{"report_id":"13899578-c480-458e-8650-2e1bc7d3858c","version":6,"status":"done","tags":[],"date":"2025-08-20T12:55:25Z","url":{"schema":"http","addr":"new.myfreemp3juices.cc","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"title":"MYFREEMP3 ▷ Free Mp3 Downloads"},"submit":{"url":{"schema":"http","addr":"new.myfreemp3juices.cc","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-24T12:55:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-20","alert":"Sinkholed","trigger":"jeeryzest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-20","alert":"Sinkholed","trigger":"brocardcored.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-20","alert":"Sinkholed","trigger":"1xlite-218626.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.kobo.com","ip":{"addr":"172.64.150.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-12-05","domain_rank":98471,"first_seen":"2012-09-10T14:33:49Z","last_seen":"2025-08-18T17:29:47.36603Z","alert_count":0,"request_count":1,"received_data":702,"sent_data":622,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"nethcdn.com","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-02-28","domain_rank":61541,"first_seen":"2017-02-02T13:07:31Z","last_seen":"2025-08-17T17:35:40.433566Z","alert_count":0,"request_count":2,"received_data":1528,"sent_data":919,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bngtrak.com","ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-04-14","domain_rank":37980,"first_seen":"2023-04-17T08:11:19Z","last_seen":"2025-08-19T11:42:13.661565Z","alert_count":0,"request_count":1,"received_data":3841,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"remitano.com","ip":{"addr":"104.18.28.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-11-16","domain_rank":89024,"first_seen":"2014-11-29T08:24:44Z","last_seen":"2025-08-12T15:42:06.783674Z","alert_count":0,"request_count":1,"received_data":2045,"sent_data":395,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.iqbroker.com","ip":{"addr":"185.117.132.1","port":443,"asn":209180,"as":"Iqoption Europe Ltd","country":"Cyprus","country_code":"CY"},"domain_registered":"2007-04-04","domain_rank":3023942,"first_seen":"2013-05-04T07:01:31Z","last_seen":"2025-08-18T17:29:46.903388Z","alert_count":0,"request_count":1,"received_data":287,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":201644,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2025-08-14T10:34:02.219365Z","alert_count":0,"request_count":1,"received_data":837,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"1xlite-218626.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-10","domain_rank":362154,"first_seen":"2025-07-07T20:24:21.941936Z","last_seen":"2025-08-18T17:29:46.019954Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trade.cex.io","ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-30","domain_rank":1577958,"first_seen":"2023-02-16T15:36:18Z","last_seen":"2025-08-18T17:29:46.398172Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.iherb.com","ip":{"addr":"172.64.149.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-07-29","domain_rank":98025,"first_seen":"2012-07-21T03:47:32Z","last_seen":"2025-08-11T14:01:25.992215Z","alert_count":0,"request_count":1,"received_data":1886,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"bongacams.com","ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2012-01-25","domain_rank":15909,"first_seen":"2012-05-22T12:36:04Z","last_seen":"2025-08-13T08:35:31.816327Z","alert_count":0,"request_count":2,"received_data":2674,"sent_data":1156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.agoda.com","ip":{"addr":"96.6.17.27","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2004-03-16","domain_rank":2087,"first_seen":"2012-05-23T22:58:56Z","last_seen":"2025-08-15T02:21:53.242155Z","alert_count":0,"request_count":1,"received_data":2747,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.cex.io","ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-30","domain_rank":3362505,"first_seen":"2013-09-26T06:08:26Z","last_seen":"2025-08-18T17:29:46.953839Z","alert_count":0,"request_count":1,"received_data":494,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.getyourguide.com","ip":{"addr":"104.18.229.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-08-19","domain_rank":11915,"first_seen":"2017-01-30T09:31:50Z","last_seen":"2025-08-15T02:21:53.989278Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.rbfxdirect.com","ip":{"addr":"172.67.191.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-12-16","domain_rank":2094834,"first_seen":"2017-05-01T19:32:35Z","last_seen":"2025-08-18T17:29:46.550699Z","alert_count":0,"request_count":1,"received_data":628,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"new.myfreemp3juices.cc","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-06","domain_rank":0,"first_seen":"2023-04-04T00:32:28Z","last_seen":"2025-07-18T13:58:39.085206Z","alert_count":0,"request_count":7,"received_data":274087,"sent_data":3600,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Skimlinks","description":"Skimlinks is a content monetization platform for online publishers.","website":"https://skimlinks.com","common_platform_enumeration":"","icon":"Skimlinks.svg","categories":["Affiliate programs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"iclickcdn.com","ip":{"addr":"104.26.13.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-20","domain_rank":835206,"first_seen":"2020-03-25T19:06:34Z","last_seen":"2025-08-20T05:01:20.587276Z","alert_count":0,"request_count":1,"received_data":109283,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.alibaba.com","ip":{"addr":"23.49.27.74","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-04-15","domain_rank":2196,"first_seen":"2012-05-31T12:57:53Z","last_seen":"2025-08-18T02:09:06.704507Z","alert_count":0,"request_count":1,"received_data":1517,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-08-13T15:50:47.0359Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-13T15:12:46.750635Z","alert_count":0,"request_count":1,"received_data":400434,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"track.exness.com","ip":{"addr":"43.199.166.207","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2008-08-26","domain_rank":1400838,"first_seen":"2020-01-25T14:59:28Z","last_seen":"2025-08-17T07:03:50.624751Z","alert_count":0,"request_count":1,"received_data":127,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.trusteeglobal.com","ip":{"addr":"172.66.162.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-26","domain_rank":2944532,"first_seen":"2021-03-21T00:36:54Z","last_seen":"2025-08-18T20:24:59.884169Z","alert_count":0,"request_count":1,"received_data":414,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my28.roboforex.org","ip":{"addr":"172.67.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-01","domain_rank":706787,"first_seen":"2022-07-01T13:11:56Z","last_seen":"2025-08-18T20:24:59.964764Z","alert_count":0,"request_count":1,"received_data":1704,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cex.io","ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-30","domain_rank":47409,"first_seen":"2015-10-28T14:21:42Z","last_seen":"2025-08-18T20:24:59.100773Z","alert_count":0,"request_count":2,"received_data":1910,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-08-14T18:01:13.703218Z","alert_count":0,"request_count":1,"received_data":845,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kobo.com","ip":{"addr":"172.64.150.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-12-05","domain_rank":7395,"first_seen":"2017-02-01T14:54:20Z","last_seen":"2025-08-18T17:29:45.713902Z","alert_count":0,"request_count":1,"received_data":595,"sent_data":618,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"typeform.com","ip":{"addr":"3.164.206.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-06-20","domain_rank":1031,"first_seen":"2013-07-22T23:54:18Z","last_seen":"2025-08-18T05:04:59.895827Z","alert_count":0,"request_count":2,"received_data":1228,"sent_data":1163,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"jeeryzest.com","ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-05-26","domain_rank":0,"first_seen":"2022-05-26T11:05:56Z","last_seen":"2025-08-15T08:50:20.269525Z","alert_count":1,"request_count":1,"received_data":524,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"korfo.org","ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2008-02-11","domain_rank":60182,"first_seen":"2015-12-30T23:56:42Z","last_seen":"2025-08-18T17:29:47.270108Z","alert_count":0,"request_count":5,"received_data":4178,"sent_data":2374,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"offer.alibaba.com","ip":{"addr":"23.49.27.74","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-04-15","domain_rank":81932,"first_seen":"2015-08-13T09:44:32Z","last_seen":"2025-08-16T03:47:26.597347Z","alert_count":0,"request_count":2,"received_data":2762,"sent_data":990,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"brocardcored.com","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-14","domain_rank":3769851,"first_seen":"2022-05-14T08:01:06Z","last_seen":"2025-08-15T08:50:20.271345Z","alert_count":1,"request_count":1,"received_data":7224,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.remitano.com","ip":{"addr":"104.18.28.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-11-16","domain_rank":3172359,"first_seen":"2015-03-19T23:59:05Z","last_seen":"2025-08-18T17:29:46.425809Z","alert_count":0,"request_count":1,"received_data":397,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iqbroker.com","ip":{"addr":"185.117.132.1","port":443,"asn":209180,"as":"Iqoption Europe Ltd","country":"Cyprus","country_code":"CY"},"domain_registered":"2007-04-04","domain_rank":105253,"first_seen":"2013-05-04T07:01:31Z","last_seen":"2025-08-16T22:37:55.834888Z","alert_count":0,"request_count":3,"received_data":8065,"sent_data":2150,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a11ybar.com","ip":{"addr":"172.67.136.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-13","domain_rank":58343,"first_seen":"2019-07-15T14:40:04Z","last_seen":"2025-08-17T10:25:41.014595Z","alert_count":0,"request_count":2,"received_data":2102,"sent_data":827,"comment":"","tags":null,"fingerprints":[{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pie-recipes.com","ip":{"addr":"193.161.202.200","port":443,"asn":21100,"as":"Green Floid LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-10-03","domain_rank":443107,"first_seen":"2020-05-08T21:36:17Z","last_seen":"2025-08-14T13:52:42.848191Z","alert_count":0,"request_count":1,"received_data":4725,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"powered-by-revidy.com","ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-12-31","domain_rank":152027,"first_seen":"2021-12-31T18:27:26Z","last_seen":"2025-08-12T15:42:05.972138Z","alert_count":0,"request_count":1,"received_data":456,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"admin.typeform.com","ip":{"addr":"108.156.22.