{"report_id":"2183ec21-07ec-464e-88e9-d397c4b5bcfe","version":0,"status":"done","tags":[],"date":"2026-08-28T13:11:36Z","url":{"schema":"http","addr":"kta.capital/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pc.kta.capital//#/?from=mobile","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"title":"Keeta: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil","dom":{"size":63042,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55600)","md5":"09cbaa63585f1f9fa89f9c809c1bdf51","sha1":"bc2ab3f143931c5580fa7fdc1c89ed4d0684fc1d","sha256":"4f795c688073b3ba38aba0ffc94b0782ca4c25b1372f2135c8abf7be6281bd85","sha512":"e5f443cdf6fde9cb6b1e42eb46eb4326ad29ee0172e9eb17e0bfa63a9e7e70d276675d0c3c242a53d0f33c13da8057904ca48ee141bc8928a2474c2f412dba37","ssdeep":"768:v7I4rb9b6rbdbBbgb28zwVNvXyKDfzznucSRMUTyn+LoxGZY9ys8zrBrw5SG9LQS:v04rRerZFUqVNPtVsk+m","tlshash":"f5534234b10052bb457784e8f065bf157eb2bb4fc32b8e4637ec92a16fcadb465211a4","dom_hash":"domhash81635bf912d920c3445fc7f7a89d132d","first_seen":"2026-08-28T13:11:51.02787Z","last_seen":"2026-08-28T13:11:51.02787Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kta.capital/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:11:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-12T08:38:00.929095Z","last_seen":"2026-08-23T02:49:48.766976Z","alert_count":0,"request_count":42,"received_data":3916704,"sent_data":23609,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"kta.capital","ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:07:38.620178Z","last_seen":"2026-08-28T13:07:38.620178Z","alert_count":44,"request_count":44,"received_data":3282562,"sent_data":20510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"pc.kta.capital","ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:07:38.617572Z","last_seen":"2026-08-28T13:07:38.617572Z","alert_count":33,"request_count":33,"received_data":8263158,"sent_data":15565,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"webapi.keet138ta.com","ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2026-06-01T14:33:45.375253Z","last_seen":"2026-08-26T10:42:57.484018Z","alert_count":0,"request_count":32,"received_data":490550,"sent_data":16900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"vip-cservice.com","ip":{"addr":"104.21.21.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-15T20:16:59.760558Z","last_seen":"2026-08-23T02:49:48.20224Z","alert_count":0,"request_count":3,"received_data":67649,"sent_data":1390,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kta.capital/assets/index-87461d8f.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20a9108405c6c399539c99fa677b12f","sha1":"64a38030cad18f322c40a8dbdbd3a9d497555dcc","sha256":"589df0701bc4094133e0adf90ae649bc6198155c4d6d5f9eeee0033bbd082c1c","sha512":"c82100ec4b7c666f121d113aff43c6eebf664ac80523e2b43abb187f7db3cb9ae40953bd8a0815d6037a4b4ce51edf557612e203f9d16671d337f99b14314aa6","ssdeep":"768:vk0vYNpymXSIZbtO97eI2L+fElGgIlffw4L0knzJiRJTijnCTv5V1CSzhoO6wNNy:vk0YpymC+I2GElbN4LiijnCTjzjx7XjG","tlshash":"5b231713fa46d53d9fb2a160148e1110a6182f8ed04888d7b4bd691e37f7eb07b6a37d","size":46000,"data":"","first_seen":"2026-08-26T10:43:11.021436Z","last_seen":"2026-08-28T13:11:51.063407Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-29T09:40:09.04937Z","times_seen":8527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3ccc9492d79dab168d313d5ca7666639","sha1":"1bb3ef888fdb7ff45bf21645d21c6146c30e792d","sha256":"45814699f5f5994f5204db47a9cae8f1bd2e11810843cabab88abbe0c0176d82","sha512":"95eb3514a0a67bfd015a9123ba942f4d6d37180e495c9d43c305a990d9f16c088a4e48a8f887df67ca2e019c3b922351764068893a59c6dc1f9279e6815abf1a","ssdeep":"","tlshash":"d9c08cc4b0c62d001606686014af34e49034402b70881b128ca4d84c2e224b48233ea8","size":142,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-08-28T13:11:51.097374Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-28T20:22:40.008979Z","times_seen":2215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ac9071d9932331d6f13c28662df3eaa","sha1":"f6eb1baa0bd1ae6f59ae6aceb867f897511aeee1","sha256":"b4c3e0db43ddfac91e82f4f458144da6e4066d57aa41fed04d86cd9b3c0e368d","sha512":"cefe8e65fa5d8690b53f96ad56320e72dba887c3ccd4df0d4eb9000a5bc903b77d1b7ae8b1ad7ec25ec0443e8fd41327e3deb9238f38884b08549579c918e3ca","ssdeep":"","tlshash":"25c08cc4a0c22d201606682014af24e490244026704c2b028dd4d8492ea34b48233e98","size":140,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-28T13:11:51.099384Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ce2a497ed52d60984017d6c50050212f","sha1":"e5061d81325e8091799c99881264070b9ac648df","sha256":"87fe3ff7d869ecf3e942e21576e5622bea21282217409f77a14020c2160da30f","sha512":"88dbc2af0f09af280efe0b5ef7e7ba913e866c50c75aae5916ef6ffccb16a7a55ffc7b6c8158d18d17636845b7e139c2afd21b3dc1f030de36bf63136c7aa88d","ssdeep":"","tlshash":"34c08cc4a1c33d001a06661120bf39e4a0248026704c5b128cd4e8492e230b88237e9c","size":145,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-28T13:11:51.100166Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/ArticleViewer-ycO729OF.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0e39b9ba06a4c877ba4848342f3cc1f","sha1":"51476b42f74b9a0bab3b30101f8f4c7f5840f777","sha256":"38482fbaa48ec0b599ae7413663e10d661ef376646d684323075a3f2d9120a73","sha512":"07581f16a1e034c485e2f2b12ac660582d9c4de23a358788f398b8338dc01bd78fe0c4d4b0d76833cab02e54c541879b64637c183266f52d99054aabee23187e","ssdeep":"","tlshash":"904175ad7471cfb942b3933165cfe35491447bdbd7608a86716e18293bc1ef06a1c304","size":2435,"data":"","first_seen":"2026-06-01T14:33:26.250251Z","last_seen":"2026-08-28T13:11:51.063942Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-28T13:11:51.101266Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf22cdb5c495761f76ab9992ebf13ad3","sha1":"b57aef5b20e486cdeeaa8034cd187d3f3f9bceff","sha256":"3e05e030f3d66bfe7ae10e6b050b45cf7eb3aa94f0d51883b1a8b0110999ceb2","sha512":"f8ad839258b9999fb5f167f325e1e3f2b27e15c3a544ddc0683f28e13f0d0820b1f151de63e4a450505073c33d8b44ba009b18f2aa1b1eeee25f443f6c2e67dd","ssdeep":"","tlshash":"afc08cc4a0ca2d002a03781020af24e49024402670c81f03cc94dc982e220b48233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-28T13:11:51.102055Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-28T20:22:40.018618Z","times_seen":1863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/index-DeunBlyi.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44dac057176c4ad79bfda85e4336e656","sha1":"8990d0253cd64247a28c08b2b5ad563961548d02","sha256":"0ae9b9f1ec0faa51d95151cafd85a4824149cc0620bead2899ae63eaad861295","sha512":"698586bf1a5aa26a78fc00980104059e0a00419657970590693e5f23d89de579b14968b89ee29d856d45f7cefb4484eccac6ab96cdebd04338fbf3c61e0cc996","ssdeep":"768:KrQ8sElJTLHEHYXIH1LR5Tynv/Q/LoOmBzfAfKvrQtMK4qeV:IsElJTLHEHYXIVLRBkHQ/wVvK6","tlshash":"2bf22a3d42129bbf6fb39625b8567114ee581f9fdb3489adfbf9b010fd808700596228","size":36043,"data":"","first_seen":"2026-06-01T14:33:26.200578Z","last_seen":"2026-08-28T13:11:51.041661Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/vendor-3d4b162e.