e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"4ae7188c230452e48a87a9c5767d5c35","sha1":"903529516e6c4b4963e6281015dde8640025901c","sha256":"4b2d50c26301f78e621062b3674550e72878325b9b72ee8755e9f8a5b2c4375e","sha512":"9c2ca66aa5613f9c0f54a3c0ba2b79f1b32ba531e45ced871f6bea4d9310bcfa4b5524bd81b765f24171c13b80819047c386f2bbb9a0f60de34b7e77930019ea","ssdeep":"48:tUPBgloYXSgxRzrr7oqqqqqqqqJH/4W2p2hbRN9xAZz7Gy2ZLz0x:twYXSscqqqqqqqqJfep2hbRnuZPGDQx","tlshash":"d862ef2556290019c147da335a964fbaffab3ad9dd031b35a3e1a70c9d22add37203f1","first_seen":"2025-08-19T01:44:40.53987Z","last_seen":"2026-08-05T10:33:26.364838Z","times_seen":64,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/box.3af34c06dfa92629e9c3.webp","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:22.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/box.3af34c06dfa92629e9c3.webp HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":426,"dns":0,"connect":0,"send":0,"wait":46,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":489,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/static/media/box2.7c398908d2b8ff5c9bff.png","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /static/media/box2.7c398908d2b8ff5c9bff.png HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 384839\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:25 GMT\r\nETag: \"698e6bb5-5df47\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":384839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"6bf5e02c1ef52ec23f8f23f45c462249","sha1":"779ba8d90830db7dc8febeefddd903e0f8ad9e59","sha256":"2e5137fb42a9834f9f32e05de810bb93e4bf452ac45c3d062bef4b02779bb014","sha512":"9d5ac2388e05b09ff2390bef143fc40af9e166d578f63cc883359ad44662cc806683a690d37546eacfb93baf3465443eaca13a6c4eb509de91b53b2b66a77d9f","ssdeep":"6144:/MmXU2AOBp5GVy6cJjrTwC0L3hEfY2gxUVjuGM8dQ8wIkHsr:/MwUROBpYUJPTwCmy8UcGMIsIkH4","tlshash":"61842336e3d5c32ae3d2da747c646068a18cacccc1eb76ff56dc198b84f0a5926f0525","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.338667Z","times_seen":81,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":748,"dns":0,"connect":0,"send":0,"wait":47,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":46,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":329,"dns":0,"connect":0,"send":0,"wait":48,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/3.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/3.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11230\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:05 GMT\r\nETag: \"698e6ba1-2bde\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"ad531a8df57280921e78b9fcc856c9d6","sha1":"00adf9da04f5926ff447881ed577a97e14f44a09","sha256":"373a837fca7955a3a947b7076823e45cc313908382d7904b11ae0fd268aae329","sha512":"a369115a65d2b3f5d25bd0e4363de01f485d599be67575b6a8f2a94b42848e7924ca880cae0f306d9efa5ff2ac0771282d4b6151ab75abb49681fec214a3996a","ssdeep":"192:j8bHh4buNVeZGcGJm+q3/B4CXALlIfvCDwFgLMXwl78yAE7Ahj+HCCa0L0aLHlaL:4zP4V54CXTfvCDwFgLMglwHS3L0mlaL","tlshash":"5a329f46fff5c101df6100fd298d5e516d548842ac938b9342c39fc6baa4af0e9659ec","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.344283Z","times_seen":78,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":488,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/fon.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /fon.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/lorealkino.css\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49931\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:08:53 GMT\r\nETag: \"698e6b95-c30b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49931,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1400x1400, components 3","md5":"704bcfafde370d3b84516d80ebacf0eb","sha1":"d83541778ddf6029b3ee64168221cff52046fe04","sha256":"70318ddbd4149af9726c0fdc037b433687acb186335c3c5fb46459e58f2468ca","sha512":"a8a1455fe838c76835cf3125160c7251cbcb0a855b13b86f1dcaffe3645f633729b278ac4c1d8df530287b751ab3638bd3a94e14178542a6fc735064dacff0d3","ssdeep":"768:0YAzjIX9/+nJ7RgitZVvnWT8a8xCZWB+5jAJuWyQ1mLQO3JpSQMggMXxiG9GL:03stG7Rg+Ny8ajko5jgYLQO3JpqsxB98","tlshash":"ff23f193b2705699cfc1b3370e59a615e5aa3db6880d890fca46ddd3716c8bc9c290cf","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.382286Z","times_seen":78,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":47,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10dxCF8jA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10dxCF8jA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 19:57:25 GMT\r\nexpires: Tue, 09 Mar 2027 19:57:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282118\r\nlast-modified: Mon, 08 Sep 2025 18:05:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13464, version 1.0","md5":"c3c999d86c40e0ae5cb9b11fe6f8f6b6","sha1":"9cab579edc5bd3be99685babd077cc186edc366c","sha256":"8b73730dac2513b137a7682f9abef928e2040491a2402babc255d05879c26b8f","sha512":"eb4d63a605d978b84b2fe3446f5ebf70b77e948841a2984e0701fe0299dfa8e1516a43369034d025db2dd27e026acb1063b5599a8612e3f83d43ad78819e7338","ssdeep":"192:roshLkCV+706GMnEj2WT6rYTEzPhdK2Mty1p0vcCn9JXu3qEZBEhOswlwzE/A10X:0sHunxW4QEzJd4qqf9JUqOEoP/BS98","tlshash":"6852cf3ff4219878ee37f279dd60904de166b58d0a206223e8a456f017edcd809e5a3d","first_seen":"2025-06-05T18:14:23.467212Z","last_seen":"2026-06-06T02:33:41.899684Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":546,"dns":3,"connect":17,"send":0,"wait":35,"receive":3,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d8nnui1j-gift.tooken6900.