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-06-20","domain_rank":104843,"first_seen":"2013-07-23T20:39:32Z","last_seen":"2025-08-18T17:29:47.04416Z","alert_count":0,"request_count":2,"received_data":4520,"sent_data":1175,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"plus.cex.io","ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-30","domain_rank":3847795,"first_seen":"2022-12-20T20:54:27Z","last_seen":"2025-08-18T17:29:47.931048Z","alert_count":0,"request_count":1,"received_data":413,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"151efacfdd725cb4546cb5eedfb83e36","sha1":"d703906b38fe72f35ac1ab581a5315264223654d","sha256":"e1b9ef8cbde5f5cd1c993db8adb72faf85b28d8193edf837f4bac7f5629d89dc","sha512":"dc149d492e09b8174133a02650350e83569ff7847b8333a8719a21d00a67d49bebbee0cbfe63b7126d95f6128f7bc3b022f0b98673a414e5cc7c5eba80777a9e","ssdeep":"","tlshash":"55c012ba292466340c9924ad7037d76cbdb730243a527914805dc8688a74ee75c92899","size":193,"data":"","first_seen":"2023-03-07T13:59:07Z","last_seen":"2025-11-08T13:57:32.710818Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/myfreemp3juice.cc.js?v=1.01","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca2ef0b8ca917c6317919afeba5782df","sha1":"022e27bf99dcb805e107249d4aaa38c64cef22f8","sha256":"3033eabcb3e5edcc878d781982288881ec33e4e284624b329d2234cb1a0d4000","sha512":"2ae5b914b3fff378b6f2915e9e1a994c1faee3c748682fcd5fb47480c6aa9928b08d6d7ef877422ec7f15c6bb2e6a8dba7cfaec15d108655872078485901e708","ssdeep":"3072:OigPySfLijtFcvlv6Fny89+RNYk4odr/ohG9lqYNsR:OTySTiB2NvSy89+RNYk4odrnNO","tlshash":"bb244b8ef291702147e760a4506f010bb23a5969740b809cf179f9e9bd78e4ea17bf7c","size":228517,"data":"","first_seen":"2024-01-27T21:41:55Z","last_seen":"2025-11-08T13:57:32.738602Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YYN125EKTJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f56539e3a90ba41a7205727d6e00bedf","sha1":"a774ed33020fb50754e0affca99fd91e05806796","sha256":"beafc6acb4eda653b17b47dd3af59726c687a2fd19aaf7bbed3792eb38a65fe4","sha512":"45acd4f2031a7efe8436b53c114abb1c803e132d53748bb30caf6bc8bede825b014cb638a97504bacb7c9a9a95e086813f41e8fb3e6b1c640351975f5b0ed51a","ssdeep":"6144:2ukldUTWer7tSvzLwQrDlUKB3IKRILuwNXTODuVB16qW:ZklqTr7tSvzLwQrDlVYZOuVBRW","tlshash":"148407ce73d674629396f478503f018ba57b28a2b44cc899f189cde42e74a9a4137f7c","size":399433,"data":"","first_seen":"2025-08-20T12:55:29.497327Z","last_seen":"2025-08-20T12:55:29.497327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fccd1467823b2397e743d4082e0f63b","sha1":"fc844b9a13f5ddf9aa8acaafdb6f81d9040501b0","sha256":"f3f8061a98e2b99617d8cf5469130b356f957018231ea2a01dfe636975805564","sha512":"27facea44d45e43a48237abf16d52223c2e8d86b21009978d61a2b8bdb106bf133f79aba0169723a6cbb72b34f544fd043b93c6ece80c2bcef5c4f9afcd62d1c","ssdeep":"","tlshash":"c5c02b8c210a1c7042fb37008b7fb608f0023324d8d06d31491a23484d30e03db84810","size":153,"data":"","first_seen":"2023-05-10T10:24:31Z","last_seen":"2025-12-25T12:52:14.555343Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pie-recipes.com/hpgddp?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=MYFREEMP3%20%E2%96%B7%20Free%20Mp3%20Downloads\u0026landing_url=new.myfreemp3juices.cc%2F\u0026name=_BMh2NdYctygcqbyV\u0026host=https%3A%2F%2Fpie-recipes.com%2Fhpgddp","fqdn":"pie-recipes.com","domain":"pie-recipes.com","tld":"com"},"ip":{"addr":"193.161.202.200","port":443,"asn":21100,"as":"Green Floid LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1779c8f0806411236a2cf38cf9dff4cf","sha1":"4578ddbec15752039a17b340f46c3d2f97194942","sha256":"f7d9447423bd68c228ae013ebde22d7fcb66341fecd5219337fb461bd16b6e39","sha512":"e906951271b59e420dc7ab094779107f9e5e2ea638816bfa5ffacf60d8ef757103f61b3a6b3a75605aeea9777978cd6e39a7ed32ca84658b8c0e5d7b58c79cbf","ssdeep":"","tlshash":"2181b4ab7468bdb2034254e084276225ba3a48a9e15fa0f4f36de5d82df840d4279f36","size":4000,"data":"","first_seen":"2025-08-20T12:55:29.479023Z","last_seen":"2025-08-20T12:55:29.479023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a11ybar.com/stat.js","fqdn":"a11ybar.com","domain":"a11ybar.com","tld":"com"},"ip":{"addr":"172.67.136.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e7ebb5082444dfc4893d74a8a0dbbb5","sha1":"89435eb6f2564740e248929caf68e8c1663aef9a","sha256":"dfe4146c226afab7a30c7dfa36827f2572a708f1fc96c8fa9247910c5005088c","sha512":"f6ac9c9d951f2dc5f830ed5ade272f2546428cdb864f7f9f150f48b30c92d71e3cbb773c9f967b876490c6e9290c4e9debf23a47f4502102c16e1b6a2b2293dc","ssdeep":"","tlshash":"f10128bd1d330d229374ae46a4756d4c7bb5b12ce6020881b1f8cb691850ed72d16c6c","size":771,"data":"","first_seen":"2023-10-31T12:07:43Z","last_seen":"2026-05-27T07:33:40.282017Z","times_seen":1016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-27T16:57:30.778667Z","times_seen":336487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"698b60d5434b27a19f908bd20162f80d","sha1":"7f7156f82ad65e41ccbbff495727c58bcbb13aaf","sha256":"30f543ec3ba8e09cbb9d90723ecdf2021ce5feae86103c94876ff090b29ea872","sha512":"868c0bffb633e7c1e2343dd674da2b8b01dba76374baec964e57fb97788349dc151c97583ff9800583071226b94431faa6f498c793193b8c8bed267224950175","ssdeep":"","tlshash":"24d05e4c10d57023043721322b1ba62ca0282edf11cc6650ba0c12a47f6006b67adaba","size":235,"data":"","first_seen":"2023-03-07T13:59:07Z","last_seen":"2025-12-25T12:52:14.557519Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jeeryzest.com/tG789Y7QSWkGgs7M/50653","fqdn":"jeeryzest.com","domain":"jeeryzest.com","tld":"com"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc89a7d759e73ac388e35004cc8e11","sha1":"b141d7ba0a8e3eac30dd7a9046e050634f76e263","sha256":"da5075f0faf668a23e97a93a4fd30d91c087c5075b82ab061a2a57e8593cee94","sha512":"477a03cff4672d7e75dba8f9ec4c4204bc4c5b6a403ee43ca839dc04f4f45cfad6b87cf8fd1b625e817ef2c028dafbfa069e3f74a77bfb9b42a793a3e010b13b","ssdeep":"","tlshash":"eee08c1409b1c678463951cba1b5d3faa8e8067ea812a48a00dd8c0e3980eb598a7da1","size":300,"data":"","first_seen":"2023-11-02T04:16:48Z","last_seen":"2026-05-27T07:33:40.389031Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iclickcdn.com/tag.min.js","fqdn":"iclickcdn.com","domain":"iclickcdn.com","tld":"com"},"ip":{"addr":"104.26.13.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68262e874691ebb1987e781b248e2c3a","sha1":"0c7912df29ed9586e7b0c9d5d742c4ca87478bc6","sha256":"7835f96f51f8fba72a19d237ea2cbabd67a85de031d8daad06e82407458349fb","sha512":"16e237c4b3e118ba24a9f509541408278eb74387050aceff24b4b1b5166a30f2783dfdfa498632a94bb86faa031166d18a61583faa90cdd2accc9a90eaed69e8","ssdeep":"1536:Y2iqSZ4UmipDQ20OzYPLdogFlijQ9GXrD9w8koAEjT8B7:YrZ4PRPOgFgjQ90w8kodjm7","tlshash":"aeb32c9462a634b02da6413c754fc94dbee6af50048e49e0d0e9acb37657074d3bfee8","size":108099,"data":"","first_seen":"2025-08-20T10:58:45.575019Z","last_seen":"2025-08-20T12:55:29.490648Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brocardcored.com/tbYfzfUUpmGll/50653","fqdn":"brocardcored.com","domain":"brocardcored.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bb6ac70a2a0bfc1e479d7a75cea4a3e","sha1":"0541d2a0215c14aa9303d1248219ab6498b03989","sha256":"eddb57c245c45be031737173fde07e5b52f39be4eb90b7030d24fc0c9407203a","sha512":"e2517248f5e609106dfa93e35c32933a46b84c1c6d650bfe275231ab6f437a872f807d1de9536299cbd5c39c0c6bd5064f7433a3b886eaa267a14c22a23f9bab","ssdeep":"192:xS4jGhAGB4FvTHuzTeRjTFNpKV/T+LgOToO+R6iymg6q4NBUjRDoNWxJ/lEWRngt:ihApFvTHuzTeRjTFXKV/T+Lg69xt2","tlshash":"3ad1255863c168532b479de6362e71c1d45b778e2ebb440bac116f00b765726a3fea30","size":6616,"data":"","first_seen":"2025-06-29T14:02:43.182791Z","last_seen":"2026-02-17T03:51:23.086717Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a11ybar.com/ok6.js","fqdn":"a11ybar.com","domain":"a11ybar.com","tld":"com"},"ip":{"addr":"172.67.136.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83cb13af83103c0462f2887b9e2e59fc","sha1":"bba2c6f03a513588a6001980e7e11cfda068d2a2","sha256":"ae723359f13e5593e4c492c99a8d4751a3349efc137fb3ea701a991c4867b242","sha512":"dcc8381facf78e829897b4cf3868d284139afd54c834b86cc3a1ea11e9e9110d4552b4aa26f135edd72b4e40dde853531861050f017605ea0d977fa075ec950e","ssdeep":"","tlshash":"2ec02b091ca3ca30c44c84ca30f6c334b5bc11200071d0d580cec8dcd458fd28c4ad20","size":141,"data":"","first_seen":"2023-10-31T12:07:42Z","last_seen":"2026-05-27T07:33:40.25761Z","times_seen":1363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:11:05 GMT","end":"Sun, 28 Sep 2025 13:11:03 GMT"},"fingerprint":{"sha1":"89:E0:23:FC:5B:0F:07:0F:7E:EC:B8:4F:B5:1D:3B:1F:6B:5C:22:0B","sha256":"66:DE:FF:43:09:A3:D6:B0:70:4E:47:82:C8:66:35:42:25:2E:23:CA:5A:1A:CF:A3:1E:23:A0:0E:D3:E3:95:95"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.myfreemp3juices.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://new.myfreemp3juices.cc\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08022b879eb04002f09b54c682d47434; expires=Thu, 20 Aug 2026 12:55:03 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 97220af55b1a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7cf6addc9a54dc1da191c830f04ab920","sha1":"d3bf094452e457aa28ce866b5446684c12ad6eb0","sha256":"fbb6f2efd6190b4419df6c98372a5ef7d38398b9622c5db7e07b64b3cbafb8db","sha512":"e132f6d9026fc32ba184b5a1c86a21cbb6274ba89a06c3328851e1967d530c8b7dc4e70b054d322eee7948e5db8b486d2e04c3a75de397887daf08fc2bda0ecc","ssdeep":"","tlshash":"3ba00255e52d06d450a05fde1b8e8f57c5c310855c5c5348c1d5c20527af58cdd453c6","first_seen":"2025-08-20T12:55:29.472926Z","last_seen":"2025-08-20T12:55:29.472926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":15,"dns":1,"connect":2,"send":0,"wait":47,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/track?c=800261","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /track?c=800261 HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?c=800261\r\ncf-ray: 97220afa4f3cb505-OSL\r\nx-bc: ded7848\r\nx-zone: 5a-web44\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=OvAE1Edcp_J7cU2TOxjNVCFKyeV68ENoGeHPGhohWC4-1755694504-1.0.1.1-yqLKpGTmWcegth47p5Met_iE5YK3MN7YHZ4Tb3tUHCDs92_Ji1MuQ24qjB_8gj5TO2HagnG5x4D89sj3vh6JXNhh5oFDew1C6tu27W8Wc9f3k5rYC0gKj7J0VIVxquN_; path=/; expires=Wed, 20-Aug-25 13:25:04 GMT; domain=.bongacams.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":65,"connect":8,"send":0,"wait":49,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqbroker.com/lp/regulated/en/?aff=7792\u0026aff_model=revenue\u0026afftrack=","fqdn":"iqbroker.com","domain":"iqbroker.com","tld":"com"},"ip":{"addr":"185.117.132.1","port":443,"asn":209180,"as":"Iqoption Europe Ltd","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.iqbroker.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 02:08:33 GMT","end":"Wed, 01 Oct 2025 02:08:32 GMT"},"fingerprint":{"sha1":"82:8E:01:6A:89:BF:F3:19:FD:41:A4:90:2D:8E:F3:7E:A3:AA:A1:0F","sha256":"9B:F6:D4:B3:86:1B:5F:45:DB:55:7D:E2:74:88:D0:D9:49:CD:61:49:27:1E:08:F9:57:D3:33:46:CE:B4:90:20"}}},"request":{"raw":"GET /lp/regulated/en/?aff=7792\u0026aff_model=revenue\u0026afftrack= HTTP/1.1\r\nHost: iqbroker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Traceid=c127c0a1622ae9b6cb044e1231780d0e; aff_model=revenue; aff_ts=2025-08-20T12:55:04Z; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; AffTrackGroup=Black_team_(partnerka); Serv=NL; referrer=https://korfo.org/; AppID=id871125783; brand_id=1; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true; aff=139769; afftrack=from_aff_7792; retrack=; affextra=; landing=/lp/regulated/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 14 Aug 2025 14:54:05 GMT\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nset-cookie: Traceid=38d8c9d6da7006c4becbda35fad84e8f; expires=Thu, 28 Aug 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff=139769; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nafftrack=from_aff_7792; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nretrack=; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naffextra=; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff_model=revenue; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff_ts=2025-08-20T12:55:04Z; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nlanding=/lp/regulated/en/; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsRestrictedCountry=false; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsRegulatedCountry=true; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nCountry=no; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nCountryID=149; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nAffTrackGroup=Black_team_(partnerka); expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nServ=NL; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nreferrer=https://korfo.org/; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nAppID=id871125783; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nbrand_id=1; expires=Wed, 27 Aug 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nsupport_email=support@eu.iqoption.com; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\ncompany_id=1; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsAppStoreCountry=true; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nRedirectDomains=iqoption.com,iqtrading.asia; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\r\nlink: \u003chttps://iqbroker.com/lp/regulated/en/\u003e; rel=\"canonical\"\r\nbackend: arbitre_v4\r\nremote-addr: 91.90.42.154\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15555600\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nethcdn.com/w","fqdn":"nethcdn.com","domain":"nethcdn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nethcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 01:13:49 GMT","end":"Wed, 05 Nov 2025 02:11:00 GMT"},"fingerprint":{"sha1":"2E:9E:E2:08:81:FB:DF:61:04:7C:36:E1:9D:03:81:10:9E:5C:67:CF","sha256":"43:CC:B6:C3:97:9E:F3:A3:B0:55:AA:FB:60:43:7D:F3:6B:DB:79:96:95:EF:32:DF:44:3B:5D:A5:19:19:89:D8"}}},"request":{"raw":"GET /w HTTP/1.1\r\nHost: nethcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqCrOwbcVOB2sAapwIV0YzjYFXRUBpgRguGEvHTf9tg3aS3%2FlII8uN49xOxVhaghSvfFZraTGi76qcD0WJrtzhlZDMlWbAufHYJE\"}]}\r\nset-cookie: qwerty_w=0; Path=/; Max-Age=180000; Expires=Fri, 22 Aug 2025 14:55:03 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://korfo.org/to2/typeform.com/\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97220af92db0dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kobo.com/au/en?utm_source=linkshare_au\u0026utm_medium=affiliate\u0026utm_campaign=SaleGains\u0026utm_term=2025082002618et26283\u0026ranMID=38131\u0026ranEAID=o%2FH%2Fv5Dla7k\u0026ranSiteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ\u0026siteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ","fqdn":"kobo.com","domain":"kobo.com","tld":"com"},"ip":{"addr":"172.64.150.