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2a595b3bf7c1a86194b9250b0eda2a3","sha1":"b2fd1684f04a196d68b701201781a9d216ac61b9","sha256":"e87610e8f3085bc31dc3819780b26bf8935db041a1e693a5cd42aff496b3eee0","sha512":"b83e53a11d8a26a6811abf57a67c5f6152a302bc32c42bfcdce0f007ae93f790fd53ec219b4aca806845b93ff8b48eab0136bcd633fecf8a5e2adff9f90f610b","ssdeep":"24576:XXLIWxFw/LaOt1I+J5Zt67Zt6vODba2Gs88As7nW09ND:XXLIWxFw/ZI+J5Zt67Zt6vODrn8c7nWY","tlshash":"3b2529c57292f06547ab24e240bb0006f3396e59740d84a8f16dd8eb7d79d89a2b7f3c","size":984478,"data":"","first_seen":"2026-08-26T10:43:11.033969Z","last_seen":"2026-08-28T13:11:51.042868Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4258e14f9cef4db12cc722aab1da892c","sha1":"17e64549a586f1a87d0ad879f186d951ea5e67d9","sha256":"7ccdb567936df32382dea42f3a2a77e118864d8e4ee02d177d262126c528add4","sha512":"5b3ab295d3dde1a6bc72fcdf36376806bbbb0eb5bc166815e9533a3b702b90a8a1faa3b4631f388817e5c69e07b21b4ed24ede1d0a0a076a4deb0cf4abade81d","ssdeep":"","tlshash":"82c08cc4a0c22d101606641010bf25e89028402670485b428c94ec482e220b08233e98","size":137,"data":"","first_seen":"2023-05-25T00:15:57Z","last_seen":"2026-08-28T13:11:51.104Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"469b83f5443366670697e1de9c4e71bd","sha1":"2c41e85de84677e1c5c4fc55d7442e9d0fe4f8e1","sha256":"069dacf97027274f1b1765f516db119348cb36862bbc049128edfe933c287f71","sha512":"d1733b811c4aa1ef3be58f71b693848830e0d4c5f7cc99b0ce63dbef23f592a471950ae11fe8b930944ebf110a1580afa2e1cdf7677f94afcd322c26ce6a8835","ssdeep":"","tlshash":"80c08cc9b1d22d102a0a6414a4af35e4a02840a670481b138c94d8482e630b0923bea8","size":148,"data":"","first_seen":"2023-11-21T13:50:07Z","last_seen":"2026-08-28T13:11:51.10461Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-28T20:32:07.840794Z","times_seen":1772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1787922663408","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"104.21.21.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","size":17618,"data":"","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-08-28T13:11:51.079748Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c4aca76fbb55660da06477dfb1213f16","sha1":"895f854d00dfb9255cfb0a63ed928240d4a0f405","sha256":"40f66a542a86eb29ef8fd2b55753fde24b809b1d7482e44db4d93c5a1c49aebc","sha512":"6323f61d40bff5d535e39cd7a021d17ab63311566098ffc9e1220a3625e73e1175ef7e6e14beabe17415ec5c43d69e51f10602e1ec231ac14f0834357e123beb","ssdeep":"","tlshash":"aac08cc8b0c3ad001602a4101aaf25e4a0644026b0882b128d94e8483e630b08233eac","size":147,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-08-28T13:11:51.106165Z","times_seen":1940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d9b3e58c505cf8892432c31e8c6fa2ba","sha1":"be733b876fbbe88a80c372801ad5776d084f264a","sha256":"f1523f55ea2a38827e2aa0ca675f9f2cf4e71d232921d49628e4406e4761bc00","sha512":"2090d99bfd846dd0e66da78f8cdf44bbc025108adf6d5887931143638a65f210839f2504d620ce4ca0fa70b4785c723de4846650a758936e6029f5a9a17669ee","ssdeep":"","tlshash":"86c08cc8b0c32d003606681454af35e490398437708c1b028c94ec492e230f08233ea8","size":147,"data":"","first_seen":"2023-07-08T10:23:07Z","last_seen":"2026-08-28T13:11:51.107287Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f8fb41e6e11ac3bac2b81b3be1a1166","sha1":"a53a49e7cacfa21aa567af76dcc103ea1b3694f9","sha256":"c8a59136ecc29bddbe6d651ffee7c62d0cc1f077b201ac4e93663c714abd6ff0","sha512":"b29c017a7c48a438888c47d7a5493b119cc7d8f6652d67111986eba335e72b3e71d8bd52c58bef43da6543991ef3363f322c41d4f8c119d52a026012482b9d97","ssdeep":"","tlshash":"94a002914a0510503474140cdf5733006562803b844cd001350c50423b24727830a0f5","size":60,"data":"","first_seen":"2026-06-08T05:16:21.75348Z","last_seen":"2026-08-28T13:11:51.107902Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-29T17:38:42.191487Z","times_seen":42045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-29T17:38:42.192324Z","times_seen":43440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"84129e3e4c343b83986a3cdb1b047934","sha1":"1745827caa65dd7999d907cf6ed13703650299b1","sha256":"51ea04345450dcb2a5528153ee0cc51b52bd130fd509d78de22e86c3e740f989","sha512":"dbb1e22cdb4915dfc3a998d19eca085f33d19d1031d7732fe559b747956edc927afed2bef04e1245ba86898257b90255821800efd39e8e3b594e78b743f4a49c","ssdeep":"","tlshash":"c9c08cd4a0d36e001a02695114bf39e89024442674482b02ec94d8483e220b08237e98","size":143,"data":"","first_seen":"2024-04-05T15:11:07Z","last_seen":"2026-08-28T13:11:51.109441Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a77ffc8fcd5be8f12fb99bc8118151ea","sha1":"65c43d3029a382b86defc99c54613aa6a32ea375","sha256":"40516dd855287dd360d48125cb9de73ff1ac1d47f2faedbac5227338bf02948e","sha512":"3f80885ba525b9069484a79918215f8e3f8f830d5e81286b8772be124ed6928c6a994c91617a57d7558ac347bb079f660f65aeffebd15768b4e403210299d170","ssdeep":"","tlshash":"64c08cc4a0c66d101612652010bf25e89034402770581b068c94dc482e220b18233e9c","size":141,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-28T13:11:51.110132Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e129ae180e9f42bd8fb792476a7bd80a","sha1":"2c533ecafe5fc62de12ee7c6390d2a710d755554","sha256":"3cab2efc0da1eb38ecca758bcc3dc3d9e1d3e520287715d8401cc5bd6b99b5a5","sha512":"def450ab91d82d748f72da131700c83c67309c51912be7d21ee8f58cc04bbd905b5b4a549ee51e72b9ff6047743077228ba1577f584ea9fd8267861c9e0a2559","ssdeep":"","tlshash":"7dc08cc4a0cb2d001a02646010ef29e4a028402670485b42dc94dc492e220b08237ed8","size":139,"data":"","first_seen":"2024-12-26T23:29:40.179271Z","last_seen":"2026-08-28T13:11:51.110664Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eeb56726cbf34d810994da710c825370","sha1":"5a8e98e25e5b551cb61c3514cad0082ab5df1e6c","sha256":"0f2c28dff2af647dcad6a3e78da83440015d8ea76c2a50401e534e2443b7d6ba","sha512":"2c0ace2e68f12a2cbf192565693fe887a23405c1e2cb3438d30712a744d9a8b89b060d993630b9e93dfbf66a7d1c8951d0d19562cfcccaa063473dfb716355f4","ssdeep":"","tlshash":"79d02bd890e73c0012095272f05e1ed0b0254026a445041aadd9f4883953074d37ff48","size":256,"data":"","first_seen":"2025-02-12T08:38:06.922046Z","last_seen":"2026-08-28T13:11:51.111479Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b278df981fcb78387c3848ae889c87e0","sha1":"b981f308e8430a10c0d0552a561c2367d3b90347","sha256":"0d3c1103f316cb04c462c59ca12a02937ae82958daaf8b63b2c34b5fe1969777","sha512":"cb0c64bc51d8e0d47f87ab0cfb30cef2b2c