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 18:53:50 GMT\r\nexpires: Thu, 11 Mar 2027 18:53:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113133\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-13T19:24:09.455974Z","times_seen":11512,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":449,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/big.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/big.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 54912\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-d680\"\r\nContent-Range: bytes 0-54911/54912\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54912,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"b91086d5e3529c1fc3aba54450abe6cd","sha1":"248b2e6abbf3696f0f3a9786297df84524097672","sha256":"ac2cf95129f00a090f87e3e522fc7907405f9a290e505d59dee324ffc001631f","sha512":"d5cff8a0205df7b160af6680e714515067589079b8a1a9f71c2d7913bb9d5fe9cc458a8bb679eb227eed2310da169fd654ba28c271d286167fa1f0dfb17f2530","ssdeep":"1536:N25Va9cZTVd2HM4TAocwyaXAv0aysgZe2h:M36cZZd2mP3xv0K2h","tlshash":"dc33f06245636cfbd46ae73f946a17502dc31fa93c64d9c10861332192bfe2cfe25a86","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.368959Z","times_seen":78,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/assets/okay.mp3","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 45505\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:15 GMT\r\nETag: \"698e6bab-b1c1\"\r\nContent-Range: bytes 0-45504/45505\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/2.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/2.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20753\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:05 GMT\r\nETag: \"698e6ba1-5111\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"24fb66816f11c492c98a2dbc1ef5dcbd","sha1":"c539eaa8578402ee38485f3abaf1d790c315f0da","sha256":"ec6ecf781b20ee965063761ec320a95a7ec1cd8698d06776a7f9c999d5bf0ab8","sha512":"0c1658df82553378e71ef08c893f04ca9ffc17140de839f665f9a200a9de4194bea10d8c4f0a82160bbca0bd47c4cb8538ef89560a815af32d2536ef47ffe6ae","ssdeep":"384:DskbTDIPyKaLKmqG950AIAE0vGiJi7n5ZKJIUKFSIB7ut6xK68gfEcVBbdO:wuTD+ynmmqcmAp/vGDj5xzZ8gsc/bdO","tlshash":"ed92e07162f20e67f721aefc5564149a1b73c7b21e3d72fa6b7160102ed83804b2267a","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.343236Z","times_seen":78,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":291,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/6.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/6.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12174\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:05 GMT\r\nETag: \"698e6ba1-2f8e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12174,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"f17866694bdc9d6841bb0e378a49eeeb","sha1":"7ca28496a945ff917d84d12a0bb0329a8925b7bf","sha256":"95928987169ecc4370531be8d1161758c56af418272caa864da34bc75827d93c","sha512":"75bcdeea9f4f89cc4e28706c1fa0ba62bdb21f92b358ba8dceb535df9c896c49291b67d20b1b604955a94320dd82e12cf80a013826e8c8e26b3843564a8255db","ssdeep":"192:dS0Lx2RUtDRkC2KuuUwX4OrFacAuRSZJ+WCm/wMzelB3uGSfD6fF9YkaCuYLwX+:dSIDRkC2ZtoFapJBCizelW76fckadCwO","tlshash":"4d42cf82128001b6b0a545cfd9c232074f46c48ffa61a44c4a686bebfb55cf34fe6a27","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.334636Z","times_seen":78,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d8nnui1j-gift.tooken6900.com/cards/7.jpg","fqdn":"d8nnui1j-gift.tooken6900.com","domain":"tooken6900.com","tld":"com"},"ip":{"addr":"138.226.237.216","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d8nnui1j-gift.tooken6900.com/?FsxyoU=8F9vf81NUQ","date":"2026-03-13T02:19:23.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tooken6900.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 15:26:54 GMT","end":"Wed, 10 Jun 2026 15:26:53 GMT"},"fingerprint":{"sha1":"E8:05:E1:D0:61:44:07:64:A2:F0:19:0C:C7:72:25:9C:1E:0F:F3:D9","sha256":"81:3E:4D:8B:A5:75:6A:7B:33:9B:31:E4:AC:E7:81:54:DD:3C:36:74:A1:63:86:93:B9:B0:24:F8:EB:97:EB:57"}}},"request":{"raw":"GET /cards/7.jpg HTTP/1.1\r\nHost: d8nnui1j-gift.tooken6900.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d8nnui1j-gift.tooken6900.com/\r\nCookie: mem=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Mar 2026 02:19:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11202\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 00:09:04 GMT\r\nETag: \"698e6ba0-2bc2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"2905ac10fb3980b14b8184a4c709cfd5","sha1":"cbbfd50581dd0463caf2021518d1dca50dd7029d","sha256":"595d791f776f64f6dd3c925edd435ffe21baa46ee1af9a60510eb94fd6291f5c","sha512":"81906176af8adc77c2b05b2a278df89176fc3a2b582530f54be45170e7cb4e24cad85a6948be0f85e908a87bdf3d953cfea39c2fb6e88fe34da792276f334422","ssdeep":"192:yT8lHF1gvjH3/GG6V5HcTIrtZ2u5hqYw5DPc+KFXxpKWI/C+Rgu3LFnMckRlaRTu:ywL1qHPGDbcTMLzE5DP4jK9/C+RFnMcW","tlshash":"f332be1230ee0b09f837057b209c961b0dc8b8839646fd99265111d95bbf0efc9689ff","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.347711Z","times_seen":78,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}