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kobo.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 09:20:11 GMT","end":"Sat, 15 Nov 2025 09:20:10 GMT"},"fingerprint":{"sha1":"86:61:6D:2D:DF:B4:AB:3B:DF:7D:52:0C:D9:6B:CD:CC:27:55:70:97","sha256":"B7:37:B4:CF:13:D4:81:02:1E:08:E0:0F:91:8E:25:72:BE:9E:FE:AB:E7:5B:EE:25:65:B0:C7:C3:3B:45:FA:CA"}}},"request":{"raw":"GET /au/en?utm_source=linkshare_au\u0026utm_medium=affiliate\u0026utm_campaign=SaleGains\u0026utm_term=2025082002618et26283\u0026ranMID=38131\u0026ranEAID=o%2FH%2Fv5Dla7k\u0026ranSiteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ\u0026siteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ HTTP/1.1\r\nHost: kobo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 143\r\nlocation: https://www.kobo.com/au/en?utm_source=linkshare_au\u0026utm_medium=affiliate\u0026utm_campaign=SaleGains\u0026utm_term=2025082002618et26283\u0026ranMID=38131\u0026ranEAID=o%2FH%2Fv5Dla7k\u0026ranSiteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ\u0026siteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97220afa49240b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":70,"connect":9,"send":0,"wait":28,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc","fqdn":"typeform.com","domain":"typeform.com","tld":""},"ip":{"addr":"3.164.206.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.typeform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:A4:91:18:24:13:09:F2:68:6C:41:7B:42:F1:13:AF:BC:06:76:1A","sha256":"8C:A5:3F:B8:D4:D3:30:2A:83:27:BA:02:DC:AF:F8:70:54:42:7E:9D:17:EC:8E:73:6B:42:A7:EC:1A:77:FD:CC"}}},"request":{"raw":"GET /signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc HTTP/1.1\r\nHost: typeform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: CloudFront\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-length: 0\r\nlocation: https://admin.typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc\r\nx-cache: LambdaGeneratedResponse from cloudfront\r\nvia: 1.1 fbd4a0e2b6e190d1de55a808ac68de96.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P5\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6oiDrblF8ZFmOie_rPjZC-IT-bl3cYhnSZabb85OT2yo3Qh4xB1CQA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jeeryzest.com/tG789Y7QSWkGgs7M/50653","fqdn":"jeeryzest.com","domain":"jeeryzest.com","tld":"com"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeeryzest.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 20:41:54 GMT","end":"Fri, 07 Nov 2025 20:41:53 GMT"},"fingerprint":{"sha1":"80:D4:D5:A7:77:24:E9:94:4F:CB:6F:35:3A:29:58:FC:50:21:75:26","sha256":"C2:DD:9E:EF:2A:CF:2D:DA:0F:61:EB:7D:9B:BB:2B:2D:86:BC:92:FD:2D:CD:B4:3C:EC:7E:F6:F8:5A:92:4A:01"}}},"request":{"raw":"GET /tG789Y7QSWkGgs7M/50653 HTTP/1.1\r\nHost: jeeryzest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"0bdc89a7d759e73ac388e35004cc8e11","sha1":"b141d7ba0a8e3eac30dd7a9046e050634f76e263","sha256":"da5075f0faf668a23e97a93a4fd30d91c087c5075b82ab061a2a57e8593cee94","sha512":"477a03cff4672d7e75dba8f9ec4c4204bc4c5b6a403ee43ca839dc04f4f45cfad6b87cf8fd1b625e817ef2c028dafbfa069e3f74a77bfb9b42a793a3e010b13b","ssdeep":"","tlshash":"eee08c1409b1c678463951cba1b5d3faa8e8067ea812a48a00dd8c0e3980eb598a7da1","first_seen":"2023-11-02T04:16:48Z","last_seen":"2026-05-27T07:33:40.389031Z","times_seen":592,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":264,"dns":217,"connect":25,"send":0,"wait":28,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-20","alert":"Sinkholed","trigger":"jeeryzest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pie-recipes.com/hpgddp?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=MYFREEMP3%20%E2%96%B7%20Free%20Mp3%20Downloads\u0026landing_url=new.myfreemp3juices.cc%2F\u0026name=_BMh2NdYctygcqbyV\u0026host=https%3A%2F%2Fpie-recipes.com%2Fhpgddp","fqdn":"pie-recipes.com","domain":"pie-recipes.com","tld":"com"},"ip":{"addr":"193.161.202.200","port":443,"asn":21100,"as":"Green Floid LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pie-recipes.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 08:07:57 GMT","end":"Fri, 24 Oct 2025 08:07:56 GMT"},"fingerprint":{"sha1":"8E:3D:C5:F2:53:07:38:E4:0E:49:51:0E:4C:66:05:F9:9F:9B:EF:E9","sha256":"EE:0C:5C:03:12:90:D1:47:51:00:73:4C:B7:06:17:EB:CC:95:38:5A:4B:77:27:0B:CD:74:34:A8:7B:7F:19:ED"}}},"request":{"raw":"GET /hpgddp?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=MYFREEMP3%20%E2%96%B7%20Free%20Mp3%20Downloads\u0026landing_url=new.myfreemp3juices.cc%2F\u0026name=_BMh2NdYctygcqbyV\u0026host=https%3A%2F%2Fpie-recipes.com%2Fhpgddp HTTP/1.1\r\nHost: pie-recipes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 1624\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: Wed, 20 Aug 2025 12:55:03 GMT\r\nSet-Cookie: _subid=1sjos4f1u890lj; expires=Tue, 30 Mar 2083 01:50:06 GMT; path=/hpgddp; httponly\n208c9=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjY4MDNcIjoxNzU1Njk0NTAzfSxcImNhbXBhaWduc1wiOntcIjYwMFwiOjE3NTU2OTQ1MDN9LFwidGltZVwiOjE3NTU2OTQ1MDN9In0.-N4aRNGFtyrK5XINJ1xkWAouHDE9BnsG0DVJZbIY4sE; expires=Tue, 30 Mar 2083 01:50:06 GMT; path=/hpgddp; httponly\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4000,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4000), with no line terminators","md5":"1779c8f0806411236a2cf38cf9dff4cf","sha1":"4578ddbec15752039a17b340f46c3d2f97194942","sha256":"f7d9447423bd68c228ae013ebde22d7fcb66341fecd5219337fb461bd16b6e39","sha512":"e906951271b59e420dc7ab094779107f9e5e2ea638816bfa5ffacf60d8ef757103f61b3a6b3a75605aeea9777978cd6e39a7ed32ca84658b8c0e5d7b58c79cbf","ssdeep":"","tlshash":"2181b4ab7468bdb2034254e084276225ba3a48a9e15fa0f4f36de5d82df840d4279f36","first_seen":"2025-08-20T12:55:29.479023Z","last_seen":"2025-08-20T12:55:29.479023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":103,"dns":39,"connect":20,"send":0,"wait":55,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"korfo.org/to2/xm.com/","fqdn":"korfo.org","domain":"korfo.org","tld":"org"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"korfo.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 06:09:07 GMT","end":"Wed, 01 Oct 2025 06:09:06 GMT"},"fingerprint":{"sha1":"CE:BE:A9:18:A6:6C:CB:3C:AA:7F:F4:D8:52:A1:93:C6:31:71:DA:DD","sha256":"B7:4C:00:9D:DA:81:D7:75:F6:F2:BB:69:9E:43:79:9C:92:AD:94:B0:CB:78:EE:4E:E6:84:39:51:ED:D0:DD:C3"}}},"request":{"raw":"GET /to2/xm.com/ HTTP/1.1\r\nHost: korfo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/vu/a/?1755694503\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?c=800261","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?c=800261 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=a04d091350c61fa6a7d7ebd4e03af109%7C2025-08-20; expires=Thu, 08 Aug 2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=aGVpc2EwNGQwOTEzNTBjNjFmYTZhN2Q3ZWJkNGUwM2FmMTA5OjoxODMzNDY6Omh0dHBzOi8va29yZm8ub3JnLzo6Ojo6OjgwMDI2MTo6MDo6MDo6MDo6OjowOjpkZWZhdWx0Ojow\r\nexpires: Wed, 20 Aug 2025 12:55:03 GMT\r\nx-bcs: ded7724\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":8,"dns":6,"connect":25,"send":0,"wait":20,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nethcdn.com/stat","fqdn":"nethcdn.com","domain":"nethcdn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nethcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 01:13:49 GMT","end":"Wed, 05 Nov 2025 02:11:00 GMT"},"fingerprint":{"sha1":"2E:9E:E2:08:81:FB:DF:61:04:7C:36:E1:9D:03:81:10:9E:5C:67:CF","sha256":"43:CC:B6:C3:97:9E:F3:A3:B0:55:AA:FB:60:43:7D:F3:6B:DB:79:96:95:EF:32:DF:44:3B:5D:A5:19:19:89:D8"}}},"request":{"raw":"GET /stat HTTP/1.1\r\nHost: nethcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://korfo.org/vu/a/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylaaSpRMTot7s1ZZZ9fY6K%2BLPxNwMlF%2FAnp4HESig%2F%2ByvVi6m8lsYW%2B%2FL6nmsQvvwz5%2BrmMpQg78JF26zkYlf5TOJ9dqjbg7%2F2Jq\"}]}\r\nset-cookie: qwerty_stat=0; Path=/; Max-Age=3600; Expires=Wed, 20 Aug 2025 13:55:03 GMT\r\ncf-ray: 97220af6dab2b9db-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":44,"dns":7,"connect":10,"send":0,"wait":72,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.getyourguide.com/?partner_id=ZUZJJY5\u0026utm_medium=online_publisher\u0026placement=%22banner%22","fqdn":"www.getyourguide.com","domain":"getyourguide.com","tld":"com"},"ip":{"addr":"104.18.229.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getyourguide.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 07:01:33 GMT","end":"Sat, 04 Oct 2025 08:01:31 GMT"},"fingerprint":{"sha1":"5C:3E:00:65:A9:3C:3A:02:1A:58:DB:BF:FC:54:60:22:D6:CE:13:98","sha256":"EA:8C:B2:03:33:AC:E9:97:43:01:3D:6C:D0:32:8C:E5:2F:0E:ED:F9:FB:67:4D:50:32:78:99:41:DA:8D:A3:71"}}},"request":{"raw":"GET /?partner_id=ZUZJJY5\u0026utm_medium=online_publisher\u0026placement=%22banner%22 HTTP/1.1\r\nHost: www.getyourguide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":17,"connect":38,"send":0,"wait":257,"receive":217,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"korfo.org/vu/a/","fqdn":"korfo.org","domain":"korfo.org","tld":"org"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"korfo.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 06:09:07 GMT","end":"Wed, 01 Oct 2025 06:09:06 GMT"},"fingerprint":{"sha1":"CE:BE:A9:18:A6:6C:CB:3C:AA:7F:F4:D8:52:A1:93:C6:31:71:DA:DD","sha256":"B7:4C:00:9D:DA:81:D7:75:F6:F2:BB:69:9E:43:79:9C:92:AD:94:B0:CB:78:EE:4E:E6:84:39:51:ED:D0:DD:C3"}}},"request":{"raw":"GET /vu/a/ HTTP/1.1\r\nHost: korfo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new.myfreemp3juices.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"385e5a866451cccc4a23816b416cc956","sha1":"3e58d4d735f2816d77ee227e7a218ed58bbe81e6","sha256":"dc2b3dec7f17d01c4d0d47d083e20b1c3dfaff2cb36252ef1d16590b7cc17f9f","sha512":"1465861f8ba71292aff06626566e36ec898cae36a1c5e4f1fad9d47aada19749d26c3ed76264f560ba3fdc0a3fd61927b89f9595f40751202dc4d14cda855c49","ssdeep":"","tlshash":"b1d012970016210dc728f6c0a9c1239924e737dfb9e24dad0ae5e233a558a66c4076dd","first_seen":"2025-08-20T12:55:29.481584Z","last_seen":"2025-08-20T12:55:29.481584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":121,"dns":60,"connect":28,"send":0,"wait":28,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rbfxdirect.com/ru/lk/?a=zkeb","fqdn":"www.rbfxdirect.com","domain":"rbfxdirect.com","tld":"com"},"ip":{"addr":"172.67.191.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbfxdirect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 03:54:24 GMT","end":"Fri, 03 Oct 2025 04:50:50 GMT"},"fingerprint":{"sha1":"75:6F:1B:80:96:2C:F4:67:A7:54:A5:D2:B3:1A:12:AF:9F:A2:57:D7","sha256":"57:4E:B2:89:00:99:92:9C:95:22:EF:9A:84:2D:AA:6B:F7:66:9F:F0:56:62:2C:73:FB:EE:92:19:84:F4:0E:BB"}}},"request":{"raw":"GET /ru/lk/?a=zkeb HTTP/1.1\r\nHost: www.rbfxdirect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\nlocation: https://my28.roboforex.org/ru/?a=zkeb\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ribCaXyVq%2BmoaiV2DnMLk1WBOQBPIItLMZIhlttr%2FOAD2UfwClglN2YCwZAyxzP8%2ByfeDnr%2FdVRainvV3aEF09OtmunIpvkXLgLAenkihw3jNg%3D%3D\"}]}\r\ncf-ray: 97220afa2f527656-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":152,"dns":6,"connect":13,"send":0,"wait":52,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offer.alibaba.com/cps/mvgoi1de?bm=cps\u0026src=saf","fqdn":"offer.alibaba.com","domain":"alibaba.com","tld":"com"},"ip":{"addr":"23.49.27.74","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"air.alibaba.com","organization":"Alibaba Cloud Computing Ltd."