478aa2d726e6869450bbbfed9e4de2e30a429542c4722f14548b59db01eb4d6b2fdd7915a22b374784068054ddebc","ssdeep":"","tlshash":"78c08cc4b0c36e112b86695415bf2de490288026b44c1b139de8e8492e630f08333eac","size":154,"data":"","first_seen":"2024-12-26T23:29:40.161991Z","last_seen":"2026-08-28T13:11:51.112437Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02b0d6f6fd6bafb529a8dd3a4a1e6852","sha1":"914f1241f7921c6be7ab7aa7dddffa9fd2d2431a","sha256":"bd5008e08c5e13916e0b7e2f6eb9c79397a28285e1fe0fdf2fd0c2835ee837db","sha512":"4bbe30ec966374b9a8e651d30e73aead81d973095412c5b1431599a7fe43f33442b27ea4f417c2426e27d1dcd35fe24003542e535914274f23b4d6a9158d6d4a","ssdeep":"","tlshash":"00c08cc5a0e3bd102a02641150af25e4a0244026b08c5b13cc94e8483f730f48237eac","size":150,"data":"","first_seen":"2024-12-26T23:29:40.182164Z","last_seen":"2026-08-28T13:11:51.113532Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a1161c3435dbb64633547fa555f68dae","sha1":"321b3b17aaee8ba598a7e8a550f51a4feb9a2bdd","sha256":"97e68db2fc8a0da179e8514910d515327fa981a336dec334a4587a5b2140b632","sha512":"35230123e5758b1e238b830069457699e1ba21f302b7ab4f5a9c706ec65487f1b415c9106ac9fc13bc451f4980ca3a908c17eadd85831d4ee794152cc873b168","ssdeep":"","tlshash":"9ac08cc4a0ca2d001602642420af24e89024402ab0485b428cd4d8482e220b08233ea8","size":139,"data":"","first_seen":"2024-12-26T23:29:40.133617Z","last_seen":"2026-08-28T13:11:51.114573Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-29T06:54:10.567923Z","times_seen":4578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e76eb5064dc39e5a2b6a62342ae8703f","sha1":"046af428ba37b0afcd09551ec358126c7e5fb2f7","sha256":"9e2df5013aaf547c80e4c019eb5a4313788ceb2ad6e32c7934aa82160fea41dc","sha512":"3644c12ae07c497b666c72d28dabb67a2e874e249a10885adeb1d5d5e80e58ac8ad51e4993b9fcaa12393d69c816af8e2d87e331266c0fc2bf32084562cd8803","ssdeep":"","tlshash":"75c08cc4b0d22d006602641092af34e490288426b0482b028ca4dc682ea20b08233ea8","size":138,"data":"","first_seen":"2024-12-26T23:29:40.115592Z","last_seen":"2026-08-28T13:11:51.115686Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-08-29T02:39:33.640513Z","times_seen":1853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7452cad6cd380a3feda6d7e3e0e7973a","sha1":"4e99e6b44a4132261c9a7b4c48f16ee983b7579a","sha256":"70b6c337aa9dd4949793ee338156d7f1dbea7a24d964b5a9e5566ac4c03c51a9","sha512":"ceab61fdd51aaf7a71ed5dede53940e8a9e3854d600a23e3ed6c38ef250a6209482842c207743e3f6bb4127b8cad653071015e302e311f734029b50350b9b230","ssdeep":"","tlshash":"b5c08cc8a0c7ae442a02751111ff34e8a024482774486f829ed4dc482e220f88337eac","size":156,"data":"","first_seen":"2025-07-19T00:50:04.712334Z","last_seen":"2026-08-28T13:11:51.116721Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d80fe4b7bbdcc84c4954304b7f65ab19","sha1":"91d3251c7e36145106999abaf130a3108e9da46b","sha256":"9e4fe10b1520f75266816a855536031d99b800c719f948f8c360c6775cbd1baa","sha512":"8c8dd0f47da79cf25188d9228f1b84df49eba05c702f32c078465d357387fc1729c81d77a822106c43383eb0809bbd1bd3f8114ef382dc8f508723cc3e86822e","ssdeep":"","tlshash":"9cc08cd4a0d22d002a06645419ef24e490284027b0481b129ce8e8482e230b08333ea8","size":145,"data":"","first_seen":"2024-12-26T23:29:40.190285Z","last_seen":"2026-08-28T13:11:51.117458Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c902959c0dcc2dc19fd0514450604f1d","sha1":"d91f4b90edcbb316ada2ee101c33051