{"report_id":"0b49383c-9123-4322-8084-86e97649eb37","version":6,"status":"done","tags":[],"date":"2026-01-23T14:37:00Z","url":{"schema":"http","addr":"to.lk","fqdn":"to.lk","domain":"to.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":0,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"title":"Short URL Generaotor - Free Short Links and Track Link Activites | ShortURL - to.lk","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"to.lk","fqdn":"to.lk","domain":"to.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":0,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-27T14:37:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"to.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-23","alert":"Phishing Block","trigger":"to.lk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"to.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"to.lk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":8,"received_data":138599,"sent_data":4652,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":1,"received_data":80652,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":15694,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"to.lk","ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2022-09-06T06:11:05Z","last_seen":"2026-01-20T14:28:15.66014Z","alert_count":4,"request_count":1,"received_data":36395,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-18T22:42:00.173248Z","alert_count":0,"request_count":1,"received_data":90137,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":410577,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"shorturl.lk","ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2022-06-24T14:10:36Z","last_seen":"2026-01-23T13:00:53.519869Z","alert_count":18,"request_count":18,"received_data":1192630,"sent_data":10583,"comment":"","tags":null,"fingerprints":[{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":4,"received_data":133264,"sent_data":2148,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-18T22:27:42.748663Z","alert_count":0,"request_count":5,"received_data":2658677,"sent_data":2399,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5ebf910b47ac9c42b701257e869fffdf","sha1":"aa9f043ab0fdfaf2424512111af28834ac6721f3","sha256":"bd73efe2cc285ae8e289d9fa42bb6d85eb9cb7c1c005630b3400903a22a817ad","sha512":"1913b1d31bd375f6be9b1ca1217ab22ec53f8aea89cb1750ef26c9925bfc66677d73974cd8ae88a8550794d6ff756d6f7e393576481427338ba93c811ced4813","ssdeep":"","tlshash":"46a0021d598da55e871532115406321c48b9db163d0a55086579c8e8376028d615aa3e","size":64,"data":"","first_seen":"2026-01-07T06:37:28.142181Z","last_seen":"2026-02-01T22:47:33.135965Z","times_seen":7805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5020396a6a45a88fd3b052cf3b0ac33e","sha1":"14a37d677a7648b6a4ae0c7a72598e79dc345f35","sha256":"768b0710686e19a357ab9c0759b93182230630dbb6ee42b2577afa8dcec3d0ac","sha512":"72b08bea22c86edc8ffa394492675d954122163b07269065d78b4e55e05b0e11c4e40ad373498554dc5713bea4a02417c2e3921ec117d2c83016ecc63ec0ee05","ssdeep":"","tlshash":"00c02bcc210a4cb592fb27808b7fb608b402331494d069314c4973048d30e07d748810","size":153,"data":"","first_seen":"2025-09-20T01:00:32.691091Z","last_seen":"2026-03-17T06:00:10.81229Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-06T22:09:39.544345Z","times_seen":478761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a43fbdae72f5754020e0f0d8c065840f","sha1":"abd38ade6294d815865dd53b184c6651e76d7c55","sha256":"e278964f0eebaa4e5de75ebf936eb409d29f3f80ed39a9b02eb78b3e7f839c88","sha512":"3cb480762cf4586910b6f500cf7f0cd29042cd8e62522fc1f92e2fe392dcbe2c5a1bd6421895d3eb822826b2721fd069987a8ee33b6a72c34313850ee7af11b0","ssdeep":"384:fRQkRIiTuu9TUUl1J8Vp+CLgIm9f1zh129XV7naeP7Vl3iAAyrDpIs:fekRtnFdOyhClTaePZlBpIs","tlshash":"ee92b7d9b541b66a8372a0b4413f211ee1bb3d52bc0c261cf254c4e57e38689526ff7e","size":19773,"data":"","first_seen":"2026-01-07T06:37:28.139264Z","last_seen":"2026-02-01T22:47:33.138586Z","times_seen":7794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"656e6d5554834e735d51b0f3cfb7ff30","sha1":"928b5a05bdb4b9d30ea204a7f110ad520ce9ef11","sha256":"fd9b0c26478ded1cfe5c4679f471ba59505cce140df40f5bf888f8a1d75be4e8","sha512":"18856b5d45f7f9ba4cf76457bb457934960edb81d7d00b3f17f1914c4baf6f166632b3fd30b0fba88b59606a4f3823ca0512b73ef996a34a14165c42336251a0","ssdeep":"","tlshash":"5111fcb21a04e0380f7209e1a2fbcb75e892701cf16889e8a5519a982e7addbce15585","size":1051,"data":"","first_seen":"2026-01-23T13:00:55.599096Z","last_seen":"2026-01-24T12:52:31.390771Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"661e6de411fff2120e88fafba7d6ad7d","sha1":"b48d5f750f412bfeec693cda5bba435dc81c22af","sha256":"0d3d318dd172afa36402e999e03fd03551d2703c357b3aa7027c61a83b604b7b","sha512":"a88cde9267f3597a0a38de955cc497fc8636651ac1fe8c5a4eb0e6e3540cb2d797e0ad3a4167b6303fdc12c47944edbef7f09eb322dd260fe02062dee2a29744","ssdeep":"","tlshash":"dd21dc95d4cd02e043a7b4ba2d7f1482b8a044071d087e09fd4c58ac0f19d6d72f0bb2","size":1419,"data":"","first_seen":"2025-09-20T01:00:32.692159Z","last_seen":"2026-03-17T06:00:10.815448Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac07bce4a3b5018cbcefdcef71deb325","sha1":"601e79549717ca163323a4a494285149408e437f","sha256":"fb787c9e3cdef7063bf64f26a3a6e57200bf420e8a51f1482655b1b8453b375a","sha512":"0a059d2bb08f7e9f1e00f69c29198d02c014ff1c8f40f20287f9f57cf6231143d61ee9e1b91f1edd5fde5a142abc96bce426f6e68b96663d39766ad3ed3ea7d2","ssdeep":"192:6PP7u47wOiwTClOYj/7bZYj/7bl12l9IbCU:6rwSgL+","tlshash":"8b227331f4b641bf063390f547bf6a196f92943f8042ee18781c8ae40fcc9a1f25a676","size":10514,"data":"","first_seen":"2025-09-20T01:00:32.69537Z","last_seen":"2026-03-17T06:00:10.81604Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DY1TF3G5P2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ac47257d96515572c179ad20e77687d","sha1":"617ff0299f9e1d0667b628b0edd70f99a998e935","sha256":"65ebef9553a1055e60e40886e21c77fe4020a5d2963cd1b903dd20babdfabcf3","sha512":"f1dcdbcc38475b968da4683c6e21ec7d807e6f0240e44b608655ea81a578fef672d1b124cb56f2712e6bb871fc369a2dd7718cc643ff1efbb665b7d895e76718","ssdeep":"6144:OJmMvkbWQAxJ508XYoeZlzlFldbKKCYTdqY0nqB7Xy:mmM8bWQAxJ508XYNljdqky","tlshash":"519419ce73d670269396f478403f118ba57b29a2b44cc899f189cce42e74a9a4137f7c","size":409973,"data":"","first_seen":"2026-01-23T14:37:04.541908Z","last_seen":"2026-01-24T00:19:00.129291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/js/active.js","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"96adc41b12f0fd608b06f0f88c87440b","sha1":"13b2c9216aeef1c69d4dbdc2463c24932d24d13f","sha256":"17fd34d9b38e0e8e5d0ce6a3961d91940947c63b7323139a376cffa17ffadac4","sha512":"d6df26f7c3920089d6ab2670ac3d24f566f2bffe4e260cbfd53b210f572e42537f0038a0249adac88805303748ed3b2db7de29159c7e60ef2ac4721bc1b5daf7","ssdeep":