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:04:4F:13:E2:9F:66:3D:DB:29:CD:38:EE:DB:B8:F2:B7:FE:21:22","sha256":"C4:7D:6C:92:B0:22:79:DF:5F:3F:AB:01:EF:6F:49:9D:E5:BF:0F:18:13:81:28:75:DD:0B:9F:D1:8E:72:BD:3D"}}},"request":{"raw":"GET /cps/mvgoi1de?bm=cps\u0026src=saf HTTP/1.1\r\nHost: offer.alibaba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 11\r\nlocation: https://offer.alibaba.com/?xp=Ah5nTus6MckTMhVNn_7oP0_ICj9Nq9lT4A4ufq6mVBqsCrIHWKmi6L2Vjefz1I5wozPRl-0Z-AfcJY2YxAK38j-moCwYm8iJBrC_UmZ-bxssMbeanHAIqwcTEART57S-\u0026cps_sk=mvgoi1de\u0026bm=cps\u0026src=saf\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nicbu_s_tag: 0_2_11\r\nicbu_s_ip: MTjCM0JX+uc2T0Oh5ay5E0U41xitEZ1HWxBp/8Melaq8TXshtQdUwA==\r\nicbu_s_hostname: 2Apq7heKeGhfux9ZoS4nxmp7txfaTf17ipLAm1nSXRG6XhYLWMWoThDYGM1yRTy4uRS5fxWWB3YmFfmLmjAeWA==\r\nicbu_s_unit: rg-de-3\r\nicbu_s_v: 1.0.15\r\ncontent-language: en-US\r\nups-target-key: offer.alibaba.com\r\nx-protocol: HTTP/1.1\r\neagleeye-traceid: 21613e1617556945040991111e0f72\r\nstrict-transport-security: max-age=31536000\r\ns-brt: 22\r\ns-rt: 23\r\ntiming-allow-origin: *\r\neagleid: 21613e1617556945040991111e0f72\r\nserver-timing: rt;dur=0.023,eagleid;desc=21613e1617556945040991111e0f72,brt;dur=22\r\nexpires: Wed, 20 Aug 2025 12:55:04 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\nset-cookie: ali_apache_id=33.97.62.22.1755694504105.627737.6; path=/; domain=.alibaba.com; expires=Wed, 30-Nov-2084 01:01:01 GMT\nuns_unc_f=trfc_i=safcps^mvgoi1de^gmf0s71j33oo65j55ilAR^1j33oo65n; Domain=.alibaba.com; Path=/; Expires=Thu, 20-Aug-2093 12:55:04 GMT\nali_apache_track=; Max-Age=2147483647; Expires=Mon, 07-Sep-2093 16:09:11 GMT; Domain=alibaba.com; Path=/\nali_apache_tracktmp=; Domain=alibaba.com; Path=/\ncookie2=df972fd82f49f8525fd33b919baefc38; Domain=.alibaba.com; Path=/; Secure; HttpOnly\nicbu_s_tag=0_2_11; Domain=.alibaba.com; Expires=Wed, 27-Aug-2025 12:55:04 GMT; Path=/; Secure; HttpOnly\r\nalt-svc: h3=\":443\"; ma=2592000\r\nedge-type: akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":208,"dns":132,"connect":9,"send":0,"wait":65,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brocardcored.com/tbYfzfUUpmGll/50653","fqdn":"brocardcored.com","domain":"brocardcored.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brocardcored.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 07:14:04 GMT","end":"Sun, 16 Nov 2025 08:11:44 GMT"},"fingerprint":{"sha1":"60:9D:06:13:D4:33:78:31:D3:C2:0E:11:7E:94:35:51:17:E8:F3:1A","sha256":"6C:43:D3:E4:F5:93:45:2A:47:96:26:1F:E3:4F:18:23:C7:76:8F:8B:8B:63:3A:CA:A8:BA:E5:78:2E:61:C9:D3"}}},"request":{"raw":"GET /tbYfzfUUpmGll/50653 HTTP/1.1\r\nHost: brocardcored.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-length: 6616\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Jun 2025 17:36:48 GMT\r\netag: \"19d8-637c7f4f7cc88;638399acf38b3\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWVGad4fPiRozmf8AEJ7LSDMpdTRgHCYdCyhUEQreFyeZEkPeDT5csr5K3BczUxiT%2FmXrOZmpsJsF8zSU%2BiiQnuW4U18ai2MY9A9C4w5q7A%3D\"}]}\r\ncf-ray: 97220af39ababe8f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6616,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (6615)","md5":"0bb6ac70a2a0bfc1e479d7a75cea4a3e","sha1":"0541d2a0215c14aa9303d1248219ab6498b03989","sha256":"eddb57c245c45be031737173fde07e5b52f39be4eb90b7030d24fc0c9407203a","sha512":"e2517248f5e609106dfa93e35c32933a46b84c1c6d650bfe275231ab6f437a872f807d1de9536299cbd5c39c0c6bd5064f7433a3b886eaa267a14c22a23f9bab","ssdeep":"192:xS4jGhAGB4FvTHuzTeRjTFNpKV/T+LgOToO+R6iymg6q4NBUjRDoNWxJ/lEWRngt:ihApFvTHuzTeRjTFXKV/T+Lg69xt2","tlshash":"3ad1255863c168532b479de6362e71c1d45b778e2ebb440bac116f00b765726a3fea30","first_seen":"2025-06-29T14:02:43.182791Z","last_seen":"2026-02-17T03:51:23.086717Z","times_seen":189,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":59,"dns":30,"connect":11,"send":0,"wait":149,"receive":20,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-20","alert":"Sinkholed","trigger":"brocardcored.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/myfreemp3juice.cc.js?v=1.01","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"GET /myfreemp3juice.cc.js?v=1.01 HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 20 Jan 2024 11:25:11 GMT\r\netag: W/\"65abad97-37ca1\"\r\nexpires: Fri, 22 Aug 2025 03:27:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-ua-compatible: IE=Edge\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2453269\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtVh0HHoiTpFAZ6CAr5LucGCUvw%2Bt7vgVzHjjC5IRA3mbz604G%2Bkf7WzN86XWb1zSBXm1yEzqIZzzFvQ1wtFeQ3fuu9O279WKWLkH7emymK3%2BRSqHA%3D%3D\"}]}\r\ncf-ray: 97220af32ba55cc8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"49860eec759d616395c361ca3062db3a","sha1":"81bf875a9806125e15012138f4269c578045b91b","sha256":"1a79a226c100ce1dc01de02ea8168d0c9961d5e717b29f26ca4823973d88a3a7","sha512":"40c8f285fbfcdc8a6c84bda6def58e6ba06cfb79690f72d6e8e343f3105f5019211b6bb28edf6b321978f2613a3556c093c7047c7090984bf5f3798ba1201587","ssdeep":"3072:OigPySfLijtFcvlv6Fny89+RNYk4odr/ohG9l8YNsR:OTySTiB2NvSy89+RNYk4odrZNO","tlshash":"53244b8df291702147e760a4506f010bb23a5969b40b809cf179f9e9bd78e4ea17bf7c","first_seen":"2024-01-27T21:41:55Z","last_seen":"2025-11-08T13:57:32.67149Z","times_seen":11,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"powered-by-revidy.com/a","fqdn":"powered-by-revidy.com","domain":"powered-by-revidy.com","tld":"com"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"powered-by-revidy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:21:08 GMT","end":"Wed, 22 Oct 2025 06:21:07 GMT"},"fingerprint":{"sha1":"3F:32:52:B8:60:1D:4E:90:AA:8C:F1:4B:11:5F:C2:FC:72:2D:90:39","sha256":"8D:18:3A:97:6E:D6:51:FF:2E:67:5E:48:87:DC:E1:6C:20:53:34:D1:86:89:77:00:B4:E6:78:C4:DA:69:3D:49"}}},"request":{"raw":"GET /a HTTP/1.1\r\nHost: powered-by-revidy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: qwerty_a=0; expires=Wed, 20-Aug-2025 13:55:03 GMT; Max-Age=3600; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"43f78a174b6e381797c7ba54737e8151","sha1":"47739bb4bc4c19564a15a557216deb21e5c73a67","sha256":"d98e2f04d872c81fed77c703ad65c8fcee805242dec27dd847f21a7c5be3b4f3","sha512":"015a6807053b6b1ad2476b75d2456dec66d427c9c259ca98ef614fe65557d194e680fa0f4e11637db356ca15346c83303152a7d35c8323f461ab67e6446611a1","ssdeep":"","tlshash":"39c09beb18515205473265503891311145535f99548646e8c6d4f0fa69b4f65d8472a4","first_seen":"2024-12-31T08:29:35.955765Z","last_seen":"2026-05-27T07:33:40.300739Z","times_seen":525,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":63,"dns":6,"connect":26,"send":0,"wait":28,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trusteeglobal.com/?refferals=yq9NBsH22Hb","fqdn":"www.trusteeglobal.com","domain":"trusteeglobal.com","tld":"com"},"ip":{"addr":"172.66.162.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trusteeglobal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:58:29 GMT","end":"Thu, 16 Oct 2025 22:58:23 GMT"},"fingerprint":{"sha1":"BA:14:F6:91:30:6E:38:D9:E2:A0:A8:5E:59:3E:25:A2:F2:C0:B1:AD","sha256":"F4:F9:D9:4F:9A:08:8B:C2:7A:B9:58:32:22:86:E1:B2:50:0A:41:B6:33:80:4A:C3:1F:60:90:BA:A7:BD:89:02"}}},"request":{"raw":"GET /?refferals=yq9NBsH22Hb HTTP/1.1\r\nHost: www.trusteeglobal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97220afa3ac699fc-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":17,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remitano.com/","fqdn":"remitano.com","domain":"remitano.com","tld":"com"},"ip":{"addr":"104.18.28.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remitano.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:24:50 GMT","end":"Sat, 08 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"4D:B8:CA:84:84:EC:BE:0A:E0:B9:A4:13:AB:07:73:31:CA:E6:67:13","sha256":"03:7D:0F:11:61:84:D6:02:5D:74:BE:A8:C6:3E:04:B1:FD:24:1B:0D:72:3D:07:9F:BE:C3:1E:89:6D:9F:32:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: remitano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nset-cookie: AWSALB=IHobPbcQZ2tZcAj5+NRCgSE9B54pROeSxgXgQsmJ0hZrGB5QkFWsUF1d8whcM/vL2hzQCf9JahSJt9rZdA9hrM3HHjFAAGnrvvBoRqhG5TnImjUkn8aYgYNzVDCw; Expires=Wed, 27 Aug 2025 12:55:04 GMT; Path=/\nAWSALBCORS=IHobPbcQZ2tZcAj5+NRCgSE9B54pROeSxgXgQsmJ0hZrGB5QkFWsUF1d8whcM/vL2hzQCf9JahSJt9rZdA9hrM3HHjFAAGnrvvBoRqhG5TnImjUkn8aYgYNzVDCw; Expires=Wed, 27 Aug 2025 12:55:04 GMT; Path=/; SameSite=None; Secure\nAWSALB=7ZXCvGx9JWUT9sXaHwiRmeJFOHCYLSQkU8XWRnmV0KUi42VdSWi1VsLL2sbaYch16sYpBnItBcezH9sZABm6wmqhtrJt2sDumoc8N0fJNMUL4SPaPqAqvuRHRxmu; Expires=Wed, 27 Aug 2025 12:55:04 GMT; Path=/\nAWSALBCORS=7ZXCvGx9JWUT9sXaHwiRmeJFOHCYLSQkU8XWRnmV0KUi42VdSWi1VsLL2sbaYch16sYpBnItBcezH9sZABm6wmqhtrJt2sDumoc8N0fJNMUL4SPaPqAqvuRHRxmu; Expires=Wed, 27 Aug 2025 12:55:04 GMT; Path=/; SameSite=None; Secure\nconnect.sid=s%3AMUrgYqvOENehxWPsEDflM9KL_umQWiti.A9SR0mX6g1T7VRmUBI%2BoDo%2FgMZiCuQGxH%2BH2x69HdEA; Path=/; Expires=Thu, 21 Aug 2025 12:55:04 GMT; HttpOnly\n__cf_bm=ntYei1whgyUj2pQ_ww_qdhCSR8CHebSrh2Kh0GftUrc-1755694504-1.0.1.1-OI.eBqo.am1EZv1k1FDXfPHeau3Vz1aICq3HLMn90ZHjHEQLD8.9L.ekMAwKZlw3H82G.OOrhLhwMlKS1KPUxpBrzGYXm5kxJ8DKTaJYXHY; path=/; expires=Wed, 20-Aug-25 13:25:04 GMT; domain=.remitano.com; HttpOnly; Secure; SameSite=None\n_cfuvid=xvM2kN6jEBKTYQ1QeBVVrRK610nutALw4ZyknLiOVWY-1755694504312-0.0.1.1-604800000; path=/; domain=.remitano.com; HttpOnly; Secure; SameSite=None\r\nx-powered-by: Remitano\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src * 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https://remitano.com\r\npermissions-policy: camera=(*)\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 97220afa8884be8f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex.io/r/147/up111785894/147","fqdn":"cex.io","domain":"cex.io","tld":"io"},"ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Jul 2024 00:00:00 GMT","end":"Wed, 27 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:55:71:77:34:1D:C8:79:FB:92:23:D7:96:CE:9C:58:58:45:B5:9C","sha256":"98:A4:1E:88:07:6D:E4:50:2A:3B:08:D9:8C:1F:0C:72:8C:47:FB:49:DE:43:55:60:76:0E:DC:AE:7D:C5:96:1F"}}},"request":{"raw":"GET /r/147/up111785894/147 HTTP/1.1\r\nHost: cex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\nlocation: https://plus.cex.io/welcome-bonus\r\nserver: cloudflare\r\ncf-ray: 97220afa8f130d92-ARN\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nset-cookie: cex-session=s%3AjeyDDjneJixKyWmtlXt88XdX.FX2TrVFBf8mLw0CeJ9LHejxI2XTPTjsW9MpTVu3uhUU; Path=/; HttpOnly; Secure; SameSite=None\nref=up111785894%3A147; Max-Age=2592000; Domain=.cex.io; Path=/\nref=referral:korfo.org:; Max-Age=31536000; Domain=.cex.io; Path=/\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\ncontent-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr;\r\nx-app-version: master.04e478ee.6af04fc4e89441923223465930e8a7cfbd8fca6efdf780d01241f4e210eed89d.1755688500572\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqbroker.com/lp/mobile-partner-pwa/?aff=7792\u0026aff_model=revenue\u0026afftrack=","fqdn":"iqbroker.com","domain":"iqbroker.com","tld":"com"},"ip":{"addr":"185.117.132.1","port":443,"asn":209180,"as":"Iqoption Europe Ltd","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.iqbroker.