{"report_id":"15e9dc51-a02c-4848-91e4-ee0afd3d95c4","version":0,"status":"done","tags":[],"date":"2026-08-13T18:02:32Z","url":{"schema":"http","addr":"979218.com/","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"979218.com/","fqdn":"979218.com","domain":"979218.com","tld":"com"},"title":"979218.com/","dom":{"size":3131,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2759)","md5":"5f89db76bc6f372a18f18ca776c1c775","sha1":"ca01e2644eee83217522788e171aaf49c509e08e","sha256":"f1376a188458c75117001ebad668a0ba1f9b6b3355f33e624c993996715468fb","sha512":"ef3c596d130849395fc2963ea80d67f9d6e2a7125ec44b93a690d69cb580a9db6dc473ff37876a4485f9ae5699acbc6cc0d3c5932b0fb266ab825f9c36ae3d3d","ssdeep":"","tlshash":"3451a706b981612991f77128003ff71da137bc934f46948aa32087d2fd74e46c51b6ee","dom_hash":"domhash172c92a0a3653668d4ac139ae7143747","first_seen":"2026-08-07T23:30:37.361169Z","last_seen":"2026-08-13T18:02:36.077833Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"979218.com/","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:02:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"979218.com","ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":74,"received_data":29972,"sent_data":31655,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-09T22:53:32.360554Z","alert_count":0,"request_count":1,"received_data":1446,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"979218.com/wallet-detect.js","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"93a4e9b120117d62e079a40780c1a416","sha1":"189d1b932821bd0e6b57d9548ef2679a634bab87","sha256":"c1bfd8ec79e339624c8f1765fce279e6fcc0acf0900c7362f6d0544f27a92d3e","sha512":"a2cc52d2d45df182b937202001a90f7748481475d170888106813a2069d22b16057b92754c79a9c7d067c5ba51a4671238adbcd43cccdf974e415aa346bac30e","ssdeep":"","tlshash":"a07132aa006111aec1b851bf0fa3e225db9671672404d2b87f9da2050fb7b05d178fe8","size":3773,"data":"","first_seen":"2026-07-06T23:31:53.536563Z","last_seen":"2026-08-13T18:02:36.079196Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"979218.com/wallet-detect.js","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://979218.com/","date":"2026-08-13T18:02:05.893Z","timestamp":1786644125893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /wallet-detect.js HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ndate: Thu, 13 Aug 2026 18:02:05 GMT\r\nlast-modified: Tue, 12 May 2026 23:05:45 GMT\r\netag: W/\"ebd-19e1e706d28\"\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3773\r\ncache-control: public, max-age=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3773,"size_decoded":4068,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"93a4e9b120117d62e079a40780c1a416","sha1":"189d1b932821bd0e6b57d9548ef2679a634bab87","sha256":"c1bfd8ec79e339624c8f1765fce279e6fcc0acf0900c7362f6d0544f27a92d3e","sha512":"a2cc52d2d45df182b937202001a90f7748481475d170888106813a2069d22b16057b92754c79a9c7d067c5ba51a4671238adbcd43cccdf974e415aa346bac30e","ssdeep":"","tlshash":"a07132aa006111aec1b851bf0fa3e225db9671672404d2b87f9da2050fb7b05d178fe8","first_seen":"2026-07-06T23:31:53.536563Z","last_seen":"2026-08-13T18:02:36.079196Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:08.678Z","timestamp":1786644128678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-opener-policy: same-origin\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:08 GMT\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:09.078Z","timestamp":1786644129078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:09 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:09.878Z","timestamp":1786644129878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:09 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/wallet-detected","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:11.134Z","timestamp":1786644131134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"POST /user/wallet-detected HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 34\r\nOrigin: https://979218.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"hasWallet\":false,\"providers\":[]}"}},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:11 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:15.909Z","timestamp":1786644135909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\ndate: Thu, 13 Aug 2026 18:02:15 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:17.909Z","timestamp":1786644137909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 13 Aug 2026 18:02:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:06.720Z","timestamp":1786644126720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:02:06 GMT\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:11.079Z","timestamp":1786644131079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:11 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:13.491Z","timestamp":1786644133491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:13 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:24.312Z","timestamp":1786644144312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:24 GMT\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://979218.com/user/redirect-ws","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://979218.com/","date":"2026-08-13T18:02:07.297Z","timestamp":1786644127297,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-ws HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://979218.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2QbS2H6QgNBuhvVBUQxYfQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nVia: 1.1 Caddy\r\nDate: Thu, 13 Aug 2026 18:02:07 GMT\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":0,"size_decoded":142,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":25,"send":0,"wait":29,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:07.477Z","timestamp":1786644127477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:07 GMT\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:11.478Z","timestamp":1786644131478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:11 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:28.727Z","timestamp":1786644148727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ndate: Thu, 13 Aug 2026 18:02:28 GMT\r\nx-powered-by: Express\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:02:05.399Z","timestamp":1786644125399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:02:05 GMT\r\netag: W/\"c47-rdV/216q1hBT8W4JO4JdyTlP2X8\"\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: no-referrer\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-robots-tag: noindex,nofollow,noarchive,nosnippet,noimageindex\r\ncontent-length: 3143\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3143,"size_decoded":3707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2756)","md5":"6c80a4cada71c6db946bb2bb8af0ac54","sha1":"add57fdb5eaad61053f16e093b825dc9394fd97f","sha256":"05d6c48c60ee22892319ebab3e4e386245c892eef37e801080954372dccf89b8","sha512":"568327d91e0cb07907679afbaf3b56d4efb0198c613192493ee99d83e2b1ed98eafbf23280b23b6ef61ab4349f4dfac9eb1c48e3702cc172ed552e074b65d03d","ssdeep":"","tlshash":"0e51a706b981612991f77228007ff71da137bc934f46948aa32087d2fd74e5ac51b7ee","first_seen":"2026-08-07T23:30:37.372583Z","last_seen":"2026-08-13T18:02:36.081434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":13,"connect":25,"send":0,"wait":176,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:12.280Z","timestamp":1786644132280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:12 