"192:pbb5se7w2St3w+vnlkE1Lb+vtWIHqqZYYBq6fhQzFtRI4:pbbmt3wubx7","tlshash":"6982729a5113503a45bb636fe66ac200f979a35bd441592b3dbcc0082ff3d2265b4fbe","size":17649,"data":"","first_seen":"2025-09-20T01:00:32.660449Z","last_seen":"2026-03-17T06:00:10.722258Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7566399eb2f22c3bd0c00d2fcd083c","sha1":"394e3ed4f94a8281f65ba9a26bfe19b7a2519087","sha256":"dece79c79aef9e61d79ea2e5320d2ff3f60eb1e68c35d89317a23f08ac5c4151","sha512":"b7227e2290e66377e61ce500706c8556024f66b2fe83bae33514f220d7a83f3a699c9c2c18d9aa02b4ffc4844d1633ea68223fb8a55638be63bb3b24cdb862ed","ssdeep":"1536:Iwk6ey/PIZHo+DqA55l6DNJZ8VUwzIYbRd:te2Iqol6DNn8BIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","size":79875,"data":"","first_seen":"2025-12-22T23:48:28.890392Z","last_seen":"2026-06-06T22:01:30.386974Z","times_seen":1252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc25937272078e21d6c4eacf0bb16429","sha1":"43a2759e8c3fd2c1fe32c523bf91a559c5f05703","sha256":"e6e85bcee3abdb28157774ad512d6797ac17ac35cb84d58d129053a72b2c86c9","sha512":"042431a18cdbc0d9a6439bca5aa120e6292d9abe5a9d1108b5e419b46701b831ae249151ca6dcbf45ea9916c16531748b21396b5ca319d4ea271a7a11a523ee5","ssdeep":"","tlshash":"c231d094d4ed11d147a774ba3d7f1842b8a044071d087e09fd4c58ad0f69d6d72f1bb6","size":1447,"data":"","first_seen":"2025-09-20T01:00:32.698044Z","last_seen":"2026-03-17T06:00:10.817522Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-06T22:12:57.099402Z","times_seen":463148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"33927f6e71a3182e72e01be2c45a1e60","sha1":"923cc2c59af3e13f4c398a618a9ada9997cac2ef","sha256":"3270c1496640065fc412eda3c637acf80c913e7bb6d46cc73e09affb7a391c7c","sha512":"6ae52378d5b36cd2e4059942486e9b3a9f104273d6062fde01eb1062c185e1e0764e97273b4a176d8695f47ff370f29d45d18e1dd35ef3a35a1e5232313696ec","ssdeep":"","tlshash":"2d70000aec083008223a302080cf2a080ab2080002000208000000800c3200a0382e8c","size":22,"data":"","first_seen":"2026-01-07T06:37:28.137208Z","last_seen":"2026-02-01T22:47:33.139089Z","times_seen":7795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/js/all-js-libraries.js","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"778c13354f291e02e6ad5a0ab302fab9","sha1":"c023b7c4e7e1c7c64c678d733b777d4c54748a7e","sha256":"c1e6df37904e884a75e03c0927fa421debcab3a2bc60694fb7a54bf91adb55c5","sha512":"25cbb688794c051be9c4aad740eb09e30716a128b7989f1c035aaa507a8cf42192b4c2e4b97036d7f68869f655ea508d818bc0a32ab95bd537c4949c02f367f7","ssdeep":"6144:8sj0osFupkMUxvS8RchiAnNZfaYceZfrageKsH7:Bj0osFuCS8RchdfLrageKsb","tlshash":"bd74400a77e52431d207b03a8d6f9509b235945b2e4aad0c3d5c92d85f2d83c9af6ff8","size":354627,"data":"","first_seen":"2025-09-20T01:00:32.657614Z","last_seen":"2026-03-17T06:00:10.733187Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7842ba2072df6bdb08a9a1e7d3e3f680","sha1":"c15800e831006fae53b26f7cf417d56da0cae289","sha256":"39c2b47416b0da5422b54ae71446b26856639baa35f400c0861827551b4c7293","sha512":"33adb43962ca8756d1c446858f7f8de280f3fcfbe8585b40301a364c77d8b53d378098bd463cc5013a2961f860b2993dd02b11c0b8b4676251220d4a491b705c","ssdeep":"","tlshash":"9ee0d869b8f631500a6b3829197b92497932f443710a8950398cabd01f359f8d463944","size":383,"data":"","first_seen":"2025-09-20T01:00:32.699108Z","last_seen":"2026-03-17T06:00:10.818129Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57fdfad261d3a688510a580d01176db7","sha1":"190ee9d7fa7d714639d8368051807cc855e6ae2e","sha256":"4e573eeb26bd029c9beff0ac38e430b9ab38e66450c5273a95e2c4eca0929793","sha512":"3968644bb06aee369aff65a7b1458297719fe44067675a454db10cc180229ddbe83313d6fbf1cbd4b6255737f015d749632232d1e2a4e7fdefef0155c146d072","ssdeep":"1536:3A1PIsxFGO96kX97Z8/eWuXj5tVtVDWvnH8x40OpNfJ77a7FY7t1RP:3ANIDOoMZMHuzvVDQH8xspNhP8Fw","tlshash":"1673cf36d74334ffcfbe9b4046e16aec13be514d298615dc51ba08c2897ddab25a81cc","size":74015,"data":"","first_seen":"2026-01-23T14:37:04.564956Z","last_seen":"2026-01-23T14:37:04.564956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a52a9933fa7be4bdeb621b21a0c9395b","sha1":"eda09bffe2053e99ebbe0f5c110de5a9a0b4b11e","sha256":"644abf44dee8a91b1664329aa2c9e26188d7094d67d88be821a80bf5aaeaff80","sha512":"57caf3c9fea4d26eca3fc02331763626092740ef6f7914a0ea345467bcd7350286e320091b92b6721cfe07cddae498df383fd20e5196e8dd6a6788d3e589b81b","ssdeep":"","tlshash":"1f70008aac0c2008022a3020808f2a080232080002000e08000000a00c3200a030a88e","size":22,"data":"","first_seen":"2026-01-07T06:37:28.140121Z","last_seen":"2026-02-01T22:47:33.141515Z","times_seen":7796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6b9cbb0f41819e568211c4015c7a3f4e","sha1":"b570fa641454dd3409f7d73ad5d9a56095652717","sha256":"fb741f53078e7bda64ee7199dbc2e41ef4872bdcbe45f05e917724f3f7849a22","sha512":"b5f6132091e6d3e6de2552382b01fbbc760ffe7dc2789abb1e571487256e728f1aca09f313c0413ad0e358d5ff8d17ac62edb97202c68fee2637e9722a1dfa10","ssdeep":"384:+RQkRIiTuu9TUUl1J8Vp+CLgIm9f1zt129XV7naeP7Vl3iAAyrDxIo:+ekRtnFdOytClTaePZlBxIo","tlshash":"c9c2b5d9f541b66a8372a0b4412f211ee1bb3d52ec0c2a1cf254c4e57e38689526ff7e","size":26498,"data":"","first_seen":"2026-01-23T14:37:04.56859Z","last_seen":"2026-01-23T14:37:04.56859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"shorturl.lk/","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-23T14:36:38.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; path=/; secure\nuser_token=20884025191769178998; expires=Thu, 18 Jan 2046 14:36:38 GMT; Max-Age=630720000; path=/; secure\nuser_agent=11868452804c8a2bb86650b580125ff5; expires=Thu, 18 Jan 2046 14:36:38 GMT; Max-Age=630720000; path=/; secure\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 10228\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":35980,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (684), with CRLF line terminators","md5":"f74308cb1a7bc656c65b5538adf10202","sha1":"583930734900e1d80882b356f5f04f6aee0f75ea","sha256":"98a7170f2101073db32d0b18fc0b94878384a2946ca91358d2484214705bb227","sha512":"35de5f1d9265a492a6460abfce38816cd014f2f78eebf16e4b9e705e82af1d9cd90f3df525c6135bfdb31e0fd014966a82a719ba02c98e9175859c79b029e037","ssdeep":"384:0MfR+OuOOTqKVltGyKe4c1+yhAVwhZBNT:5fcvVlYV0rNT","tlshash":"07f27036e4c5557b02b381e81a356f09ff92824bc60b86057aec1bcb1ff7c91d957a18","first_seen":"2026-01-23T13:00:55.596767Z","last_seen":"2026-03-17T06:00:10.809713Z","times_seen":8,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":54,"dns":1,"connect":21,"send":0,"wait":290,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/style.css","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Oct 2022 10:24:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12845\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90396,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1e0bc37eaa74cda3bcb81b02359e9e04","sha1":"7f3e1c1dff47f58290ea4a07eff3b8b2603f5307","sha256":"b732b037c9b2ce382db49aaaa9502abdf4202ef0d460f9cd287bd481e3f20018","sha512":"6334f997ec2f32201155d3c401f381f87f4259f4ee793c137adf8b75cdffe77cbd6cecac656ab31de1726fecf1a3fd3866a77afe808c6ba22b57d7502115c38f","ssdeep":"768:KsY2qTHVakVcvRQiZcVXPxg9IvPPP6jhcmEGFIRZlmT6FfdDl0dNuWoBkB6HAhu6:9E8j/T6Ku4YWJHpKh4UIMs1","tlshash":"739374e5a9b61204341b94196a991bd5733c9003aa0fde7cbbdfa01c8fc93d86573b4d","first_seen":"2025-09-20T01:00:32.663949Z","last_seen":"2026-03-17T06:00:10.804488Z","times_seen":12,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:20:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 4554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-06T21:49:19.967217Z","times_seen":26805,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":105,"dns":1,"connect":21,"send":0,"wait":13,"receive":6,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:40.