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 02:08:33 GMT","end":"Wed, 01 Oct 2025 02:08:32 GMT"},"fingerprint":{"sha1":"82:8E:01:6A:89:BF:F3:19:FD:41:A4:90:2D:8E:F3:7E:A3:AA:A1:0F","sha256":"9B:F6:D4:B3:86:1B:5F:45:DB:55:7D:E2:74:88:D0:D9:49:CD:61:49:27:1E:08:F9:57:D3:33:46:CE:B4:90:20"}}},"request":{"raw":"GET /lp/mobile-partner-pwa/?aff=7792\u0026aff_model=revenue\u0026afftrack= HTTP/1.1\r\nHost: iqbroker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-length: 0\r\nlocation: https://iqbroker.com/lp/regulated/?aff=7792\u0026aff_model=revenue\u0026afftrack=\r\nx-traceid: b37b2fb49a5baa41ad60f2256f86f757\r\nlast-modified: 1755694504\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nset-cookie: Traceid=b37b2fb49a5baa41ad60f2256f86f757; expires=Thu, 28 Aug 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff_model=revenue; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff_ts=2025-08-20T12:55:04Z; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsRestrictedCountry=false; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsRegulatedCountry=true; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nCountry=no; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nCountryID=149; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nAffTrackGroup=Black_team_(partnerka); expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nServ=NL; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nreferrer=https://korfo.org/; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nAppID=id871125783; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nbrand_id=1; expires=Wed, 27 Aug 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nsupport_email=support@eu.iqoption.com; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\ncompany_id=1; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsAppStoreCountry=true; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff=; expires=Tue, 10 Nov 2009 23:00:00 GMT\nafftrack=; expires=Tue, 10 Nov 2009 23:00:00 GMT\naffextra=; expires=Tue, 10 Nov 2009 23:00:00 GMT\nretrack=; expires=Tue, 10 Nov 2009 23:00:00 GMT\nlanding=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\nbackend: arbitre\r\nstrict-transport-security: max-age=15555600\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":4,"dns":11,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/css.css","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:02 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 Mar 2023 22:22:05 GMT\r\netag: W/\"640bad8d-4840\"\r\nexpires: Fri, 22 Aug 2025 03:27:14 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-ua-compatible: IE=Edge\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2453268\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iL1o75cpI7GJ2PANljCeACMAIgmhe1QUHOzKNuFX%2FPDIKh3u0EyHQvtkpRDQR5bho7UEc39%2Bei%2Bn9ITUxgVVKoslECS2zLL7TAw0Y9SH2sF5sT3dDA%3D%3D\"}]}\r\ncf-ray: 97220af32b925cc8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18496,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (18496), with no line terminators","md5":"006ed91f7cbac1d5f084a356ab7bb6ba","sha1":"afe20ffff37c8d5bd187e30372301e6202740cfb","sha256":"0798f1adc34cc49ed7af64606e95d3f96e2bb5f3e25219dd05193bef111482e6","sha512":"64a1faf057cad18716b297afe624a7176272e92da476f99112454c98ab3e65b41d838f26b0356d42d576b3027037025b51ed9dfaec3edfba2d4a6a7a34a5ab7c","ssdeep":"384:DYIQxwjrpuW8ldgD969xvRiFCSfxjDkjhhrqU0st70lf4OSy8fTsg:7QKvadgD96LvEFhjDkjhhrqUClf4y8fj","tlshash":"1e82b3b1b1307568b6b786a971d0ad876c2a6153d5370afbf03eb5a48bd20891733f4c","first_seen":"2025-07-03T14:16:39.631869Z","last_seen":"2026-04-25T14:47:55.449762Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iclickcdn.com/tag.min.js","fqdn":"iclickcdn.com","domain":"iclickcdn.com","tld":"com"},"ip":{"addr":"104.26.13.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iclickcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 08:34:08 GMT","end":"Mon, 29 Sep 2025 09:33:53 GMT"},"fingerprint":{"sha1":"2A:CF:C0:76:E6:2D:E3:37:AA:44:82:FA:2E:24:9D:F5:36:91:80:DB","sha256":"99:F9:8B:A6:38:18:7F:1E:FC:24:F3:12:13:32:10:20:30:45:5F:FB:C7:81:5F:45:11:A0:38:53:07:53:D9:92"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: iclickcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 76003a465ab41bf9d7dd3c180df5074b\r\ncache-control: max-age=86400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\nexpires: Thu, 21 Aug 2025 11:54:39 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 3623\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 20 Aug 2025 11:54:39 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1GJFsGKKwO5qHsjTC59wGNh5LdRpIHv5nAykKesLTJu3fXGSydbBbGHVq%2BxJAjXKHhddpBa7notxy6eTeVwRXygp7y4XhAt1cfQ6Q%3D%3D\"}]}\r\ncf-ray: 97220af45b5113b8-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108099,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"68262e874691ebb1987e781b248e2c3a","sha1":"0c7912df29ed9586e7b0c9d5d742c4ca87478bc6","sha256":"7835f96f51f8fba72a19d237ea2cbabd67a85de031d8daad06e82407458349fb","sha512":"16e237c4b3e118ba24a9f509541408278eb74387050aceff24b4b1b5166a30f2783dfdfa498632a94bb86faa031166d18a61583faa90cdd2accc9a90eaed69e8","ssdeep":"1536:Y2iqSZ4UmipDQ20OzYPLdogFlijQ9GXrD9w8koAEjT8B7:YrZ4PRPOgFgjQ90w8kodjm7","tlshash":"aeb32c9462a634b02da6413c754fc94dbee6af50048e49e0d0e9acb37657074d3bfee8","first_seen":"2025-08-20T10:58:45.575019Z","last_seen":"2025-08-20T12:55:29.490648Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":40,"dns":9,"connect":8,"send":0,"wait":23,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a11ybar.com/ok6.js","fqdn":"a11ybar.com","domain":"a11ybar.com","tld":"com"},"ip":{"addr":"172.67.136.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a11ybar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 12:34:11 GMT","end":"Fri, 07 Nov 2025 13:30:53 GMT"},"fingerprint":{"sha1":"23:3B:D9:38:C6:01:31:15:54:EE:A5:13:67:3C:34:E8:A6:EF:D1:93","sha256":"16:4D:CD:12:74:4A:B1:43:93:E8:EB:A5:72:E2:FC:8B:8A:D1:E0:AE:1D:5C:F5:35:26:B4:D2:22:E5:F8:C5:F2"}}},"request":{"raw":"GET /ok6.js HTTP/1.1\r\nHost: a11ybar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/5.4.16\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0PhXZQCV9WMICA7Mp%2Fy%2F10NKKpXG7qkAl%2FzEhuWScxNS55emJI0fTkR%2B%2BOBZMQ95fq5UFxj1%2F30qkxSTVIHjb7SlWQ9h%2BIsCVM%2F\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97220af599db96bf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"83cb13af83103c0462f2887b9e2e59fc","sha1":"bba2c6f03a513588a6001980e7e11cfda068d2a2","sha256":"ae723359f13e5593e4c492c99a8d4751a3349efc137fb3ea701a991c4867b242","sha512":"dcc8381facf78e829897b4cf3868d284139afd54c834b86cc3a1ea11e9e9110d4552b4aa26f135edd72b4e40dde853531861050f017605ea0d977fa075ec950e","ssdeep":"","tlshash":"2ec02b091ca3ca30c44c84ca30f6c334b5bc11200071d0d580cec8dcd458fd28c4ad20","first_seen":"2023-10-31T12:07:42Z","last_seen":"2026-05-27T07:33:40.25761Z","times_seen":1363,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":41,"dns":7,"connect":10,"send":0,"wait":41,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc","fqdn":"admin.typeform.com","domain":"admin.typeform.com","tld":""},"ip":{"addr":"108.156.22.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typeform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:DC:6A:FE:F2:B3:4A:73:B4:AE:83:E1:25:4E:DF:05:B4:26:3B:D5","sha256":"A6:CE:98:88:54:75:2A:83:AB:50:50:80:94:79:FC:80:7A:DA:1F:DF:AB:A1:D2:77:44:64:7B:3E:41:9C:E2:E3"}}},"request":{"raw":"GET /signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc HTTP/1.1\r\nHost: admin.typeform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ndate: Wed, 20 Aug 2025 02:33:06 GMT\r\nlast-modified: Tue, 19 Aug 2025 13:52:41 GMT\r\netag: W/\"e0ba65994498ca0cbc4f6aa00c3eeff7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: UZkMoikbicWFiZQUF3zBu1UtPYe66PYN\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8f67e81092ebd47bc649d954af911676.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P1\r\nx-amz-cf-id: R5jVi5LsnfTJL141awfXwltK_KQCS5fZEhSUig0ItkYaTm8O5t701Q==\r\nage: 37319\r\ncontent-security-policy: report-uri https://endpoint2.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV0FHJqllZOL8NGBGJ1LYQariAuQAshoC3Or0KiW50IVf_yZesnfwSAdPbZHnAYnPXdEGDKyFSvvZkrXO5Kp3vCig0_irFk63g2y17e_WMxuVA== ; frame-ancestors 'report-sample' https://typeform.com https://www.typeform.com https://staging.typeform.com https://*.webflow-ext.com https://webflow.com https://*.design.webflow.com https://webflow.w2.sk https://playground-typeform.vercel.app https://*.bitly.com https://*.bitly.net https://*.bitly.org http://localhost:1337 ;\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: report-uri https://endpoint2.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV2u2GjwMA9q_eiqKg5HCQ6WqgWnyE_O8O5rs_5vhjwTVHSzKUOOo6KznuzliyG76vE5uwlKAGy0C9uQWbsWBt1dP5ppWyVV03wAuGxliL4Qrg== ; block-all-mixed-content ; default-src 'none' ; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'nonce-NONCEPLACEHOLDER' 'strict-dynamic' ; base-uri 'report-sample' 'self' ; img-src 'report-sample' 'self' https: data: ; connect-src 'report-sample' 'self' https://www.facebook.com https://api.rollbar.com https://api.segment.io https://api.amplitude.com https://bar.stunning.co https://rs.fullstory.com https://stats.g.doubleclick.net https://www.google-analytics.com https://bam.nr-data.net ; style-src 'report-sample' https://font.typeform.com 'unsafe-inline' ; font-src 'report-sample' https://font.typeform.com https://fonts.gstatic.com data: ; frame-src 'report-sample' https://www.google.com https://www.facebook.com https://tpc.googlesyndication.com ;\r\ncache-control: public, max-age=0, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":50,"dns":14,"connect":14,"send":0,"wait":15,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqbroker.com/lp/regulated/?aff=7792\u0026aff_model=revenue\u0026afftrack=","fqdn":"iqbroker.com","domain":"iqbroker.com","tld":"com"},"ip":{"addr":"185.117.132.1","port":443,"asn":209180,"as":"Iqoption Europe Ltd","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.iqbroker.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 02:08:33 GMT","end":"Wed, 01 Oct 2025 02:08:32 GMT"},"fingerprint":{"sha1":"82:8E:01:6A:89:BF:F3:19:FD:41:A4:90:2D:8E:F3:7E:A3:AA:A1:0F","sha256":"9B:F6:D4:B3:86:1B:5F:45:DB:55:7D:E2:74:88:D0:D9:49:CD:61:49:27:1E:08:F9:57:D3:33:46:CE:B4:90:20"}}},"request":{"raw":"GET /lp/regulated/?aff=7792\u0026aff_model=revenue\u0026afftrack= HTTP/1.1\r\nHost: iqbroker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Traceid=b37b2fb49a5baa41ad60f2256f86f757; aff_model=revenue; aff_ts=2025-08-20T12:55:04Z; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; AffTrackGroup=Black_team_(partnerka); Serv=NL; referrer=https://korfo.org/; AppID=id871125783; brand_id=1; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-length: 0\r\nlocation: https://iqbroker.com/lp/regulated/en/?aff=7792\u0026aff_model=revenue\u0026afftrack=\r\nx-traceid: c127c0a1622ae9b6cb044e1231780d0e\r\nlast-modified: 1755694504\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nlink: \u003chttps://iqbroker.com/lp/regulated/en/\u003e; rel=\"canonical\"\r\nset-cookie: Traceid=c127c0a1622ae9b6cb044e1231780d0e; expires=Thu, 28 Aug 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff=139769; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nafftrack=from_aff_7792; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nretrack=; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naffextra=; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff_model=revenue; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\naff_ts=2025-08-20T12:55:04Z; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nlanding=/lp/regulated/; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsRestrictedCountry=false; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsRegulatedCountry=true; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nCountry=no; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nCountryID=149; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nAffTrackGroup=Black_team_(partnerka); expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nServ=NL; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nreferrer=https://korfo.org/; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nAppID=id871125783; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nbrand_id=1; expires=Wed, 27 Aug 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nsupport_email=support@eu.iqoption.com; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\ncompany_id=1; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\nIsAppStoreCountry=true; expires=Sat, 20 Sep 2025 12:55:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None\r\nbackend: arbitre\r\nstrict-transport-security: max-age=15555600\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=aGVpc2EwNGQwOTEzNTBjNjFmYTZhN2Q3ZWJkNGUwM2FmMTA5OjoxODMzNDY6Omh0dHBzOi8va29yZm8ub3JnLzo6Ojo6OjgwMDI2MTo6MDo6MDo6MDo6OjowOjpkZWZhdWx0Ojow","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=aGVpc2EwNGQwOTEzNTBjNjFmYTZhN2Q3ZWJkNGUwM2FmMTA5OjoxODMzNDY6Omh0dHBzOi8va29yZm8ub3JnLzo6Ojo6OjgwMDI2MTo6MDo6MDo6MDo6OjowOjpkZWZhdWx0Ojow HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=OvAE1Edcp_J7cU2TOxjNVCFKyeV68ENoGeHPGhohWC4-1755694504-1.0.1.1-yqLKpGTmWcegth47p5Met_iE5YK3MN7YHZ4Tb3tUHCDs92_Ji1MuQ24qjB_8gj5TO2HagnG5x4D89sj3vh6JXNhh5oFDew1C6tu27W8Wc9f3k5rYC0gKj7J0VIVxquN_\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bonga20120608=9e6b93130832d0c31c5c03c88830a208; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nts_type2=1; expires=Thu, 20-Aug-2026 12:55:04 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AQN1AQx2AGH3ZD==; expires=Thu, 20-Aug-2026 12:55:04 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=ETABARuLJRu6GSueo3blnRSEDHybAt==; expires=Thu, 20-Aug-2026 12:55:04 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=183346%3A%3A800261%3A%3A2025-08-20%2015%3A55%3A04%3A%3Ahttps%3A%2F%2Fkorfo.org%2F%3A%3A%3A%3A; expires=Thu, 08-Aug-2075 12:55:04 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nBONGAH_HIT=a04d091350c61fa6a7d7ebd4e03af109%3A%3A183346%3A%3Ahttps%3A%2F%2Fkorfo.org%2F%3A%3A%3A%3A%3A%3A800261%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-08-20%2015%3A55%3A04; expires=Mon, 16-Feb-2026 12:55:04 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nBONGA_REF=https%3A%2F%2Fkorfo.org%2F; expires=Mon, 16-Feb-2026 12:55:04 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Thu, 20-Aug-2026 12:55:04 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nsg=391; expires=Thu, 20-Aug-2026 12:55:04 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\nwarning18=%5B%22en_US%22%5D; expires=Thu, 20-Aug-2026 12:55:04 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web44\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 97220afc9d0ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc","fqdn":"typeform.com","domain":"typeform.com","tld":""},"ip":{"addr":"3.164.206.