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:15.092Z","timestamp":1786644135092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:15 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:17.109Z","timestamp":1786644137109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:17 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:18.709Z","timestamp":1786644138709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:18 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:25.112Z","timestamp":1786644145112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:25 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:28.314Z","timestamp":1786644148314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:28 GMT\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/favicon.ico","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://979218.com/","date":"2026-08-13T18:02:06.287Z","timestamp":1786644126287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\nlocation: https://www.google.com\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 44\r\nvary: Accept\r\ndate: Thu, 13 Aug 2026 18:02:06 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:08.278Z","timestamp":1786644128278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:08 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:13.079Z","timestamp":1786644133079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:13 GMT\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:25.912Z","timestamp":1786644145912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:25 GMT\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:14.693Z","timestamp":1786644134693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:14 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:23.111Z","timestamp":1786644143111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:23 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:29.521Z","timestamp":1786644149521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:02:29 GMT\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:05.902Z","timestamp":1786644125902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:05 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:07.877Z","timestamp":1786644127877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:07 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:15.492Z","timestamp":1786644135492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 13 Aug 2026 18:02:15 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:20.710Z","timestamp":1786644140710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:20 GMT\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:22.710Z","timestamp":1786644142710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ndate: Thu, 13 Aug 2026 18:02:22 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://979218.com/user/redirect-ws","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://979218.com/","date":"2026-08-13T18:02:05.907Z","timestamp":1786644125907,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-ws HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://979218.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: o/NkUs700483aFJsbubNxA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nVia: 1.1 Caddy\r\nDate: Thu, 13 Aug 2026 18:02:06 GMT\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":0,"size_decoded":142,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":83,"connect":112,"send":0,"wait":30,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:06.297Z","timestamp":1786644126297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-embedder-policy: require-corp\r\ndate: Thu, 13 Aug 2026 18:02:06 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://979218.com/user/redirect-ws","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://979218.com/","date":"2026-08-13T18:02:13.494Z","timestamp":1786644133494,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-ws HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://979218.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 47PQq1Tyjf0HJS5uUdkU1w==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nVia: 1.1 Caddy\r\nDate: Thu, 13 Aug 2026 18:02:13 GMT\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":0,"size_decoded":142,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":32,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:16.709Z","timestamp":1786644136709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:16 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:27.122Z","timestamp":1786644147122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:27 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:27.515Z","timestamp":1786644147515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:27 GMT\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://979218.com/user/redirect-ws","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://979218.com/","date":"2026-08-13T18:02:29.690Z","timestamp":1786644149690,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-ws HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://979218.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1US2iijdvvuu+UxRjxVwjg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nVia: 1.1 Caddy\r\nDate: Thu, 13 Aug 2026 18:02:29 GMT\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":0,"size_decoded":142,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":31,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://979218.com/","date":"2026-08-13T18:02:06.331Z","timestamp":1786644126331,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 13 Aug 2026 18:02:06 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-7ccIPZwTzdOIfgNBxAPURw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 82015\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=AdJVEas3VVga_l_-gC-vZIqjjzevW3Ni7eMVXXkhEyP00ANLrSfuBuTxoeU; expires=Tue, 09-Feb-2027 18:02:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=35.SE=Mv3bS21VZXFS-KXqmC_S8BTPTnuYgtQh0eu4JMv0rM-Zw3R2TxfvZHom4XwhF6PGbyh1gA_PJRkqn3iUAXFk0a6c-RvqXahqdu3XBlv7YmN-WwWGbfM_He8slOxpNP1DtKpde3sZSw4EkZZ_91FGZmqj2zhqE_sZKCp3H4W9mInySA17Oj_K0SoX7XcXNOMurb3U6w86vL6G24KrIR6GaHyklVbKPyYSHemigFeBRU7e6FYG4CcZafB0fNLIxA; expires=Mon, 13-Sep-2027 10:20:24 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:07.077Z","timestamp":1786644127077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:07 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\nvia: 1.1 Caddy\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:10.678Z","timestamp":1786644130678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:10 GMT\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:11.880Z","timestamp":1786644131880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:11 GMT\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:19.510Z","timestamp":1786644139510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:19 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:19.910Z","timestamp":1786644139910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:19 GMT\r\nvia: 1.1 Caddy\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:24.713Z","timestamp":1786644144713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:24 