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 3150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:40.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 23 Jan 2026 14:36:40 GMT\r\ndate: Fri, 23 Jan 2026 14:36:40 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"dc011820123ba7745da88094e558d501","sha1":"ca9ed775a451ed17f426795f4c926fce035a0f4e","sha256":"f1e9611d7795cd326e7d7976787823be8c1a258d2be43c91cdb43d447c5e4ac7","sha512":"58e9da875323ba2577a7263bf4c19cac84fed1386778f6b7793e821dfab0f2857d0cb0ba2691fa7c98c32a5a2399b7d2767e293618e24f5699e2a335571ac74e","ssdeep":"","tlshash":"bfb012a30611cc280c800a93e927dbb8e4066078ead0d0f5b0291ffc55301b74125400","first_seen":"2026-01-15T01:58:18.123308Z","last_seen":"2026-03-14T22:28:56.501982Z","times_seen":21042,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to.lk/","fqdn":"to.lk","domain":"to.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-23T14:36:38.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: to.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://shorturl.lk/\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35980,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":55,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"to.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-23","alert":"Phishing Block","trigger":"to.lk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"to.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"to.lk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/css/custom.css","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Oct 2022 10:25:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 384\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1023,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"71599ffd32d23a2bd170e05456312897","sha1":"5065c0b77626fa4013f1bb1be24664f1607c147a","sha256":"3d50f146b3c0ef5d3fafceab830aad6854ac72df8cdbdb7c4d918205d1876b4f","sha512":"ba0165271319d027c0511b66ab959694e27ab1f41689a8496d00c74e439d0f61c63813ab836bd79ab5ef9e4b7df2f5b8ca9d72e0deba19ac7996b2d3cca48900","ssdeep":"","tlshash":"fa118c5c4b661701563b0a65ef9363aaeb9810538b0623acbed1a2058fb5128a234fcc","first_seen":"2025-09-20T01:00:32.674252Z","last_seen":"2026-03-17T06:00:10.787817Z","times_seen":12,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/short-url-stats.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/short-url-stats.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Feb 2019 07:03:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16151\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0398f04bee76592254d65dc227a56bba","sha1":"d1ecc3fdf49699b0394ee3533dc044c3088472b4","sha256":"bd5d87f03886b6a9fbfce45567c317c2d8d4103951e03007702c4d0eb41927e9","sha512":"dc6f43281416ab191c60639553ba7c64d83af4f105aa51a5d182a45c790172fc3fbb636f0ea052483684814336b740c826effa15bf7623d6d3e6accac86f2957","ssdeep":"192:SLDHTSYWk3OYnwaHtQx4YVlv/kTpfvzz90UHfKsAJDKav0nDbWKNn2wcHzPGRacZ:cOuto4Y7sTdzRvysmDKa7svcTeEu","tlshash":"fb727b4acf211eb4d24d263ee9b85f9c3db92bf9762bc43c4a447c3d604d28668a1a45","first_seen":"2025-09-20T01:00:32.659261Z","last_seen":"2026-03-17T06:00:10.7631Z","times_seen":12,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/short-url-generator-logo-footer.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/short-url-generator-logo-footer.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Jul 2022 18:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8157\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"0da35ea24009531fe7cdf66fbb679a67","sha1":"394116e2f34bec3ce79e0df24327d038909e985f","sha256":"5b00c1c8bbf82a06538a66919dad8650f03dc8b212bd41c3ea9c41a0f07d56a7","sha512":"4006b6d26f6eb5faae6826592c11b240083f4096c3dbb23c835157faa52fe488d3cba30ea13afcb5b572e3f8c5a50c57eb9c71fe1b34b362e9dfa0b72f330749","ssdeep":"192:oEkn/jLoS2Hd3b9Y7YCYerhp9X3pmayLiR:onn/jLiHdbea+DYayLg","tlshash":"cef15b00b764fd924a5db39c44edd197c7b78fa1aae1400e6ec8c8391ed11aedd8e0c2","first_seen":"2025-09-20T01:00:32.66605Z","last_seen":"2026-03-17T06:00:10.714324Z","times_seen":12,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 3149\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":53,"dns":2,"connect":21,"send":0,"wait":24,"receive":91,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:42.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shorturl.lk/\r\nContent-Length: 1729\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Fri, 23 Jan 2026 14:36:42 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/js/all-js-libraries.js","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /js/all-js-libraries.js HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jun 2022 11:19:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 65249\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":354627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (615)","md5":"778c13354f291e02e6ad5a0ab302fab9","sha1":"c023b7c4e7e1c7c64c678d733b777d4c54748a7e","sha256":"c1e6df37904e884a75e03c0927fa421debcab3a2bc60694fb7a54bf91adb55c5","sha512":"25cbb688794c051be9c4aad740eb09e30716a128b7989f1c035aaa507a8cf42192b4c2e4b97036d7f68869f655ea508d818bc0a32ab95bd537c4949c02f367f7","ssdeep":"6144:8sj0osFupkMUxvS8RchiAnNZfaYceZfrageKsH7:Bj0osFuCS8RchdfLrageKsb","tlshash":"bd74400a77e52431d207b03a8d6f9509b235945b2e4aad0c3d5c92d85f2d83c9af6ff8","first_seen":"2025-09-20T01:00:32.657614Z","last_seen":"2026-03-17T06:00:10.733187Z","times_seen":12,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nage: 3908052\r\nx-served-by: cache-lga21931-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 611905\r\nx-timer: S1769178999.933856,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-06T22:09:39.544345Z","times_seen":478761,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":40,"dns":1,"connect":14,"send":0,"wait":15,"receive":8,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.17\r\nx-jsd-version-type: version\r\netag: W/\"13803-OU4+1PlKgoH2W6mia/4Zt6JRkIc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nage: 42779\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79875,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48887)","md5":"0b7566399eb2f22c3bd0c00d2fcd083c","sha1":"394e3ed4f94a8281f65ba9a26bfe19b7a2519087","sha256":"dece79c79aef9e61d79ea2e5320d2ff3f60eb1e68c35d89317a23f08ac5c4151","sha512":"b7227e2290e66377e61ce500706c8556024f66b2fe83bae33514f220d7a83f3a699c9c2c18d9aa02b4ffc4844d1633ea68223fb8a55638be63bb3b24cdb862ed","ssdeep":"1536:Iwk6ey/PIZHo+DqA55l6DNJZ8VUwzIYbRd:te2Iqol6DNn8BIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2025-12-22T23:48:28.890392Z","last_seen":"2026-06-06T22:01:30.386974Z","times_seen":1252,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":74,"dns":9,"connect":37,"send":0,"wait":27,"receive":6,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:20:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 4554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-06T21:49:19.967217Z","times_seen":26805,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":105,"dns":0,"connect":8,"send":0,"wait":11,"receive":4,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/css/fonts/bootstrap-icons.woff2?08efbba7c53d8c5413793eecb19b20bb","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /css/fonts/bootstrap-icons.woff2?08efbba7c53d8c5413793eecb19b20bb HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/css/all-css-libraries.css\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5; _ga_DY1TF3G5P2=GS2.1.s1769178999$o1$g0$t1769178999$j60$l0$h0; _ga=GA1.1.1955246304.1769178999\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:39 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 06 Jul 2022 07:59:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 102380\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102380,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 102380, version 1.0","md5":"b57a58905370284f1499d1a35f5d2c96","sha1":"729751b69abdc0dbdd1df847dcaa04fff512d49a","sha256":"a29357cb76994874d2a7473fddbc265f1867b52957e8f3a1bd3d5538f231fcff","sha512":"fc235d400b7164af5a8b5be04dbed45457173cb4fd29a7b1b2a20467ee254b4f30e4c7dc16b3309f0d5c1a7123b2cad5e9d7d07d9525c46bd3d633b44073c60d","ssdeep":"3072:NH68cfr3gKkMMbFFn7w8OOh+ulBc29HBP:twDwzF57gn29hP","tlshash":"9da312ff368b67a13a41f6365405f308dae670bbe456cb4ca589442980ffa5fe127630","first_seen":"2023-05-03T16:45:21Z","last_seen":"2026-06-04T07:37:42.866569Z","times_seen":481,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\ncontent-security-policy: script-src 'nonce-1d5OAM5J2onurISlxfV9Mg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92425,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47148)","md5":"62c3b521184383fc9376e28f901fd9fd","sha1":"c9ab53894913b1c84a49e4badc9e1f0343a26cae","sha256":"25353b030843e5d3bfe0c11822d761120d4dc69e1d5b64e9b98d277ede1b7412","sha512":"91db967a6933e63fba307d4fb161eba0851f848a9165667e71b269ec55edc90d2a296d7dc954bf727c11614e632560e96377ffe01b8d9a3c2dd030fbe8aa8731","ssdeep":"1536:y+khbN45fA1PIsxFGO96kX97Z8/eWuXj5tVtVDWvnH8x40OpNfJ77a7FY7t1RW:y+khb6ANIDOoMZMHuzvVDQH8xspNhP85","tlshash":"8a939e2145032496cfa78ed113d57f78e67e9249314250e866fe0bd79dabc9b21a83cc","first_seen":"2026-01-23T14:37:04.532206Z","last_seen":"2026-01-23T14:37:04.532206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:42.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shorturl.lk/\r\nContent-Length: 1729\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Fri, 23 Jan 2026 14:36:42 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:42.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shorturl.lk/\r\nContent-Length: 1729\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 23 Jan 2026 14:36:42 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:09 GMT","end":"Mon, 23 Mar 2026 19:53:08 GMT"},"fingerprint":{"sha1":"48:33:DD:3F:0B:48:93:34:93:FB:CD:86:06:0B:02:0A:26:C8:9D:34","sha256":"51:93:52:C6:2F:18:71:EC:3A:8F:29:E1:74:86:FF:6C:A2:EC:19:58:65:2A:9C:A2:DF:E5:86:6A:E9:6A:73:7E"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 23 Jan 2026 14:36:39 GMT\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1051,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051), with no line terminators","md5":"656e6d5554834e735d51b0f3cfb7ff30","sha1":"928b5a05bdb4b9d30ea204a7f110ad520ce9ef11","sha256":"fd9b0c26478ded1cfe5c4679f471ba59505cce140df40f5bf888f8a1d75be4e8","sha512":"18856b5d45f7f9ba4cf76457bb457934960edb81d7d00b3f17f1914c4baf6f166632b3fd30b0fba88b59606a4f3823ca0512b73ef996a34a14165c42336251a0","ssdeep":"","tlshash":"5111fcb21a04e0380f7209e1a2fbcb75e892701cf16889e8a5519a982e7addbce15585","first_seen":"2026-01-23T13:00:55.599096Z","last_seen":"2026-01-24T12:52:31.390771Z","times_seen":4,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":183,"dns":1,"connect":27,"send":0,"wait":63,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:40.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:25:21 GMT\r\nexpires: Sat, 24 Jan 2026 18:25:21 GMT\r\ncache-control: public, max-age=604800\r\nage: 504679\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-06T22:12:00.197497Z","times_seen":647330,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:42.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shorturl.lk/\r\nContent-Length: 1729\r\nOrigin: https://shorturl.lk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Fri, 23 Jan 2026 14:36:42 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/reasons-to-use-short-url.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/reasons-to-use-short-url.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jun 2022 07:17:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20505\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 750, 8-bit colormap, non-interlaced","md5":"33ebd4d0e76976fd118b2e901125940b","sha1":"e378731d6be7136b1cbb6e9c514bd7a9bdbb9567","sha256":"21aa1c8e2ae521a46efa0ad14f6278ceda0fe6c0e450d057cdce5622a95fc588","sha512":"0479d02f24fb94e6690853b7986871260c4dfea37e8c71a39fd4421746f25996c576c8203194c0ef309fcc9a5a41d56ad0773ce99b32c3d03dc0016301eacf1b","ssdeep":"384:zsQVvp73CqAlbBfenyjFAh12cQLQK8hnFJpPV2W7cfuOO8JR:z/VvpzCqAlbBWqFAhAcxFPPVzgfZrJR","tlshash":"0992d0e1c1b0844db1c1ff66c6f8f1e5e03a6151ce9ee29946d2d06b0a4c172a69eda2","first_seen":"2025-09-20T01:00:32.667049Z","last_seen":"2026-03-17T06:00:10.768597Z","times_seen":12,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/css/all-css-libraries.css","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /css/all-css-libraries.css HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Jul 2022 14:41:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 42636\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":385698,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"7a7640f7f160aab735e454d175dfd697","sha1":"5d4d57c52c9d2002478bca0630317744b5657c6f","sha256":"5c45c1a12587a1e4a6210882078421b72ca192a4ca44f86307e3ae173c5c8c6c","sha512":"c35519945b9fbc5e5763a564b5128a228b0b49c2d2c2855bcfe85a944fd51e0a6b06fec12305f65842046edfb9bec999e51309b0ae969f0a5ca2b0c63906a35f","ssdeep":"1536:f6yjiuVPu/FgKteIwRhiHr6dHvXF7AC2BdQVUsoyyZ1dw9bKShho0X50MudtIjND:VSgKty/udtIjNbPZLIZ8Qj01b","tlshash":"6184627ae9d600987213816827c77ba4a76db05ac205dc7bf2d324addfc138859e37d8","first_seen":"2025-09-20T01:00:32.654652Z","last_seen":"2026-03-17T06:00:10.76074Z","times_seen":12,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/short-url-generator-logo-header.