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.typeform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:A4:91:18:24:13:09:F2:68:6C:41:7B:42:F1:13:AF:BC:06:76:1A","sha256":"8C:A5:3F:B8:D4:D3:30:2A:83:27:BA:02:DC:AF:F8:70:54:42:7E:9D:17:EC:8E:73:6B:42:A7:EC:1A:77:FD:CC"}}},"request":{"raw":"GET /signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc HTTP/1.1\r\nHost: typeform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: CloudFront\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-length: 0\r\nlocation: https://admin.typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc\r\nx-cache: LambdaGeneratedResponse from cloudfront\r\nvia: 1.1 fbd4a0e2b6e190d1de55a808ac68de96.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P5\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: e7MVUaXAkVgpdilppjFbBuKaT_XgkjURy3Yore1xtoYjRt1DxsWkFQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":62,"connect":43,"send":0,"wait":56,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.alibaba.com/?xp=Ah5nTus6MckTMhVNn_7oP0_ICj9Nq9lT4A4ufq6mVBqsCrIHWKmi6L2Vjefz1I5wozPRl-0Z-AfcJY2YxAK38j-moCwYm8iJBrC_UmZ-bxssMbeanHAIqwcTEART57S-\u0026cps_sk=mvgoi1de\u0026bm=cps\u0026src=saf","fqdn":"www.alibaba.com","domain":"alibaba.com","tld":"com"},"ip":{"addr":"23.49.27.74","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"air.alibaba.com","organization":"Alibaba Cloud Computing Ltd."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:04:4F:13:E2:9F:66:3D:DB:29:CD:38:EE:DB:B8:F2:B7:FE:21:22","sha256":"C4:7D:6C:92:B0:22:79:DF:5F:3F:AB:01:EF:6F:49:9D:E5:BF:0F:18:13:81:28:75:DD:0B:9F:D1:8E:72:BD:3D"}}},"request":{"raw":"GET /?xp=Ah5nTus6MckTMhVNn_7oP0_ICj9Nq9lT4A4ufq6mVBqsCrIHWKmi6L2Vjefz1I5wozPRl-0Z-AfcJY2YxAK38j-moCwYm8iJBrC_UmZ-bxssMbeanHAIqwcTEART57S-\u0026cps_sk=mvgoi1de\u0026bm=cps\u0026src=saf HTTP/1.1\r\nHost: www.alibaba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html;charset=UTF-8\r\nlink: \u003chttps://s.alicdn.com\u003e; rel=preconnect;\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-encoding: gzip\r\nups-target-key: haumea.alibaba.vipserver\r\nx-protocol: HTTP/1.1\r\neagleeye-traceid: 2161385217556945045632213e0fda\r\nstrict-transport-security: max-age=31536000\r\ns-brt: 530\r\ns-rt: 531\r\ntiming-allow-origin: *\r\neagleid: 2161385217556945045632213e0fda\r\nexpires: Wed, 20 Aug 2025 12:55:05 GMT\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\ndate: Wed, 20 Aug 2025 12:55:05 GMT\r\nvary: Accept-Encoding\r\nset-cookie: JSESSIONID=496513D686E2D73A4E138825FBC30A96; Path=/; HttpOnly\nsc_g_cfg_f=sc_b_site=NO\u0026sc_b_locale=en_US\u0026sc_b_currency=NOK; Max-Age=7776000; Expires=Tue, 18 Nov 2025 12:55:04 GMT; Domain=alibaba.com; Path=/; Secure\ncna=null; Domain=.alibaba.com; Path=/; Expires=Mon, 07-Sep-2093 16:09:12 GMT; Secure; SameSite=None\nuns_unc_f=trfc_i=safcps^mvgoi1de^gmf0s71j33oo65j55ilAR^1j33oo65n; Domain=.alibaba.com; Path=/; Expires=Mon, 07-Sep-2093 16:09:12 GMT; Secure; SameSite=None\nug_se_c=pay|other|search|tm_1755694505098; Domain=.alibaba.com; Expires=Sat, 28-Apr-2057 14:41:44 GMT; Path=/; Secure\nug_se_c_tag=ts=1755694505098; Domain=.alibaba.com; Expires=Fri, 22-Aug-2025 12:55:05 GMT; Path=/; Secure\r\nalt-svc: h3=\":443\"; ma=2592000\r\nquic-version: 0x00000001\r\nserver-timing: rt;dur=0.531,eagleid;desc=2161385217556945045632213e0fda,brt;dur=530, akamai;dur=577;desc=cache-miss\r\nedge-type: akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":587,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/android-icon-192x192.png","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:04.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nCookie: _ga_YYN125EKTJ=GS2.1.s1755694503$o1$g0$t1755694503$j60$l0$h0; _ga=GA1.1.1331228846.1755694503\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\ncf-bgj: imgq:85,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=2744\r\netag: W/\"60e41db0-ab8\"\r\nexpires: Sun, 07 Sep 2025 06:07:01 GMT\r\nlast-modified: Tue, 06 Jul 2021 09:09:04 GMT\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1061283\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iueAdTQ54hC42zPo65Eyw%2B3VGB68rbPuBDCJybPVUBx1eaTi%2BzJ1WsWuc33IcscnYnxh2DWwrXLl4DccShe%2Fb4ndp48IJ5p9G19dVPNdKN4YzKqYRQ%3D%3D\"}]}\r\ncf-ray: 97220afd6dea5546-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"e6c6840eef8ea2ecfd592619b891701e","sha1":"f898a20f2b083f184c7dd081062a4bd64791c707","sha256":"8967ea98cb7124c286aecb527367e2294b36a942b9bdb22231b529e90d586131","sha512":"e98674a1a8f9159ec6a15cc341d1c166fc08818dfcff241455c6fbf1aea72607fb20cdc8d3f0f632ecf86dcc1d6b66c3a22201eb2b038a4243a5ef3b2b607915","ssdeep":"","tlshash":"d1514c7a58dfd057fb3c0966cc505192cd283861d936ba015f9eaf94ddc671fca00d26","first_seen":"2025-07-03T14:16:39.646545Z","last_seen":"2025-11-24T06:52:15.835046Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a11ybar.com/stat.js","fqdn":"a11ybar.com","domain":"a11ybar.com","tld":"com"},"ip":{"addr":"172.67.136.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a11ybar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 12:34:11 GMT","end":"Fri, 07 Nov 2025 13:30:53 GMT"},"fingerprint":{"sha1":"23:3B:D9:38:C6:01:31:15:54:EE:A5:13:67:3C:34:E8:A6:EF:D1:93","sha256":"16:4D:CD:12:74:4A:B1:43:93:E8:EB:A5:72:E2:FC:8B:8A:D1:E0:AE:1D:5C:F5:35:26:B4:D2:22:E5:F8:C5:F2"}}},"request":{"raw":"GET /stat.js HTTP/1.1\r\nHost: a11ybar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/5.4.16\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eypHpHoPS43c8vW%2FgdMrzaGsPodkY2dFrQP2buqBbsnMwbd7Yy3%2BjHyEW6G8E2c9ESoWuGaflraboAqrDsQ1WDL4y0U877JA2Cu\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97220af60acd96bf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":771,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF, LF line terminators","md5":"1e7ebb5082444dfc4893d74a8a0dbbb5","sha1":"89435eb6f2564740e248929caf68e8c1663aef9a","sha256":"dfe4146c226afab7a30c7dfa36827f2572a708f1fc96c8fa9247910c5005088c","sha512":"f6ac9c9d951f2dc5f830ed5ade272f2546428cdb864f7f9f150f48b30c92d71e3cbb773c9f967b876490c6e9290c4e9debf23a47f4502102c16e1b6a2b2293dc","ssdeep":"","tlshash":"f10128bd1d330d229374ae46a4756d4c7bb5b12ce6020881b1f8cb691850ed72d16c6c","first_seen":"2023-10-31T12:07:43Z","last_seen":"2026-05-27T07:33:40.282017Z","times_seen":1016,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.iqbroker.com/lp/mobile-partner-pwa/?aff=7792\u0026aff_model=revenue\u0026afftrack=","fqdn":"www.iqbroker.com","domain":"iqbroker.com","tld":"com"},"ip":{"addr":"185.117.132.1","port":443,"asn":209180,"as":"Iqoption Europe Ltd","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.iqbroker.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 02:08:33 GMT","end":"Wed, 01 Oct 2025 02:08:32 GMT"},"fingerprint":{"sha1":"82:8E:01:6A:89:BF:F3:19:FD:41:A4:90:2D:8E:F3:7E:A3:AA:A1:0F","sha256":"9B:F6:D4:B3:86:1B:5F:45:DB:55:7D:E2:74:88:D0:D9:49:CD:61:49:27:1E:08:F9:57:D3:33:46:CE:B4:90:20"}}},"request":{"raw":"GET /lp/mobile-partner-pwa/?aff=7792\u0026aff_model=revenue\u0026afftrack= HTTP/1.1\r\nHost: www.iqbroker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://iqbroker.com/lp/mobile-partner-pwa/?aff=7792\u0026aff_model=revenue\u0026afftrack=\r\nstrict-transport-security: max-age=15555600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":59,"connect":40,"send":0,"wait":26,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.myfreemp3juices.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:02 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97220af3883e8bde-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-27T16:57:30.778667Z","times_seen":336487,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":39,"dns":1,"connect":8,"send":0,"wait":23,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"korfo.org/to2/aliexpress.com/","fqdn":"korfo.org","domain":"korfo.org","tld":"org"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"korfo.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 06:09:07 GMT","end":"Wed, 01 Oct 2025 06:09:06 GMT"},"fingerprint":{"sha1":"CE:BE:A9:18:A6:6C:CB:3C:AA:7F:F4:D8:52:A1:93:C6:31:71:DA:DD","sha256":"B7:4C:00:9D:DA:81:D7:75:F6:F2:BB:69:9E:43:79:9C:92:AD:94:B0:CB:78:EE:4E:E6:84:39:51:ED:D0:DD:C3"}}},"request":{"raw":"GET /to2/aliexpress.com/ HTTP/1.1\r\nHost: korfo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReferrer-Policy: no-referrer\r\nLocation: http://s.click.aliexpress.com/e/y37Eur3?dp=AR-CB-c085e0afbf254e6481d8999c89bd56bf-pl-2013\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":80,"dns":17,"connect":28,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/3606797/?oo=1\u0026js_build=iclick-v1.1543.0\u0026userId=08022b879eb04002f09b54c682d47434\u0026dmn=iclickcdn.com\u0026tt=2\u0026ix=0","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:03.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Aug 2025 05:09:42 GMT","end":"Thu, 30 Oct 2025 05:09:41 GMT"},"fingerprint":{"sha1":"CA:B0:55:2C:92:65:6D:F3:1E:6D:BA:45:88:FD:65:2F:07:36:13:27","sha256":"DA:EB:6B:D8:17:3D:D3:8F:2D:0D:B8:71:CE:2B:40:9E:83:B9:6F:46:25:7F:24:C5:24:83:76:CC:BB:09:4A:7F"}}},"request":{"raw":"POST /5/3606797/?oo=1\u0026js_build=iclick-v1.1543.0\u0026userId=08022b879eb04002f09b54c682d47434\u0026dmn=iclickcdn.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2587\r\nOrigin: https://new.myfreemp3juices.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://new.myfreemp3juices.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":11,"dns":5,"connect":34,"send":0,"wait":49,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offer.alibaba.com/?xp=Ah5nTus6MckTMhVNn_7oP0_ICj9Nq9lT4A4ufq6mVBqsCrIHWKmi6L2Vjefz1I5wozPRl-0Z-AfcJY2YxAK38j-moCwYm8iJBrC_UmZ-bxssMbeanHAIqwcTEART57S-\u0026cps_sk=mvgoi1de\u0026bm=cps\u0026src=saf","fqdn":"offer.alibaba.com","domain":"alibaba.com","tld":"com"},"ip":{"addr":"23.49.27.74","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"air.alibaba.com","organization":"Alibaba Cloud Computing Ltd."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:04:4F:13:E2:9F:66:3D:DB:29:CD:38:EE:DB:B8:F2:B7:FE:21:22","sha256":"C4:7D:6C:92:B0:22:79:DF:5F:3F:AB:01:EF:6F:49:9D:E5:BF:0F:18:13:81:28:75:DD:0B:9F:D1:8E:72:BD:3D"}}},"request":{"raw":"GET /?xp=Ah5nTus6MckTMhVNn_7oP0_ICj9Nq9lT4A4ufq6mVBqsCrIHWKmi6L2Vjefz1I5wozPRl-0Z-AfcJY2YxAK38j-moCwYm8iJBrC_UmZ-bxssMbeanHAIqwcTEART57S-\u0026cps_sk=mvgoi1de\u0026bm=cps\u0026src=saf HTTP/1.1\r\nHost: offer.alibaba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 278\r\nserver: Tengine\r\nlocation: https://www.alibaba.com?xp=Ah5nTus6MckTMhVNn_7oP0_ICj9Nq9lT4A4ufq6mVBqsCrIHWKmi6L2Vjefz1I5wozPRl-0Z-AfcJY2YxAK38j-moCwYm8iJBrC_UmZ-bxssMbeanHAIqwcTEART57S-\u0026cps_sk=mvgoi1de\u0026bm=cps\u0026src=saf\r\nups-target-key: offer.alibaba.com\r\nx-protocol: HTTP/1.1\r\neagleeye-traceid: 2103973617556945043235381e11b6\r\nstrict-transport-security: max-age=31536000\r\ns-brt: 1\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2103973617556945043235381e11b6\r\nserver-timing: rt;dur=0.002,eagleid;desc=2103973617556945043235381e11b6,brt;dur=1\r\nexpires: Wed, 20 Aug 2025 12:55:04 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\nset-cookie: ali_apache_id=33.3.151.54.1755694504328.614806.6; path=/; domain=.alibaba.com; expires=Wed, 30-Nov-2084 01:01:01 GMT\r\nalt-svc: h3=\":443\"; ma=2592000\r\nquic-version: 0x00000001\r\nedge-type: akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YYN125EKTJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-YYN125EKTJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\nexpires: Wed, 20 Aug 2025 12:55:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 133697\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399433,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"f56539e3a90ba41a7205727d6e00bedf","sha1":"a774ed33020fb50754e0affca99fd91e05806796","sha256":"beafc6acb4eda653b17b47dd3af59726c687a2fd19aaf7bbed3792eb38a65fe4","sha512":"45acd4f2031a7efe8436b53c114abb1c803e132d53748bb30caf6bc8bede825b014cb638a97504bacb7c9a9a95e086813f41e8fb3e6b1c640351975f5b0ed51a","ssdeep":"6144:2ukldUTWer7tSvzLwQrDlUKB3IKRILuwNXTODuVB16qW:ZklqTr7tSvzLwQrDlVYZOuVBRW","tlshash":"148407ce73d674629396f478503f018ba57b28a2b44cc899f189cde42e74a9a4137f7c","first_seen":"2025-08-20T12:55:29.497327Z","last_seen":"2025-08-20T12:55:29.497327Z","times_seen":1,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":104,"dns":0,"connect":21,"send":0,"wait":37,"receive":56,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-218626.top/en?tag=s_137887m_355c_","fqdn":"1xlite-218626.top","domain":"1xlite-218626.