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/redirect-stream","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://979218.com/","date":"2026-08-13T18:02:05.901Z","timestamp":1786644125901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-stream HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/event-stream\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:09.478Z","timestamp":1786644129478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:09 GMT\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:10.278Z","timestamp":1786644130278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:10 GMT\r\nx-powered-by: Express\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:16.309Z","timestamp":1786644136309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ndate: Thu, 13 Aug 2026 18:02:16 GMT\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:26.313Z","timestamp":1786644146313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 13 Aug 2026 18:02:26 GMT\r\ncontent-length: 39\r\nvia: 1.1 Caddy\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:14.291Z","timestamp":1786644134291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:14 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:17.509Z","timestamp":1786644137509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 13 Aug 2026 18:02:17 GMT\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:20.310Z","timestamp":1786644140310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:02:20 GMT\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:26.713Z","timestamp":1786644146713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-opener-policy: same-origin\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:26 GMT\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:12.679Z","timestamp":1786644132679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:12 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:19.109Z","timestamp":1786644139109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:21.511Z","timestamp":1786644141511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:21 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:21.910Z","timestamp":1786644141910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:21 GMT\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\ncontent-length: 39\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:30.319Z","timestamp":1786644150319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:30 GMT\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-opener-policy: same-origin\r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:30.719Z","timestamp":1786644150719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:30 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://979218.com/user/redirect-ws","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://979218.com/","date":"2026-08-13T18:02:09.389Z","timestamp":1786644129389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-ws HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://979218.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: PpxImlsnNhOKPO+75PHbVQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nVia: 1.1 Caddy\r\nDate: Thu, 13 Aug 2026 18:02:09 GMT\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":0,"size_decoded":142,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:27.913Z","timestamp":1786644147913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\ndate: Thu, 13 Aug 2026 18:02:27 GMT\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:29.118Z","timestamp":1786644149118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:29 GMT\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:18.310Z","timestamp":1786644138310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:18 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://979218.com/user/redirect-ws","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://979218.com/","date":"2026-08-13T18:02:21.594Z","timestamp":1786644141594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/redirect-ws HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://979218.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: wR/7lZsX/CgN/umChofPmQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nVia: 1.1 Caddy\r\nDate: Thu, 13 Aug 2026 18:02:21 GMT\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":0,"size_decoded":142,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":25,"send":0,"wait":28,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:22.310Z","timestamp":1786644142310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 13 Aug 2026 18:02:22 GMT\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:23.921Z","timestamp":1786644143921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\ndate: Thu, 13 Aug 2026 18:02:23 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:25.513Z","timestamp":1786644145513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:25 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\ncross-origin-embedder-policy: require-corp\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:29.919Z","timestamp":1786644149919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:29 GMT\r\ncross-origin-embedder-policy: require-corp\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:13.891Z","timestamp":1786644133891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 13 Aug 2026 18:02:13 GMT\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncontent-type: application/json; charset=utf-8\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:23.513Z","timestamp":1786644143513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncross-origin-embedder-policy: require-corp\r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:23 GMT\r\ncross-origin-opener-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"979218.com/user/check-redirect?here=%2F","fqdn":"979218.com","domain":"979218.com","tld":"com"},"ip":{"addr":"91.92.35.67","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://979218.com/","date":"2026-08-13T18:02:21.110Z","timestamp":1786644141110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"979218.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:10:54 GMT","end":"Tue, 10 Nov 2026 21:10:53 GMT"},"fingerprint":{"sha1":"B7:9C:96:01:B1:4B:1A:D7:76:24:E1:2B:A7:66:21:0D:F7:4D:E2:11","sha256":"B9:2A:27:9F:EE:19:4B:AF:E7:C8:9A:E7:91:A4:95:A9:18:E6:4D:A1:14:A0:21:E3:96:1A:F1:9B:4C:66:AE:1B"}}},"request":{"raw":"GET /user/check-redirect?here=%2F HTTP/1.1\r\nHost: 979218.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-length: 39\r\ndate: Thu, 13 Aug 2026 18:02:21 GMT\r\nx-powered-by: Express\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"27-cfwNqkx6Ig1gmHkzdOu2EdOViZ8\"\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":324,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7581d84d9c95601ea437b75754bcc05e","sha1":"71fc0daa4c7a220d6098793374ebb611d395899f","sha256":"45038cf7328e0bd759337521362de60220d23c73f4273a30fcd0ee5565f0d9e1","sha512":"b43b6095a7ef38d1ca57b4557891fca692d507afa1b64be5f021c9c4ab2eeb730c8074ca730527a66bc66648549d649a512e975fb89b78e566824bf2d1363407","ssdeep":"","tlshash":"6290040543543c7d134357c170145d0011c10150d0413005c50d011d57434d470df14d","first_seen":"2025-10-05T22:11:45.303048Z","last_seen":"2026-08-13T18:02:36.080171Z","times_seen":27,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}