f54b14df8","sha256":"ee4eed1084dd0deeb3af02b5eb977fa38bc27e5a0cc2715b3e4619908a9cf984","sha512":"df85b46a332ebd09e34eb800318dd951ae93ddd0a47ef8ce5e272b9d90988994ba501bbcaea01238fdee21c1aef4cefaee75147dbafbc178d53d4de9b3cd9552","ssdeep":"","tlshash":"56c08cc5a0c26e201606682014af25e49028402a704c2b028de4e84a3ea30b48233eac","size":147,"data":"","first_seen":"2024-12-26T23:29:40.110896Z","last_seen":"2026-08-28T13:11:51.118424Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"80ebf24ffed33f82fa8f17c20de3c780","sha1":"46f063cfd46c723a874ae47f9db7bd88772331b1","sha256":"da5a2bc707f6c34ec090ff2172fbee95686256510f83f124b651a1ae9c438ddb","sha512":"588329cf40d05e0bbdee917e76f7f3159858be2a0604d84e98b0b1db5cac8242dded1aa9150d7128496757ef9b0a5303cc2b617962226a8b332abd4aea82b3db","ssdeep":"","tlshash":"ccc08cc9b0c22e241a1a686054af65e49038802b708c6b428dd8dc5a2e230b08237ed8","size":150,"data":"","first_seen":"2025-02-12T08:38:06.934018Z","last_seen":"2026-08-28T13:11:51.11952Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-08-28T13:11:51.120036Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_vr6c0qqm.js?v=1761548384","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"104.21.21.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d2a0b3b6f4d855a692a9d7d057d60e","sha1":"3102e656253469f3e6ca80ae62ae803b7bc2a4f0","sha256":"00c156b04b90734fcfd52bb7b52269a12fc14b3f3c48c19394badbd8d34c713f","sha512":"d0a6ec58a9e25dd0fab7cf740000d5e8e8cb5497af3d0e5874ea0337f224e3277e2ca17170b9fb5c129231d56c1ed1c05454d20e74d672a8067d7f94f55fd3ff","ssdeep":"","tlshash":"fb31dd515e99c5771933322a9b3ba228ff3117031901de033efe57009f31e85aa65ec5","size":1818,"data":"","first_seen":"2026-06-01T14:33:26.248719Z","last_seen":"2026-08-28T13:11:51.09508Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/assets-55d8d0ae.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d24fff9423df1157be415da510a275","sha1":"cb4f3087731b0744cff3c2f48f94677b3c8f6ce7","sha256":"f1f837b7d720d0028a07d873cd7d41590ac90fb1a692e7d7f5d3aa172d76adae","sha512":"641808a8d86e7c08505d721322e258c2320c0d2226963a2e34cb1415daade9ede7a08d9d7a2fb0741f3ae0bf584182a68a13ad575e82a58598419c9648b9b84a","ssdeep":"","tlshash":"2c41b4342242313bc6e640824640aa91b70dab9a4f18edb0bdee47b55f28cc9917e2e4","size":2245,"data":"","first_seen":"2026-08-26T10:43:10.990089Z","last_seen":"2026-08-28T13:11:51.0298Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"14de5bc5c0448e26749ac836c8b95e3d","sha1":"5dd499d81ca5227371ce787af044508451ebbb0b","sha256":"37fd774ea432838186ed26abf4b80cf5c3833550e7636e03f0d410bdb6711e30","sha512":"1dc6fef9de7238a9adc505ef6e618d28b704d2231c91a6d3ed282c33b61acf9270ce2f9af7f929390b46f97a562a915c1d03f207d4ca8cdbe55a4dcf308d37cb","ssdeep":"","tlshash":"c8c022c0a08a6e242e121850206f38d0502804a3b1081ac3cc88d80c2a620b4823bedc","size":176,"data":"","first_seen":"2024-12-26T23:29:40.149096Z","last_seen":"2026-08-28T13:11:51.120523Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-08-28T20:32:07.811705Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4bdbb140ce1563e4b69697bfc87a22ed","sha1":"3d0bf1d707b71f8e08c64440b932b1313be97021","sha256":"80b1970f763f3e19389f0305389f079d22b077722a71eccede3d5133f3f5db89","sha512":"8d9ca42b5cf4816ea6845418284410fd1eb52a6375357986f67d0c5936536a2b53072c33f33511bd979ef5ed1d06977ae4220dce191b1b20352cda01ef12bddf","ssdeep":"","