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.880Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /en?tag=s_137887m_355c_ HTTP/1.1\r\nHost: 1xlite-218626.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-20","alert":"Sinkholed","trigger":"1xlite-218626.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/favicon-16x16.png","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:04.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nCookie: _ga_YYN125EKTJ=GS2.1.s1755694503$o1$g0$t1755694503$j60$l0$h0; _ga=GA1.1.1331228846.1755694503\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\ncf-bgj: imgq:85,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=350\r\netag: W/\"60e41db4-15e\"\r\nexpires: Fri, 22 Aug 2025 03:02:09 GMT\r\nlast-modified: Tue, 06 Jul 2021 09:09:08 GMT\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2454775\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgnflB4TPli5YPneTwcui4%2BwWVoZNMvEZvtFGl0V%2BZ2w4K2HVxyk7xicYOcYGeHRYi%2B8Zf%2FSaEuWxmXwvj%2FAA6xu10FoiFQTOw%2B6Aw6FLjFY5VBWaQ%3D%3D\"}]}\r\ncf-ray: 97220afd6deb5546-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"8777afa357e154b814b70fdbf80410d5","sha1":"bcf7030c2cdcc3a6703501afd9699500e8e1218f","sha256":"992595865b24886e8b5ca10c405efb6d849809a3d9ba650299c80c51f067167b","sha512":"14ad4902c99d4057359ecc8711e540825ab3328fbd35240f24a563eb5ca56285cbe11a976b4ccdaf2d14db08bface735226de42c41e7d8e8105c87de950dbe4a","ssdeep":"","tlshash":"f3e0c0c17835be35eb0f81b2ca812814056c542a0c9115034367d94e9c2024d65750c9","first_seen":"2025-07-03T14:16:39.636061Z","last_seen":"2025-11-24T06:52:15.900748Z","times_seen":11,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.agoda.com/deals?pcs=1\u0026cid=1818886","fqdn":"www.agoda.com","domain":"agoda.com","tld":"com"},"ip":{"addr":"96.6.17.27","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agoda.com","organization":"Agoda Company Pte. Ltd."},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"47:92:59:DE:BD:C1:09:9A:04:87:BA:3C:F1:E0:F6:3F:37:66:59:B3","sha256":"38:A1:4C:19:76:4C:63:E1:F9:D6:4F:28:67:EF:95:7E:F9:64:83:FA:3B:E9:C1:75:D5:63:9B:A9:12:E0:69:7E"}}},"request":{"raw":"GET /deals?pcs=1\u0026cid=1818886 HTTP/1.1\r\nHost: www.agoda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET,POST\r\naccess-control-expose-headers: ag-correlation-id\r\ncache-control: no-store, no-cache\r\npragma: no-cache\r\nag-correlation-id: c5ee06bb-2790-4643-9a00-3da5d8fda4a6\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nrequest-context: appId=\r\nx-ua-compatible: IE=edge\r\nx-frame-options: SAMEORIGIN\r\nx-forwarded-gateways: am-pc-4f;am-pc-4g;\r\nx-envoy-upstream-service-time: 17\r\nx-envoy-upstream-address: user-f47b46949-2fwq2\r\ncontent-encoding: gzip\r\nvary: User-Agent, Accept-Encoding\r\nx-envoy-datacenter: am\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-length: 19730\r\nset-cookie: ASP.NET_SessionId=qcdfkq2xddanhe1idqk50424; domain=www.agoda.com; path=/; SameSite=Lax; secure; HttpOnly\nagoda.version.03=CookieId=47fced40-e600-4879-abc4-1aa136054650\u0026DLang=en-us\u0026CurLabel=NOK; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 00:00:00 GMT; secure\nagoda.firstclicks=1818886||||2025-08-20T19:55:04||qcdfkq2xddanhe1idqk50424||{\"IsPaid\":true,\"gclid\":\"\",\"Type\":\"\"}; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 00:00:00 GMT; secure; HttpOnly\nagoda.lastclicks=1818886||||2025-08-20T19:55:04||qcdfkq2xddanhe1idqk50424||{\"IsPaid\":true,\"gclid\":\"\",\"Type\":\"\"}; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 00:00:00 GMT; secure; HttpOnly\nagoda.landings=1818886|||qcdfkq2xddanhe1idqk50424|2025-08-20T19:55:04|True|19----1818886|||qcdfkq2xddanhe1idqk50424|2025-08-20T19:55:04|True|20----1818886|||qcdfkq2xddanhe1idqk50424|2025-08-20T19:55:04|True|99; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 00:00:00 GMT; secure; HttpOnly\nagoda.attr.fe=1818886|||qcdfkq2xddanhe1idqk50424|2025-08-20T19:55:04|True|2025-08-21T19:55:04|T14Ci1AEFtquy5WL; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 00:00:00 GMT; secure\nagoda.attr.03=ATItems=1818886$08-20-2025 19:55$; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 00:00:00 GMT; secure; HttpOnly\nxsrf_token=CfDJ8Dkuqwv-0VhLoFfD8dw7lYzki2oy7DzJ6aBay0uxc6xOVuD4BbDed2vxMOTAS-A7NscF_CROGldOqhGdsBXEaDtv9Sl_LSFXUr2V8J5xkI2gjtp1bQMmbZp2Nc9BphPWGBiaiQaLhtujvOmpjLktNqw; path=/; secure; samesite=strict; httponly\nagoda.user.03=UserId=6cd12096-04d1-4b9f-bbc2-b7dd84b18ceb; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 12:55:04 GMT; secure; SameSite=None\nagoda.analytics=Id=5837516283774392785\u0026Signature=-4489157997601124291\u0026Expiry=1755698104090; domain=.agoda.com; path=/; expires=Wed, 20-Aug-2025 13:55:04 GMT; secure\nagoda.prius=PriusID=0\u0026PointsMaxTraffic=Agoda; domain=.agoda.com; path=/; expires=Thu, 20-Aug-2026 12:55:04 GMT\r\nakamai-grn: 0.9e4f2417.1755694504.16cfabd2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":209,"dns":88,"connect":33,"send":0,"wait":45,"receive":5,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cex.io/r/147/up111785894/147","fqdn":"www.cex.io","domain":"cex.io","tld":"io"},"ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Jul 2024 00:00:00 GMT","end":"Wed, 27 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:55:71:77:34:1D:C8:79:FB:92:23:D7:96:CE:9C:58:58:45:B5:9C","sha256":"98:A4:1E:88:07:6D:E4:50:2A:3B:08:D9:8C:1F:0C:72:8C:47:FB:49:DE:43:55:60:76:0E:DC:AE:7D:C5:96:1F"}}},"request":{"raw":"GET /r/147/up111785894/147 HTTP/1.1\r\nHost: www.cex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://cex.io/r/147/up111785894/147\r\nserver: cloudflare\r\ncf-ray: 97220afa1dcc0d92-ARN\r\ncache-control: max-age=3600\r\nexpires: Wed, 20 Aug 2025 13:55:04 GMT\r\nset-cookie: ref=referral:korfo.org:; Max-Age=31536000; Domain=.cex.io; Path=/\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":140,"dns":3,"connect":8,"send":0,"wait":48,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trade.cex.io/welcome-bonus","fqdn":"trade.cex.io","domain":"cex.io","tld":"io"},"ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Jul 2024 00:00:00 GMT","end":"Wed, 27 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:55:71:77:34:1D:C8:79:FB:92:23:D7:96:CE:9C:58:58:45:B5:9C","sha256":"98:A4:1E:88:07:6D:E4:50:2A:3B:08:D9:8C:1F:0C:72:8C:47:FB:49:DE:43:55:60:76:0E:DC:AE:7D:C5:96:1F"}}},"request":{"raw":"GET /welcome-bonus HTTP/1.1\r\nHost: trade.cex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://cex.io/promo-spot-welcome-bonus\r\ncache-control: max-age=3600\r\nexpires: Wed, 20 Aug 2025 13:55:04 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 97220afcab760d92-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.exness.com/a/vps0b6j3?_8f4z=1\u0026platform=mobile\u0026ex_ol=1","fqdn":"track.exness.com","domain":"exness.com","tld":"com"},"ip":{"addr":"43.199.166.207","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.exness.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 09:37:33 GMT","end":"Tue, 11 Nov 2025 09:37:32 GMT"},"fingerprint":{"sha1":"08:8D:0F:25:54:42:BD:3D:CA:70:1B:3D:F1:79:1C:1B:90:DA:34:2A","sha256":"9D:7D:7D:A8:43:2C:94:E5:70:E4:56:EE:8D:09:94:3B:91:30:79:19:22:C6:75:47:E8:36:CE:28:6E:4E:32:20"}}},"request":{"raw":"GET /a/vps0b6j3?_8f4z=1\u0026platform=mobile\u0026ex_ol=1 HTTP/1.1\r\nHost: track.exness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":22,"connect":272,"send":0,"wait":261,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kobo.com/au/en?utm_source=linkshare_au\u0026utm_medium=affiliate\u0026utm_campaign=SaleGains\u0026utm_term=2025082002618et26283\u0026ranMID=38131\u0026ranEAID=o%2FH%2Fv5Dla7k\u0026ranSiteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ\u0026siteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ","fqdn":"www.kobo.com","domain":"kobo.com","tld":"com"},"ip":{"addr":"172.64.150.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kobo.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 09:20:11 GMT","end":"Sat, 15 Nov 2025 09:20:10 GMT"},"fingerprint":{"sha1":"86:61:6D:2D:DF:B4:AB:3B:DF:7D:52:0C:D9:6B:CD:CC:27:55:70:97","sha256":"B7:37:B4:CF:13:D4:81:02:1E:08:E0:0F:91:8E:25:72:BE:9E:FE:AB:E7:5B:EE:25:65:B0:C7:C3:3B:45:FA:CA"}}},"request":{"raw":"GET /au/en?utm_source=linkshare_au\u0026utm_medium=affiliate\u0026utm_campaign=SaleGains\u0026utm_term=2025082002618et26283\u0026ranMID=38131\u0026ranEAID=o%2FH%2Fv5Dla7k\u0026ranSiteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ\u0026siteID=o_H_v5Dla7k-shTzqMj_yzpgsBPFqDVFvQ HTTP/1.1\r\nHost: www.kobo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nset-cookie: __cf_bm=iERB3r.QD64EwwRh73H0EEfk7W3GmtS7p1_Jc15IuJs-1755694504-1.0.1.1-rT_5OCD6iqS6YWZHjHssSaTp9B4AgS__0fSwZw8wcvIgQfDEhfA9JBt5yKNnzS.GN_xVyNKXlp.mEShxVVdoPOyL3ESN2mmc5S7vU9p4HgI; path=/; expires=Wed, 20-Aug-25 13:25:04 GMT; domain=.kobo.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97220afab9960b55-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex.io/promo-spot-welcome-bonus","fqdn":"cex.io","domain":"cex.io","tld":"io"},"ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Jul 2024 00:00:00 GMT","end":"Wed, 27 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:55:71:77:34:1D:C8:79:FB:92:23:D7:96:CE:9C:58:58:45:B5:9C","sha256":"98:A4:1E:88:07:6D:E4:50:2A:3B:08:D9:8C:1F:0C:72:8C:47:FB:49:DE:43:55:60:76:0E:DC:AE:7D:C5:96:1F"}}},"request":{"raw":"GET /promo-spot-welcome-bonus HTTP/1.1\r\nHost: cex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cex-session=s%3AjeyDDjneJixKyWmtlXt88XdX.FX2TrVFBf8mLw0CeJ9LHejxI2XTPTjsW9MpTVu3uhUU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: 97220afd2c650d92-ARN\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nset-cookie: ref=referral:korfo.org:; Max-Age=31536000; Domain=.cex.io; Path=/\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Next.js\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc","fqdn":"admin.typeform.com","domain":"admin.typeform.com","tld":""},"ip":{"addr":"108.156.22.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typeform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:DC:6A:FE:F2:B3:4A:73:B4:AE:83:E1:25:4E:DF:05:B4:26:3B:D5","sha256":"A6:CE:98:88:54:75:2A:83:AB:50:50:80:94:79:FC:80:7A:DA:1F:DF:AB:A1:D2:77:44:64:7B:3E:41:9C:E2:E3"}}},"request":{"raw":"GET /signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc HTTP/1.1\r\nHost: admin.typeform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ndate: Wed, 20 Aug 2025 02:33:06 GMT\r\nlast-modified: Tue, 19 Aug 2025 13:52:41 GMT\r\netag: W/\"e0ba65994498ca0cbc4f6aa00c3eeff7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: UZkMoikbicWFiZQUF3zBu1UtPYe66PYN\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8f67e81092ebd47bc649d954af911676.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P1\r\nx-amz-cf-id: UkBt1_XdxFT24oIYGZ28h3yWIn_Ba6HPI3XBPK2HJuBvRw5Y59moWg==\r\nage: 37319\r\ncontent-security-policy: report-uri https://endpoint2.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV0FHJqllZOL8NGBGJ1LYQariAuQAshoC3Or0KiW50IVf_yZesnfwSAdPbZHnAYnPXdEGDKyFSvvZkrXO5Kp3vCig0_irFk63g2y17e_WMxuVA== ; frame-ancestors 'report-sample' https://typeform.com https://www.typeform.com https://staging.typeform.com https://*.webflow-ext.com https://webflow.com https://*.design.webflow.com https://webflow.w2.sk https://playground-typeform.vercel.app https://*.bitly.com https://*.bitly.net https://*.bitly.org http://localhost:1337 ;\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: report-uri https://endpoint2.