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/short-url-generator-logo-header.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Jul 2022 18:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8157\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"0da35ea24009531fe7cdf66fbb679a67","sha1":"394116e2f34bec3ce79e0df24327d038909e985f","sha256":"5b00c1c8bbf82a06538a66919dad8650f03dc8b212bd41c3ea9c41a0f07d56a7","sha512":"4006b6d26f6eb5faae6826592c11b240083f4096c3dbb23c835157faa52fe488d3cba30ea13afcb5b572e3f8c5a50c57eb9c71fe1b34b362e9dfa0b72f330749","ssdeep":"192:oEkn/jLoS2Hd3b9Y7YCYerhp9X3pmayLiR:onn/jLiHdbea+DYayLg","tlshash":"cef15b00b764fd924a5db39c44edd197c7b78fa1aae1400e6ec8c8391ed11aedd8e0c2","first_seen":"2025-09-20T01:00:32.66605Z","last_seen":"2026-03-17T06:00:10.714324Z","times_seen":12,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/custom-alias.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/custom-alias.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Feb 2019 07:03:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27548\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27548,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"02eb1b969abed49347897eb812b4dad2","sha1":"08d7c8e594f4576b44ece6158d4b5d2a902044ee","sha256":"1afd8fb0a4e8f551cc93053e80b617b6e77c2bd11cace478133b2bf1f95e46cd","sha512":"e730c62ffd005c8e1763e21282f744d49325c68ea1137f5acab5e3d1195c8a39083ab13200838ef5a1e521ec7a0342302c0f701f6aab39641f5f3da70224b335","ssdeep":"768:U+ActevymG2VwD5pZI6pPyi6dd/SMI3OtOaMEt8gGI:ptevyWVwDppn6dNSzQOoj","tlshash":"a4c2cfc0646634722d63bb2f5150bfd8d020568edfa3f75c6d92dd43808e2da1daac9e","first_seen":"2025-09-20T01:00:32.683738Z","last_seen":"2026-03-17T06:00:10.802749Z","times_seen":12,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/js/active.js","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /js/active.js HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 26 Sep 2021 18:33:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3298\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"96adc41b12f0fd608b06f0f88c87440b","sha1":"13b2c9216aeef1c69d4dbdc2463c24932d24d13f","sha256":"17fd34d9b38e0e8e5d0ce6a3961d91940947c63b7323139a376cffa17ffadac4","sha512":"d6df26f7c3920089d6ab2670ac3d24f566f2bffe4e260cbfd53b210f572e42537f0038a0249adac88805303748ed3b2db7de29159c7e60ef2ac4721bc1b5daf7","ssdeep":"192:pbb5se7w2St3w+vnlkE1Lb+vtWIHqqZYYBq6fhQzFtRI4:pbbmt3wubx7","tlshash":"6982729a5113503a45bb636fe66ac200f979a35bd441592b3dbcc0082ff3d2265b4fbe","first_seen":"2025-09-20T01:00:32.660449Z","last_seen":"2026-03-17T06:00:10.722258Z","times_seen":12,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DY1TF3G5P2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-DY1TF3G5P2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\nexpires: Fri, 23 Jan 2026 14:36:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138525\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":409973,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"7ac47257d96515572c179ad20e77687d","sha1":"617ff0299f9e1d0667b628b0edd70f99a998e935","sha256":"65ebef9553a1055e60e40886e21c77fe4020a5d2963cd1b903dd20babdfabcf3","sha512":"f1dcdbcc38475b968da4683c6e21ec7d807e6f0240e44b608655ea81a578fef672d1b124cb56f2712e6bb871fc369a2dd7718cc643ff1efbb665b7d895e76718","ssdeep":"6144:OJmMvkbWQAxJ508XYoeZlzlFldbKKCYTdqY0nqB7Xy:mmM8bWQAxJ508XYNljdqky","tlshash":"519419ce73d670269396f478403f118ba57b29a2b44cc899f189cce42e74a9a4137f7c","first_seen":"2026-01-23T14:37:04.541908Z","last_seen":"2026-01-24T00:19:00.129291Z","times_seen":2,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":144,"dns":1,"connect":7,"send":0,"wait":32,"receive":24,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/hero-2.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/hero-2.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 Jul 2022 15:14:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13064\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1028 x 575, 8-bit/color RGBA, non-interlaced","md5":"bf8603ef897b797368e33e0496cd17da","sha1":"964045b735c1e8d57069985576f0c7fe99e4e09e","sha256":"0d91f7f02ad72939dcbfbe1035bae4010b6e5982425bb2d96dec418b83b4df8d","sha512":"e150c9218db886463ab09af509d7ff946da9a231ef1b0f3a8e1a9e78e4928f5ba024431c453866af5a4421cd43953fd2d17e776801c88d3c186af40de90db85a","ssdeep":"384:l+n7i/Lt09r0rlKkd17X87XZbKXDABaigmBJbpQCD7uKG:s7xFqlTd1MbiAXlBBpQwu9","tlshash":"3042ae195df79c8380ebdbe29afd920e756717e21242259b49cf0d7a2d0f43ead1108e","first_seen":"2025-09-20T01:00:32.67526Z","last_seen":"2026-03-17T06:00:10.800275Z","times_seen":12,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/local-domain.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/local-domain.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Feb 2019 07:03:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33005\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"bcfe66258ae46258908960c22582e967","sha1":"09a3ace03e1599761bd64f057877837cb29eef05","sha256":"e496ae1d44f58b1107c942c97d3430e30e094f02b93d96e755dd4425b9fd22f1","sha512":"e9c1dddb13bede6b9b698faaf0e021cafcf31638313c2ef892fdab235c9ad35ae49c3ac3b4c17d913943b724fa89aead056e4b49673d8a809cb6014aa255b6b2","ssdeep":"768:dCEkfWYJVvpIaPF9QTXYQM8y+Q/my5TYKASRt0LW5uyCHkjkX:dR2wmFrZv+QvhYKAwt0CTjkX","tlshash":"05e2e17eecfb99511c8ee478ab6d18ef8b7a74e74e418d832fd0665da816025300cd4e","first_seen":"2025-09-20T01:00:32.669977Z","last_seen":"2026-03-17T06:00:10.810615Z","times_seen":12,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/favicon.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/favicon.