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV2u2GjwMA9q_eiqKg5HCQ6WqgWnyE_O8O5rs_5vhjwTVHSzKUOOo6KznuzliyG76vE5uwlKAGy0C9uQWbsWBt1dP5ppWyVV03wAuGxliL4Qrg== ; block-all-mixed-content ; default-src 'none' ; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'nonce-NONCEPLACEHOLDER' 'strict-dynamic' ; base-uri 'report-sample' 'self' ; img-src 'report-sample' 'self' https: data: ; connect-src 'report-sample' 'self' https://www.facebook.com https://api.rollbar.com https://api.segment.io https://api.amplitude.com https://bar.stunning.co https://rs.fullstory.com https://stats.g.doubleclick.net https://www.google-analytics.com https://bam.nr-data.net ; style-src 'report-sample' https://font.typeform.com 'unsafe-inline' ; font-src 'report-sample' https://font.typeform.com https://fonts.gstatic.com data: ; frame-src 'report-sample' https://www.google.com https://www.facebook.com https://tpc.googlesyndication.com ;\r\ncache-control: public, max-age=0, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-20T12:55:02.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:02 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 19 Sep 2025 12:55:02 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-ua-compatible: IE=Edge\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Yrr67f2sq0PDYcq1JefwcKV3F7%2B3H9AXsx%2BRWZZ4Varfee7qdQ2O7fFILJtP9bT0GhfDD5KomrcjVCdEZFi4kGydU0yiTpFezsEFLIKV4KACld3ug%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=39\r\ncontent-encoding: br\r\ncf-ray: 97220af1c8995cc8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Skimlinks","description":"Skimlinks is a content monetization platform for online publishers.","website":"https://skimlinks.com","common_platform_enumeration":"","icon":"Skimlinks.svg","categories":["Affiliate programs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":14854,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (703)","md5":"a3b1c37e3ee91ebcb7ff399126dfa4d7","sha1":"5907e8a2ed586f1191e119da2fdcf91b7993d0bb","sha256":"07d3b09854b54b405184a3242f27bb6fe3955172c517116af9bc7b578fd8eccd","sha512":"1bc2a24fcb6d1a971c73de9ddecb9e9223e30acb98916a49859d90d157af895f944746074e98d738e380776844c6c3e5f044567e577eb7347ab062650c635276","ssdeep":"192:6gQYsUJvjVv5+Ui1Csx9iJT8zz5dyUe6xVK04bECuSCN1AuSWNkNNlIqhCooXruk:WSZlh8BTxVaECy4CprfdbKhlzS","tlshash":"a062d85b5864c826006351d0a7ae575fa647810bd617ac01b0fc13fa6ffaea6cb2315f","first_seen":"2025-08-20T12:55:29.500028Z","last_seen":"2025-09-19T13:54:10.130614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":60,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/img/myfreemp3.png","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:02.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"GET /img/myfreemp3.png HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 12:55:02 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\ncf-bgj: imgq:85,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=3066\r\netag: W/\"60e41dbb-bfa\"\r\nexpires: Sat, 06 Sep 2025 06:02:42 GMT\r\nlast-modified: Tue, 06 Jul 2021 09:09:15 GMT\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 1147940\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbD91oFi8LDsKGYlxcIrCB4dFILsg%2BElQgSD2bZBSpZ1h8p6dUZgwKaVKEO5Od9bmZrn1eBoQEf7j63t3RL8tRPHXntfPpSNlqoxNZhBBcBAXssCdw%3D%3D\"}]}\r\ncf-ray: 97220af32b955cc8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 26, 8-bit colormap, non-interlaced","md5":"61d7c2943b8efcbe588c8083bea570f0","sha1":"1341fe913c687d0ad2980d6da91bca7a6e190361","sha256":"7db55d341fecfb716e5ce9294810f138a39bea5b856def4aea2d0aa3f119b517","sha512":"d05a32c0b651d1f22d37968c026a677fdc72dd888a9b90e94035ce590f3a0260f16558e90219e3cb8610a8b4532379a7b365affe1bae9ed169b2eefb94b6f0cd","ssdeep":"","tlshash":"f1514de0c2a08b61ef22bcc184b6e158763c8d32153d63b6117aeaa57ae9d02c3512f1","first_seen":"2025-07-03T14:16:39.633534Z","last_seen":"2025-11-24T06:52:16.010593Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus.cex.io/welcome-bonus","fqdn":"plus.cex.io","domain":"cex.io","tld":"io"},"ip":{"addr":"104.20.1.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Jul 2024 00:00:00 GMT","end":"Wed, 27 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:55:71:77:34:1D:C8:79:FB:92:23:D7:96:CE:9C:58:58:45:B5:9C","sha256":"98:A4:1E:88:07:6D:E4:50:2A:3B:08:D9:8C:1F:0C:72:8C:47:FB:49:DE:43:55:60:76:0E:DC:AE:7D:C5:96:1F"}}},"request":{"raw":"GET /welcome-bonus HTTP/1.1\r\nHost: plus.cex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://trade.cex.io/welcome-bonus\r\ncache-control: max-age=3600\r\nexpires: Wed, 20 Aug 2025 13:55:04 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 97220afbe9c20d92-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"korfo.org/to2/typeform.com/","fqdn":"korfo.org","domain":"korfo.org","tld":"org"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"korfo.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 06:09:07 GMT","end":"Wed, 01 Oct 2025 06:09:06 GMT"},"fingerprint":{"sha1":"CE:BE:A9:18:A6:6C:CB:3C:AA:7F:F4:D8:52:A1:93:C6:31:71:DA:DD","sha256":"B7:4C:00:9D:DA:81:D7:75:F6:F2:BB:69:9E:43:79:9C:92:AD:94:B0:CB:78:EE:4E:E6:84:39:51:ED:D0:DD:C3"}}},"request":{"raw":"GET /to2/typeform.com/ HTTP/1.1\r\nHost: korfo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:04 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReferrer-Policy: no-referrer\r\nLocation: https://typeform.com/signup?utm_medium=referral\u0026utm_source=partnerstack\u0026utm_campaign=agencies_anitaburilina7817\u0026ps_partner_key=YW5pdGFidXJpbGluYTc4MTc\u0026ps_xid=vxVmfwBCs36AQN\u0026gsxid=vxVmfwBCs36AQN\u0026gspk=YW5pdGFidXJpbGluYTc4MTc\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.iherb.com/?clickref=1011lByCqA5N\u0026utm_source=cityads\u0026utm_medium=affiliate\u0026utm_content=1jf\u0026affiliate_source=pz","fqdn":"www.iherb.com","domain":"iherb.com","tld":"com"},"ip":{"addr":"172.64.149.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iherb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 Aug 2025 20:30:46 GMT","end":"Fri, 14 Nov 2025 21:30:41 GMT"},"fingerprint":{"sha1":"51:4E:A5:35:EC:F4:C4:F9:37:3B:E4:4F:00:DF:A6:71:EA:DF:6E:AC","sha256":"9A:46:63:98:E6:C9:8C:7F:F1:9F:FA:28:EB:30:51:08:D0:30:D9:2B:B7:91:02:6E:C2:40:21:F9:72:A7:8D:0F"}}},"request":{"raw":"GET /?clickref=1011lByCqA5N\u0026utm_source=cityads\u0026utm_medium=affiliate\u0026utm_content=1jf\u0026affiliate_source=pz HTTP/1.1\r\nHost: www.iherb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 20 Aug 2025 12:55:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"97220af93a2b568b\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nset-cookie: __cf_bm=ftj2y2CcXooXk4v0R0ACSZRzcA9mrMVR1I2zgHCZ.tQ-1755694503-1.0.1.1-F7bEs6V6amx1tlvRXsDla.1y2WwYjcdkSJheWvzidJCIh8KsS22IvYmdfgfYu1NvRqgZ7IyT9yMsPG0cgWiWq72QdSYsCPkWxe_5GuZFSM1OrQvllfNDEwIVr7YLXkVK; path=/; expires=Wed, 20-Aug-25 13:25:03 GMT; domain=.iherb.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97220af93a2b568b-OSL\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":14,"dns":5,"connect":1,"send":0,"wait":61,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.remitano.com/join/2716653","fqdn":"www.remitano.com","domain":"remitano.com","tld":"com"},"ip":{"addr":"104.18.28.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:03.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remitano.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:24:50 GMT","end":"Sat, 08 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"4D:B8:CA:84:84:EC:BE:0A:E0:B9:A4:13:AB:07:73:31:CA:E6:67:13","sha256":"03:7D:0F:11:61:84:D6:02:5D:74:BE:A8:C6:3E:04:B1:FD:24:1B:0D:72:3D:07:9F:BE:C3:1E:89:6D:9F:32:FE"}}},"request":{"raw":"GET /join/2716653 HTTP/1.1\r\nHost: www.remitano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 143\r\nlocation: https://remitano.com\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97220afa2f7cbe8f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":16,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my28.roboforex.org/ru/?a=zkeb","fqdn":"my28.roboforex.org","domain":"roboforex.org","tld":"org"},"ip":{"addr":"172.67.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://korfo.org/vu/a/?1755694503","date":"2025-08-20T12:55:04.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roboforex.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 11:20:51 GMT","end":"Mon, 10 Nov 2025 12:20:39 GMT"},"fingerprint":{"sha1":"32:54:3B:B3:0B:E6:63:24:1E:71:C7:5B:FF:B3:76:0A:A5:2C:5C:59","sha256":"60:10:63:8B:AD:4B:83:9A:4F:64:8E:C9:BA:61:12:17:B3:A8:70:71:88:0A:1E:23:E7:53:1D:CD:06:CD:C5:B5"}}},"request":{"raw":"GET /ru/?a=zkeb HTTP/1.1\r\nHost: my28.roboforex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://korfo.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 20 Aug 2025 12:55:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"97220afb7e42b000\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=852NFVaApx%2B0K44leI4W5npU4d%2FQdSL811h8JNI8r4jgg92xuhEVWXGS2bUCo3AjpGdi6UQjq3M1OR%2F8Sb1lRjT%2FT142A81ZlbrBmRysH5Pk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97220afb7e42b000-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":143,"dns":5,"connect":14,"send":0,"wait":14,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"korfo.org/vu/a/?1755694503","fqdn":"korfo.org","domain":"korfo.org","tld":"org"},"ip":{"addr":"142.132.202.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://korfo.org/vu/a/","date":"2025-08-20T12:55:03.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"korfo.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 06:09:07 GMT","end":"Wed, 01 Oct 2025 06:09:06 GMT"},"fingerprint":{"sha1":"CE:BE:A9:18:A6:6C:CB:3C:AA:7F:F4:D8:52:A1:93:C6:31:71:DA:DD","sha256":"B7:4C:00:9D:DA:81:D7:75:F6:F2:BB:69:9E:43:79:9C:92:AD:94:B0:CB:78:EE:4E:E6:84:39:51:ED:D0:DD:C3"}}},"request":{"raw":"GET /vu/a/?1755694503 HTTP/1.1\r\nHost: korfo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://korfo.org/vu/a/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 20 Aug 2025 12:55:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2587,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (389), with CRLF, LF line terminators","md5":"379300ada7fe3b7e92dd142e73a9ebd8","sha1":"f177b4670c82eeffccee7522fc7c672c2949d1e1","sha256":"2ad58f90a48909719bdc96378c9409d04cd1da9fe4551c526fa5f046e837e10d","sha512":"866a082387e00a9dc143c273815e5ac796375ffbf1cc05f2f3419d7c637b630b9f8ddd300c78d97dabea843807b09d27c25b12c7112f06271c18570e1e882add","ssdeep":"","tlshash":"cb51afe32d06cb584694ddd9a031f2cc818fad4ecefad9e7cae8245315147f61c81d68","first_seen":"2025-08-20T12:55:29.503049Z","last_seen":"2025-08-20T12:55:29.503049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.myfreemp3juices.cc/cdn-cgi/rum?","fqdn":"new.myfreemp3juices.cc","domain":"myfreemp3juices.cc","tld":"cc"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.myfreemp3juices.cc/","date":"2025-08-20T12:55:06.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myfreemp3juices.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 16:09:28 GMT","end":"Tue, 23 Sep 2025 17:09:25 GMT"},"fingerprint":{"sha1":"3B:57:0C:4F:DB:BD:3A:8C:F1:53:3E:F1:D8:35:FC:41:B0:D7:43:CC","sha256":"C7:07:27:08:53:C9:25:5A:13:5C:CE:26:3D:79:0B:69:06:6D:FC:84:81:BA:FE:77:56:CC:A9:A9:76:01:A3:4B"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: new.myfreemp3juices.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1029\r\nOrigin: https://new.myfreemp3juices.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.myfreemp3juices.cc/\r\nCookie: _ga_YYN125EKTJ=GS2.1.s1755694503$o1$g0$t1755694503$j60$l0$h0; _ga=GA1.1.1331228846.1755694503; musicLang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://new.myfreemp3juices.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"/cdn-cgi/script_monitor/report?m=tmDSuBulLYL8rtGZUe0u25fdYGVxHWxaCLeKH0FMxdU-1755694506.6797714-1.0.1.1-_lEZ60TC1URIZYzsrWDWc3qy38aBj4C1Y0zq4ME3C7YEF3NO5XAgWyKJLD4lA7MyB42U.8h0AeR5oOYS8wFIjlyDY5z17ldOb9.x4rc2oYhvwUy8f5_x0rXxSrrM1TsqYMPYzu.sUqq1fw9NO9MDxGZ8WSCRx0K8AN1OGJm.121EMqUBQRu3hvn8pFWe8xkr\"}]}\r\ncontent-security-policy-report-only: script-src 'none'; report-uri /cdn-cgi/script_monitor/report?m=tmDSuBulLYL8rtGZUe0u25fdYGVxHWxaCLeKH0FMxdU-1755694506.6797714-1.0.1.1-_lEZ60TC1URIZYzsrWDWc3qy38aBj4C1Y0zq4ME3C7YEF3NO5XAgWyKJLD4lA7MyB42U.8h0AeR5oOYS8wFIjlyDY5z17ldOb9.x4rc2oYhvwUy8f5_x0rXxSrrM1TsqYMPYzu.sUqq1fw9NO9MDxGZ8WSCRx0K8AN1OGJm.121EMqUBQRu3hvn8pFWe8xkr; report-to cf-csp-endpoint\r\ndate: Wed, 20 Aug 2025 12:55:06 GMT\r\nserver: cloudflare\r\ncf-ray: 97220b0ab82f5546-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}