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5; _ga_DY1TF3G5P2=GS2.1.s1769178999$o1$g0$t1769178999$j60$l0$h0; _ga=GA1.1.1955246304.1769178999\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Jul 2022 19:04:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14721\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"654c583feefdb67d3fdfacaee23ffd10","sha1":"7e1ddcb29e2dc2948f860058fd3e0ba3cd84cd6a","sha256":"639d7a6b9639ea2e5e706648fe0d6de1703779042df001a36a2327e69892fd41","sha512":"2db05fe579b8069b7033a5670dfb103f18b252214b45c22ab128d94d9b3cb11ee1d2fc662a54e9cc9a5b6867433811da68f38e63e9fdff8b88947797e729ccce","ssdeep":"384:BnPGYiOr/NW5vpXGwitkvWOYaj6063Ywkzm1NVUUa6YhwgXrjI:B3L05xGwi0MajQ3YE1NeUHYnHI","tlshash":"5762c048f5705ac0574cea9061ae816f9b7331e2cf92ac6a2c6eced36d305f9d54a0c6","first_seen":"2025-09-20T01:00:32.677351Z","last_seen":"2026-03-17T06:00:10.737339Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:40.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42553\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 10:12:04 GMT\r\nexpires: Sat, 23 Jan 2027 10:12:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 15876\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e6fd8b6da2dcf5ca36317d505430750","sha1":"4909b6a1aa64d81acf66992af2f963a2ad82600d","sha256":"08003ec505dd59b8ccc0207938aa40d0ee43099fbaff76d2301cfe614b997e9f","sha512":"10b39a632b56defdca12f351df51b32d94ffc82939997fe087601f1016fc441788c0dc8559e8090c9bff30890587aabd0c59a2e7171ae7b6f63096acc2e43bab","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOiLX1","tlshash":"b5838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2026-01-15T01:58:18.135687Z","last_seen":"2026-05-06T01:17:01.463408Z","times_seen":21669,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:40.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 10:06:28 GMT\r\nexpires: Sun, 17 Jan 2027 10:06:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 534612\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T22:11:14.699338Z","times_seen":871521,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/short-url-lk-home-banner.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/short-url-lk-home-banner.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jun 2022 07:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9416\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 430, 8-bit colormap, non-interlaced","md5":"434b17184145272bd5ed1044a4270abe","sha1":"964a494da1fd6200c92143848be6e332d46b9954","sha256":"a75a853ea0dc91841ad444a105e573880455f95bb2355e42991eefcfede0addd","sha512":"e9424612637a74d99113e64ab2663abadc5fca8487cc5b4aca44550d6fb20e826f3b1cd19fb952809d6bc32e4f24f883f619487e074e37b81810dbab1303afbb","ssdeep":"192:/AlV9cQjxkWwx4+n5tOjMRIrHUPBAtnqk9jIrjvPHM2I:4l0Wwx4yvtRTPBkn7IPPs2I","tlshash":"0b129eab5104b86d839298e66694d548b4835e7e563f33f020a7f25f09ffddef064882","first_seen":"2025-09-20T01:00:32.676245Z","last_seen":"2026-03-17T06:00:10.771425Z","times_seen":12,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/short-url-create.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:38.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/short-url-create.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Feb 2019 07:03:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25139\r\ndate: Fri, 23 Jan 2026 14:36:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"99efccf660548fb8fde1abcda986d65e","sha1":"06826ba92d3baba023ff283ad06271faffb64c72","sha256":"e266c10e5a3a5959f1ae77cdaa396600f9ee24c71b1ecc61a1d25e2320b054ef","sha512":"f72baff9bbfbdf4bb3414a95eaa86051d8691bd2209be49ee8c9e3fb020914cfb2ab85fde5b825c6a73e62497d6a0346d8bb30a6256a9bdee851fafe3d14cfaf","ssdeep":"384:i8kgGJQBdRTjK+DlToAOLKLHGrej52abxlf8zoUeEUpgB3ECHHGPfH6lt10oE0AN:iSHRTjnDlLOAEej5XL8cULECHHG3M1q","tlshash":"37b2e10d301ec96b93579c581e198bce60eafbf4f8a96cf81179c508d270d5b892a3cc","first_seen":"2025-09-20T01:00:32.679238Z","last_seen":"2026-03-17T06:00:10.801642Z","times_seen":12,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Manrope:wght@200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 23 Jan 2026 14:36:39 GMT\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15008,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0ad4e9cc8948899d25eb47a31cace209","sha1":"c8a2ded69bfa8d2f4293fd3324009b36b4050256","sha256":"73ef72e9f525460bf321f3797f3c6d37aa65ea44ff78062c406fca0d98a55fc8","sha512":"1467da169a56c9e04d571063cfb541534f96920a0645641209b6e0dfcb36ce1313811515479a11731e59d2344622478ed1602dadf4531184524e611cddc867d7","ssdeep":"192:BJRKV3II8XDJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJH0:bMEmkwU+ME02EQJ","tlshash":"7962a9900027e804eb470cd677ce7e39ad4e61567491c5ba5bfe1cd8adebd222320b5e","first_seen":"2025-09-05T04:53:42.941084Z","last_seen":"2026-06-06T19:52:08.769549Z","times_seen":3141,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":94,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shorturl.lk/img/core-img/4.png","fqdn":"shorturl.lk","domain":"shorturl.lk","tld":"lk"},"ip":{"addr":"209.42.255.1","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shorturl.lk/","date":"2026-01-23T14:36:39.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"to.lk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:47:53 GMT","end":"Fri, 10 Apr 2026 13:47:52 GMT"},"fingerprint":{"sha1":"3B:8E:2C:74:5D:34:38:AE:8D:E4:22:7D:1D:8A:AE:12:E6:77:80:D3","sha256":"F9:B5:8A:EE:92:F0:40:30:85:67:A4:75:15:69:32:D3:EA:C0:A6:17:1F:61:01:A3:48:C2:8F:41:E5:22:8D:BA"}}},"request":{"raw":"GET /img/core-img/4.png HTTP/1.1\r\nHost: shorturl.lk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shorturl.lk/\r\nCookie: PHPSESSID=c2a506e88ab2b4fb289240b25237d67b; user_token=20884025191769178998; user_agent=11868452804c8a2bb86650b580125ff5; _ga_DY1TF3G5P2=GS2.1.s1769178999$o1$g0$t1769178999$j60$l0$h0; _ga=GA1.1.1955246304.1769178999\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 14:36:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Sep 2021 01:21:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23251\r\ndate: Fri, 23 Jan 2026 14:36:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1150 x 350, 8-bit/color RGBA, non-interlaced","md5":"659056ead526f04234848d474c3acf35","sha1":"df8d6e6e6d2b6471c5cf6e2b0207cb306273b075","sha256":"3f2b31488b01c8e21e948def6afe1290c0c895f0b5f3cca002b5b0d000626c76","sha512":"05dfb799688587e6c6f8bd9caeaf6c935a6d92de68eabdc6736688ad976ea1c25a3aa64dc7e51759849411339b3944ad7771625af746eb5e01abe3d7a0a18a91","ssdeep":"384:lnELwtPjzmnfwjhVff2FIrh9dl1CrE26xLXXgT5clLQfJKvlyALP:lVPmf0fOSrncrE26JXgT5kLQ8vlRLP","tlshash":"c5a2c005e2b7e809b85a2ca5f1c5d2af1d7943c08ae045f774eccd294d8c1e987a998a","first_seen":"2025-09-20T01:00:32.671162Z","last_seen":"2026-03-17T06:00:10.735759Z","times_seen":12,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"shorturl.lk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:40.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 10:06:28 GMT\r\nexpires: Sun, 17 Jan 2027 10:06:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 534612\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T22:11:14.699338Z","times_seen":871521,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ","date":"2026-01-23T14:36:40.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 3150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/reload?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17","date":"2026-01-23T14:36:41.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /recaptcha/api2/reload?k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuffer\r\nContent-Length: 11597\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0026co=aHR0cHM6Ly9zaG9ydHVybC5sazo0NDM.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=c4a4xibh4u17\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11611,"data":"\n\u0018PoyoqOPhxBO7pBk68S4YbpHZ\u0012ù\u000b03AFcWeA5fr9hX8ztT67QkZbzmo_a5ymNXl-ny0nr7GeXVfEt8NG0veaK3yTyDDIkP7VYsRUHb1QDX6-76lZgIN8kF_5qKkDiuHPEAIyj0Fp0HrsSRVafOC_AMdY8uNKAqvR6OFoV8CxH88HCM6yTfg-UkzBP-Yo6dQm63E-Drzui1b2jRsF1lc8lOxxceELiebFmuzzdl6KmhknczYzIltIff5MsY7cm_UmJXkKxnbm6bEwWam1w_j1knP47_8u775kx8zTdXrdOiiWAnHBltujrmClGG6F6W4yulz5eAmJYidOg6niiuuZtqhq-A3xJ41FO64YefHjBj2b3_8KDCCMQNuWPD-ISb27yIbwv5UqwFkZzniAGX4HR44sarXdsanLUckf7GpwnTPzrgxQQyVRRQUPr_xkAwiKAxO-JuY991ESH4ixY5AzAqZtn6mzAKCzOrzrtTpDiLDguk0A3U0Hz3k7-uOhmDQqHd032Qp03o9_up8q9LSYx8RXXN8pWSEssK8VjIlczuj2-_uweMlh1yMHfR9XxwSJTSkI-L35sRgnV9LWgGcRGLLy2nHuZNP3vzryGyuHxvf_wGMKqyWrcpAIwdcmvgSYwg3WuHQbQ51kRNfgwzOJCkeDaSF080v2w6Ggc7tFEtNDQbt7wI71bnSmfpHeRtJw49rx0Gz_vY7p4tG_y8ziVSc84ewPSPuMkscx8x-2B5-CXH3MiX4u33BabsZ4fmaaL-rw8suungRcyrqfOLJl5SKGyVskTNmrq-SAM8Gr7-hV2JD6LgkBmR4bA3c1sVN4SvFyhFhN2tFJG7EbqsO1UZbhn_sbeNut7T_lz0-ulKM9z--Bh0YPD5bwiTy5g5ssGilMjcbiDQU86nbat7D6m3UqLZ-dNBOMkESfUSOBLJHahrrYkMGbJsMxqxPCpx-0IB-439aFLsohBw3EtYZHa8zmU82hhQFtav4yHKzUENs8iFu3hN82N4XnsP4aZAt_hIi_ZVQr0y7dfPNM28esxRJExkT-8e9bKf3bPfgMe6HDKQaO75iMmFIBrJo6_KzSbedTShPO1oryZAe-TBRfL6Y2tkmBZ-JsdzVnHvUAs_BtchLbFLYdT5QikZUhmS_wChW1MgFRkXa8k4iw3pHtQ-t4-cSMCbCeonBbyDnn_DO903QNnSVCLiYJ3vREYLpIcjROtJIqMOB0WnMMa4Y0MjGWgU2IGNi-XeDPcYayVYE-B2dKJIWQFcAayzUOdkj3-Tc3kFFF0IAboAXtK28nSJlLhHvrsDeS4RIaPNgNpg1HJJbrae6sJbkSZaNjxnDGQL33YhdAagRCBBYt_FfMwJVWD6FbzXx3ktm0afpHTWGWQGjgkvgg-5W42Gv9TbtY6tdMVAOmCw2wuIEWYlF3gCv-f3lyHNzDucn1cHaFrolm_OvgvO58veZeVnSF4oD1FXhffcZCWILtHHn0trd27l6LPLt7_M7XHxnsLdgggNE85xTQ8RzphtsUFms0bi246TatpEwR4AAsChwdYHYE\"¬\u000b!KC6gLisKAAQeBWF3bQEHewEPClEgdLP6AuBQ7Cr1otFJpNdxFAis_O4KyGGmG5Fq-cX2dTtdZl0XE2BKtzhjsIMy25cmypdREyMWo9eyT9-XkWjjf4wx0x7BfMde09skalDjFz1jPKIRfx1o2izQkw70fxMQ2n2aQfuL5OItxcbOVVStaC-9rbt1IBbWjZZD9ojs7QSaPeHqvaZjuzgGdUGfeLgygNCKfLBOt25TnMDN9nAX1kZzRJ3YQMEc_Omioklb-9jrpjcIqju0XzaySmf63a4bzmwTGdQXIlXXFD-IVUyCu8DuH3xGxrRept2_uxEbG1_33Zi06jcBCET68d_PPyFYPzxRZaTokcqrdoDQqs93AKQEqPmoyOTsWIkDoZwDHBmN7DNSANkTaLVA4WwsLBofHACQQjbPOUcN2Nh_X82uKr95Bw13yhLtuasHwektCdL2EGQ0LLKmo33s9jZuuUiGqL5ZWEB0pj5uqxH7BUMBxvK9LjHJdWrr2-AKgUjIAUGLp8q6UCEwNB2Y9i1zlY58ulwKwP8VQb5DNFPHMb85ZraW9ocQRb8Bjepy17PKh3-GzPpRT4Hgq2CedHwcclscPO7EE_z1h9XuZ5bwqTW5UtDjErE9-szdU3J-YHEonfc4a10yoisOceBrn6Y14f-ovnheDltSlTLaDrUAb7gisdLBheQfnXir0b3J4bY1h7dD89f3Zo_k0BB-dHb_czNp-33obKeE3_UG2F-MKrhgZK4wyN0x0bypGwwND8zEaTHUpNR_T56hxN6ShSJsylvIcS_ZqYwhh6K8T8SYAZww40yl3WF9WRbqd3fjFWYRcckWoFWtlsUuy6b1zp6mV1KPzbWNKPghejKxn2QtZp9YOj4FzJP8ZjdE4iesUg0U9ljlrPxv9G_W7tPkjGf7w4CrPyyAfEI_gJjobj5iZGyIeaarrv46sGnfOT6noieDJM9Lk4lBvCx0mbDILfODpBWE1IvYacQJFJPys_oZj_dZDizluI_Me8nwBpL556tbwZw3e3MfIrMxmMWgsg3tsFxzs081mEIRBsce8uRALiHsJ4oxziWfrnaGbpzNNz6KGD8mKccdNnAvTis4N-Uqzo-YVBLka33mljgeuBcG1j9xpjkLe-yvBk2N96edf_qw6fsuNr8CwLLQ3b8L4Azq6YBD0clqz5jz_4yfp4pSEQ_G5hqX2GCeUu25vFpKd2BXNmKX8rBj9rfgenJolsBX6aENgG5CeXogeV3kFQgsEO8kcPIRHDJEL6kWbAtq2nziIFmKUmIJse3GaOzK6uYpyRqWts83hafOxU-MZNk_dJoydMiWKl9GRGEiAbWDmj_pMuH6up5f3u1Owp4cbqlazE7Vyyx7yakDHRTJOl6p4u3lSrYt8dDnPHJGyso29uYx6hr4SaOSdEJEdOuQuBSn87Xhnqiaizx-Je_wsPE*\u000b-10084403992\u0001qB\u0006submitr(6Ldy5LUgAAAAAGMqccxyPaHTO8qIuNIU_I1zeAsO\u0001Ù!0feMpY43AsyhijL-yJ2GLvrEmYIq9sNlOfrK52BVNe_AqVId67ylThnnuKFKFeO0nUYR37CZQg3brJU-CdeokToF06SNNgHPoIkx_cuchS35x080QWrTHDDNDd-jbIFVzrO4_cJfOE0VyjLX8OoaI6BA5Q3LmDjx3oeD3-GZoos73YZLWGTlfj-cDQFCnzeYDflqXDEZwo5YLRW-ilQpEbqGUCUNtoJMIQmyfkgdBa56RBkBqnZAFP2mcj_HrXpqmxi1ec7cN-mNmotf5TXXC_RJhW6jCF0p8lN0mbUuIwPknYIfE-CyEhujiVXzGBCZBfK2t6iRbi7vpJlqM5uhKRLfLElBunPQMHXjK9e1FYHSx6yNOg7DtIVatrxELfqjp1xRMhLTnE1CEtRASdG7hBUx8jeLzJYGsrfYkd6ut4gRBe7PeE0B9sd89P6GbDiBLrJrXD0d0qNYTR3TT1TcxpKsf_Tpyq98OOXaq1jY4mpQHDkOAwxNQQIrB6Bx0jbQNJypnodQNOmaj1gpjZcfBNFic2Msia3vEBAZvorcGM2d72tNBW6fOvPkzZ5nR-DVnnfX3WVPG6gxAh6bX6yhgmMX6J2SXxCQmiIL1Ez2Pgb74K16TvfosX7q8HhiLz9DkIVmRwfcgXY7EHR-Be-4vWUeEvvUqXYPA8SSAguTeUXy8quchWYS55iNUhuPlR0G0zhJAQH257x9VhbvqIE17uO4feHrc1klhvsEWXWyF8BM3S6zOBC9PmK8aHFueyPU7bJKy9hdWur7eNV6S5_4gdb_jHjJkeNsJH2q2qQ4pXITZGzKGkpbTDUJypNIPQHXP0UaAqt3QMiyfndlGgWno5U9Xj7DrOHGA1sL_N3Ck0_47cKH7_V9ZzPcRJWKc1P80YZ7P_15gwrwvM3efAu4rZJXL_Tdqm8j7KWmczSYoioT3O0xQjcf6M2CMyfoqiYsAOmSXiuzmWYO-0jVwbbLx5CFdj8X1KFeSvfIfX5G9HB6Aeu0LJYmO2RNclqv1JCFuvfQzUHCj2gJZk8zPIiCVx88RUoin8SJVYZXGAjF2wssJQHSx9B1TcZP2Ai5moMYKOF-29BczcJvAHhZtnuv2M0V1xAZIZrjiFimImLrOC0N8rOMTRnas3w08fK3gOTudlwoiUpvNAC94Yp_cDER4ot0LP2-d2Qw6mpz--Guq1sQBOXCn2gA9cp39_2Fbzu1JJ2Se0wM5Y6DUBmBixL4xWZjPyx9IiYnGADJnnMUCL2TCxCYgk8faQU182s8rUYeo5xYtX8T3DXGjovw9cXjHyj1QcpLTJz9vptwFaZyl-RhtgI7POUxoucIEJmiL2itqabDMCEN1w7ofXHSD0hFCib7f_jdToNfzZHeE_S8uh764_2VjocUPNH-R1_sucaLL_xhdmK74RoKzw_keYpj46117kszkJW-k9d0pSJLJCSR5oMP0RFm11BA4Zb7b-BCBt78AOD6I4ABVXIaq-CdCedQLIT6KvRcvgKO5HUVUkuYXIXuU0vsKY7bYES94oNboB2xrutUrOpTXBEo9mLnyJ2iPnBZLXHvA_ykzms3JFXmewPFDSIvfDxRshrARL1KHyuQRN5PN4CRjfs8NDEWb2e40UWeO9w5Hmcb8LWxZo9MVRpSS6hA_j6TnO26gqNQLYXOM_xdggb70IyNxoPA1WZiF3jZUdIq-BDxphssFWGyH0ARHlKXuITR4lv0oT2Cs_QBTkZrb61KUkdgVHYK7sxgrX6j4AlaBw8QpTYulsf8uhJ_DAS1-f-4WTl-1wBtVjYnPFhNgjbIiOFaQ2gQndr3h7zdYqOPbD3mMzwMlfYfF6zJkq6H4M1aYu-w8Y3HU2iJcg-MKQ0-vtAoPa4Xe_CdUbObnJXOA0wRMW6WuDQZVnNTqIU2hsBUzaW_g_xdJfs76NmOMnOEUTJze5i9XnazwMTZ7yP4DT5TayjVHppnKEWhz1NcYHFmRyfksWJjKIiSGgPMRTHur8xROfcDQ5CFbk77zIF2Nxh0fgXvuAkJVm9MlZHy6-AhaZMG9_zuJhgH9M5CY2CdlYokAEx9kqdf6MG-ixfgagK_dLStiodP3Mkit8fg6Ypm09lR9f8sdTI2l0-EdS8Ht4iaBuL0UOmd7zQM5gZeqFS9tm_HfOIt68Q5LZqfaExZ2d7wfEGmT7Pk9g47B-x95jrTrUT-C59oqbqfpFARShpLPBz9up84LO3LLzS8pnN3nOF9yoAw1bWjj7h9uZJwXJFRor9IcU4KsChYjYJjQ_jlll80AMWOR0QMujpDy7F9xrg3rKGCYx_8nZJTKJCaIgvX_MHbWBi4wlrPwOGuNxPzzQFyi9hFeoMgAI01fswb1YnWh1jU1dbIE916PwfsUVlrK4PFAeKwB8Ud0jKnmHleLuuUiUofi5EZAs-wlIG6i8AAvbaTj_jlyqPPpUnSUzhpIcJXyAC5hwcDlSI2LvwoUjrvI3zqJk6sVA0B4sN4WP3ys4Dw-oJoNOGJ8wvI0SYba6yFQg7wgKFuIqA5AVYja-Cthl7fqMj2SpPYfeZW69h9YjsjkGlWTpRcFTI7jEx49hKUKNlOvs_EmPamxFCFbhOHuP2aD2OgcVq6r8BRWesgCDkV4qupFQmK97gxFgqr4QEqeq9k4QYiytvMrYpfF8i9fke_xU03A5wUng8wJOit3sukyOm_P8BRGiq8CFD97pvk2a4uIu-AdVY289RxZiMIZG1OKuvMafHbp_TJow8_9Omuc6DIuaKXR6wxJg7joHkiFtO1FR6mj90xepvkAU1J-zfpRi5mwJV05dq7mGkp5recaTHqn5xlEpKYIAnXAqhgwVpS8-iNVjsHuR1iSw_5LYnbvAEhahu7uMk633fQpQJC26ilOf9vmOCxpodkGPGil1AVlZ8nDNl6GoREgSK_i7Dxep70WJkh5nNFDeHzizBxkbZreMlJnicb-NWqaxQIwacLEJiB0xwU6c5G67Pldd84OFWiSz7bzK2SRyfIyYry-IBqNoQj1WF6Q5jZCbqz2Bmlp1eA4QmiKBgxIfqPBNFV6iK3qIlqKwekmU47m6EpEt8sgaFaXyNwZU4m77RhVgrsVF4zG8CMWeKvxK1WIe7fhGEdwsxsagsf3GRaDtuMBKlqQsPwTRr2-IytijMz1JmmPy-IkWL7oJ1Jmt-oeVUO249tUW5nQ7it5tKbdQnCG2goec5HGFkVCgeMKLFyXxxUwUbPh7hg7gsPrSDuQwecNe3_BER-Ak9UZB1F_0eIUaXG59_NhY9gSPG9i1xE7bmHDCUNtoJPL_yxjkrtGWZyz5kRlq4b09mulzwL1aqTOAfRpo80A81Wb1f8yJWOLwvEal7T9LmVdk9cPRIvNsR8hltD6LSCVz_ksH4HHASteUYy37h1Gj9QfW1XGzudeVqrYEVZ2o8giZ1Om-glGh4XXEDZuisYKYYu__AQgYsf3-S89q60PVY-57N8XRYKr1DtpxbXoSnqV7CE5b5zWHUxLnaYeA3Fz1RtVf7Kl3AtDcZryLVmt2PBJRJmrAB5cuMvc_WttzxVPeayf1gU8a5QdRjyx29gcg3bIChMrmZv9Q32n2s0GM2qZwkdvf975JD19twUDZWzOEihrp-LhFEhmzuI1Wpi2Dh5TeMgHMWuMx97tW12_BT9pnI_H9S1bhM0JQ3vayAx0ZdT6AxuJi-0zbZfKvfQjW4myL1eD1PIQbFys0yQxSbe5G2GbxfjrJFGMt-Apb5r-MjxYyeAQZ3y43ABlkY3g-x2VofkrQ5Oi6B8chZ7HGU6GxbIIG32a1fhMaqa49SRXb93fQYfB6x4RTney3QaLt9cqREjD9fNJd6yzIEdIu-oeGXyd5RQtd6_S1ix3r-oODnqZvvcvZ7vtAUFmhuMKUUp9lQMFerTeEQR5s90QA3iy3A8CZKrkDkE0bJrRACmHpvUXU4qp3PRiZMYMRnCjls78NGKLCRNyj67dAVes3O4OMY3TACNsZbYJFmZ2hvT2WJ7YAjUoYo7F9B11wwctLpHB4ixEd6L7MUF7jt4JSXO0_PRrepnM5FJUtvw2YJOGvuwlUnvdNEaTw_oORX2u_iAbdJPG3kxOsPYwWo2AuOslTIOy2ziEmf0oOGyH0yVWgKP8ECtdoM8tMn2H2RdSYJTv_StSgur7Ijqo291SjLbp3D44jModRoWr6RpJYZ_eJi1XruT6ME-CmtcRRnqq4BRDfK_VFUdy0tRJg63g00iCrN_SNC6h3x8fT7e32S1gitMUIl2Dx-9Hd3Dd9x08i9HQPH6jwdIqUq2dBSZJWZbOBTpnldL_NpLF¢\u0001­\u0003tbMywzMzEsNzE5XSxbMSwzMjMsMTMwOV0sWzIsNzQsMTg0NF1dLG51bGwsW251bGwsbnVsbCxudWxsLFsxOCwxNC42NjY2NjY2NjY2NjY2NjYsMC41Nzg5NDczNjg0MjEwNTI3LDEyMl0sWzAsbnVsbCwwXSwwLDAsMF0sWyJzaG9ydHVybC5sayIsInd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbSIsImNvZGUuanF1ZXJ5LmNvbSIsImNkbi5qc2RlbGl2ci5uZXQiLCJ3d3cuZ29vZ2xlLmNvbSIsImZvbnRzLmdvb2dsZWFwaXMuY29tIiwicmVnaW9uMS5nb29nbGUtYW5hbHl0aWNzLmNvbSIsImZvbnRzLmdzdGF0aWMuY29tIiwid3d3LmdzdGF0aWMuY29tIl0sWzksNDAzXV0²\u0001¤\u001dBjAAYAIACkRDAUIIIQkBCKAMAIlYAAyIABlAggAAAGGALSIAARxCYwgpBFAICkABQAhEIACABKIAIAEgqAACbABACBZAAAAJCLCCoQGAcIQEGGIAABohABYASYAFhAgAUgIlYAqpEgAFIAAeQCC0QAAMUKFBAhQAYJiVAAkAQBIBEAAYIUUIAASAABgGEgACCESoEAFAFAgYgJAAJcBjQggXAEQMAgpJIEAAAEBCQAQCEAiAAAZAACoUERAAlEgBECAsEaBoAIAAUgQAiWkARQAAASAABAUAqAAAAhIQZIAVBAAAIUkQBGBQAGMCwCQhCJUQEgwBAgQEDFoEAAQJQAAJPIQUAAIoBkKOAARAygbEQEMAIGRYAAQABIhsLERgEgQBCAAgEGFjQUqACGABbQEAYBAAJQAmABIEAACggIACAgADNIoRmiDAAFQSEEBIEEgCIqgAygYgwBDBAYgAGCABLDAEAkAgALFQGYBYihIEk4gEAVEWQJgAUgQLBSUCNAhQQABAAFAIIBtBAFCBPUBI4kIQrCEhAEKAIICqBIEBABQBYBBCAgSkIEIBQBoBUCCRAQEAAAgAgUAEMkBDQASihKFEQIAmoBlEAzJAISAC4EBliCCQQShwCIAEAIBAkAARAACB8EiBFERAQQkACAQEQICBEQRAhEAgYBZCHEAHFIoAMCEBAhAC1EEAJgGgCggAimRQIAQEAAGQoAAPIChiKIBEACAABgCgpoAAANQBAAJoAWYQADQgioAAxACpEAAIEhICLKBEKQghCAgIE0HaACIQgQYCLQACYFQhdwAAwLAECCABCEGDAiICEQQgIBEJIopAAgQQoSQEACESPgQEIAUUApEgIOBAAAAoEDABBACEACShAUBxCghoAIFGMApIOcgIAFA5gcBuEBhAMACDD4IIGCjAhAD1AIxEAhCYAgIBCXAi0iAUBNKIBAQIKkAAAMQSeoIcSErJAAKAUAAECAAgkBECQFoAAgYCMQJYABgIJLAAFFACEABICCAAAQgggACFlARCGQIAAgY4QAAGAiIJAAFhKAgAkgGZAAFQAkBIEhAKAQiAAiARAQQEEQggAZoAI4AFAmgCAgYACAAHEIJwADKMKmEADIMQggAwQIoAAgAkCUCC2MBBQQxwp4ACggQAECwFy3AAJAACCQSwEiAcRFgIEDtBQEQQBaIuoFQBgHBFSiGoGRSJJGgAAgAAICBAEggcIwLwYBCoIGSBAxQAjQRAMgiQMMAmIEALBDAwEJBaALAACKBChAEQkSQAQSYQkAAAMCADSGQWgKgoADYgiJARIkEwQASAiAEMsICAEKnwCAMACAASCABgkAEBQEDgQQKIUiCQoAEMUCggUEAAAIQBsAIDOhAAGUIAHiwQIVkNVXUECwDAAADIMIA8SYABA5KAOIgCBoAAiQhOkECut+ISQgEACCSCAwEAQEKCAAACGoCAAClAAQzAQZBFAAgsFghIBQDEEGQhCEkABAEQAICEokAAjSCQIgQEAAAyCSoQiQBwAgAEtYKRaBABxFwhgYQJAIoBAUgCAhAEQgAIoAQDADBAAQAQGICAANIATAGwSARAAACHCCAECJRcKZAooBiABBIATQImhBIEjvACgBIIAgAASUCiQAEBAAMkACIwECGQEESRA5whAVEAgaAAQfohiAKUEgAERApIwg4AAIAAAAzBQQAgAgAqhDANAA0QAICOhAIZHIQAAAYIEAaAGohFUhAAAgEhAECAWDABASUAAYgJEBYIEpCAABAExCA1EICYKAzQEAABAEgAIgIAAjBQJ8BAuQCwiKDoARgoAIAULioCMEACAJAFwAQ0AA0QEFACAACMIgAI1BJAgAExACCJACTEAdkCAIB4EBSAAAAAoBUABIgAYgjEoaQBBDGAAAIiCDAABFMDAEAACkAFAYwpICEEiAAGABAiADgRIwAEAA4ACGAABApKIQDikBBAgLRIgAAAQiTCQEMAAgqBEwQABAhgoQAMAJAAEAQEQghBIAAprAhCTIGCYkGvAAAUAmHAkBBAAgUAwCQgMACAAQIIAhpAAgCAACIBQABIKQQFgQCoAAAhAgBAJSBCgJkKAYAE4K8CABV1sgljAAYAwThUSAAAhIAAQEgQgAFdAIIiAAyrBSEQAASIBBTRQgCmDIIAIAOZIAEglAAQQgIGAABAgwAARqkAQgIAAECAQAgESzIEyNkICQAIsLggJAAQeEiA6iWhhIDITC1BBBAkAAICQAEAIAABCBIGAASsAJJmgCBQIOURmEAAmgEBJEAQTBgUIHAqgIBQgAQBIERAIgCAVxBCMARWoAARCESApMACQgAqACgAEBKGASBQCAQYCABE1CAAAMAEUIGkIACgQAAQKCAotRAAAIAoBAQUAAMNGMAAACJABAAhIKBAAgIACAoQIAAQIAABQBDBAUIAAAAwAAEIsAiIUgEQIAgQMgAEQBTQJEAKJAICAAAAgmA0mwAAAEYAQgAAAADmAGCJIEAAVEADCAGESgQECBAAQwQiAAlIiAaQl4REDAFAEwgiSJBmCAAAQBgBghiBEEQCACBFABIfAIPQAABEIEAAgBYFIIUtgEAWxYBAEAQAKQEiALIQABMbEEBAHIEMRAAYsFogJWhAcjgIABBAZhUgQABGAAxAAGAhEEABAwLABIIkAIRRAoIIBTEEEEEPhCAQIAMChwAGBEAJAAACAAgCkIyABACIIYAA4AEDIIkQIgAAIAgUCITYoBAgKIDAcDKAQBigHmQIpFEASoSAFLhAgwhwOAAAQBsABECAAA0YQAGOIEFBAAQVEihgAQgGBCTIREOCBkACCAFCRJxICDQ1FAMhHDiAIAYgEAOINAEApKAEACMNChASgEgABAAAIoCqBoAGACoUAIAAGwDghCDAADI0AAIwCEWAQAQlBAJAAAAEFIDwAFDAABEOEABmJAADCQKBkIgOlCCCyIOFyCAIC6YlARBABEBRAAgBAAESoIXLAvBeRACCIYAhAgoAkHCAkUqEIEEAEARwgG0IAAAABwAFAKAJIUwDAAqAAAAYgGAKACClxDMWiIOAnAAkACEBYEEEBAUAiCACAWiAAoIiCiABEECYLACiGBMDQgJAEnBoIEiDIEAQEUgABHKDAAQgAABA4AgChEBIBQBFAAoJAQAECJQCABEaCAgKA4kQECtRggCASACYBMDEAgIIE/8CQCiFAjABEQIgABATAACJEAJAVhgYxgARBgABQnDBAEEAUxAJBREMAJDwhsiRCAAAAwH4BIApLApAjxgIhQA2ACEJQShIIQUQQTWQEDUIQAgIkADAARBAIJoGAJmgAABwEQEMA8BABABECDZgIiAWkAnACRpACABJDIlAj2QAYAAARAAQAIBBQLCWoaYhgAogIIgSFFFCB0IqiMECgLSgCQQEIECAgAAOSCBkAAAiKIFgQAAgJJOAcQAgBIAIAAMcJUipnBKBAs4BEENATWiKAgiCCBIFgSIGBwIwAmEKAF0gCgRQAAggIRAAAg2RHOEYE4pEWACJAAKDIAAAABAIQQhCA0CAFqgRBHCCCEEEEgggEBAAAhQA0QzAgEkAggIBkS0CACgEhgKg0FaARBwQiE0AoDDICUEwWAogEVXKg5CQUExBAkEAYwAIAEQQciBKRAAoIEElLAwgGgyUg5AZoURaAqoKCiADQABACQAkhEABACDAcGJAABMABlFADUlEBQgjIkLAhAFUADIKABmZCAIgBYCIÊ\u0001\u0003W10à\u0001 \u0001è\u0001°ê\u0001"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\ndate: Fri, 23 Jan 2026 14:36:42 GMT\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: _GRECAPTCHA=09AKhCRwjBinfhj_qsW8FOZjYY48snKt_j-N9M6k3kNMkuMjVXESVXDxw3CUjo68wZFU3T3REH52bRZdY0W5mmk6I; Expires=Wed, 22-Jul-2026 14:36:42 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Fri, 23 Jan 2026 14:36:42 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39137,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (39132)","md5":"5e0efe7892ab2a32f4a6673c76b6d38c","sha1":"4d81f97c269e81fe2ed38225d7817a7bd61a6866","sha256":"2199d58b7b1d9409bd7eef3ea279f4ebd0d87cf1d8b50a61a76cd6a62decfde9","sha512":"b07b0fd9d97bb82e0a914beeeee2532061a3fe0f191cd291cb69d9e4bed0f1fbc808a5b0e3a4691be1239daffde1f024740b332a187957bbc7cbba5a6b1b3f66","ssdeep":"768:fqsbdSDTA1PIsxFaXO9AgPyXUdBdCzwVEJP:uA1PIsxFGO9DdBkz1P","tlshash":"af039f7393d278eb5f7afe005182b97d63bfb05f205206c9065a0bd4c5add6a1ab42cc","first_seen":"2026-01-23T14:37:04.552773Z","last_seen":"2026-01-23T14:37:04.552773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