tlshash":"6ac08cc4a0c23e001602642011af24e49024402770482b128cd4d8582e220b48233ed8","size":137,"data":"","first_seen":"2024-12-26T23:29:40.159201Z","last_seen":"2026-08-28T13:11:51.121558Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b56bd9ed17b7064960dfe1847e10c20","sha1":"4d4cc7e6ffe5518ab647c3644c441af701cfa69c","sha256":"a4b4cd1e6ee3d68f6fb5aa0e1b6d74cda904f6873e523e247e6aab44c45babac","sha512":"d861c4018a63e41545de7968638179721bde3cd6a5a294f3159923e72712fdaad1403764f21ca445a4e41cfc566f2f7e92e0122462324ab4bd72ee1eb4390bb7","ssdeep":"","tlshash":"bbc08cc4a0c32e001a02641020af28e49024402670481b02cc94d8882e230b08233e98","size":136,"data":"","first_seen":"2024-08-19T16:28:43.287038Z","last_seen":"2026-08-28T13:11:51.122665Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-29T18:33:40.360758Z","times_seen":7400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"527ccf0c9fea936f7220396c42116f9e","sha1":"bb83e06e63a61a2b078dbe2db49aea4136118615","sha256":"7a6d8de28f2908198b85042a943d78cc771a471342545d3a1c0d473156a2861b","sha512":"cb3690488d304aeb6011d6de928f189c4eeec9134ab6a8b269eae6879a36741cad69179e87582b70fe9ebad18db0faf0f90c54e88c45aa28df5e5634fe17a634","ssdeep":"","tlshash":"7ac08cc4b0c22e001602641010af28e490244026b4481b138cd4e8482e230b08233e98","size":136,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-08-28T13:11:51.123789Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"65b1eee05b03c762c85b0117b8c0b28f","sha1":"f07a5f6529dc94fd3768fa20011d0094d4667b9e","sha256":"e650356de3b5375b158a788269cb35895f67fd509d417c1d48108ea8cbdf4a9d","sha512":"e438b7e142d947961523882b8102b1501cf4b707a39e25269647d972be79470163d2264d3d9bd1e604bf463b6ae2982d8a884644df6306f87d25bafea5d9be4a","ssdeep":"","tlshash":"a5c08cc4a0c22d005602641052af24e4a038402670481b028c94d8982e620b08233e98","size":138,"data":"","first_seen":"2024-12-26T23:29:40.142823Z","last_seen":"2026-08-28T13:11:51.124432Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e22d8bd688d257f7ea5c92b205e9d7fd","sha1":"f5df3e5272f05fcb05dac2a225541ac319109bd6","sha256":"f5d478f44ac485fb4eee6e4a365fa3e080288dfc331165b54110dae255b895aa","sha512":"76cfe7d07e02a113298a5d6222e71a301001912a52801ec9b16d3d088a9d94bf74cc2f4a0e92e3763c92b7729897b6d44d5e4234b2da54bfd872d5b07c6ced89","ssdeep":"","tlshash":"ebc080c870c32d141511641019bf64d55034541771499b528dd4dc542e120f44137edc","size":164,"data":"","first_seen":"2025-07-19T00:50:04.709856Z","last_seen":"2026-08-28T13:11:51.124987Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/index-DgicNu3n.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83424675b25f17495864b585b2ca0d07","sha1":"b8f9c900d50408e9e5b0535727e0f17f48a15783","sha256":"2a2e46bd6b88b9622923c22322ab5e0079dfffaa0c95b337e0d9ebd5b26181ed","sha512":"36218edd0a7abfe47023a3aa7897b473e4dc99bdcab8917be5fcc82a79e532e70e59c3c0cca2b6532518cbb437fa4740e89b403c3ffe2e192fc11d34a391a672","ssdeep":"24576:9PyInRsAXZoM79nXJn7MeTZZXX7ZTJE6XS0LHw5aWTkK8rp:9PyInRsAXZoM79nr3ZXRQ5aWTh8rp","tlshash":"61459facb986b06906f3c7a950e70104b2741e45f906c0e4fafdc56a16e1e6df297f38","size":1251504,"data":"","first_seen":"2026-06-01T14:33:26.422635Z","last_seen":"2026-08-28T13:11:51.126298Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-fef1c564.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06f8d33d51180b68b75a47e0d637a93c","sha1":"3ad83294f948c3ec1d854b56db06b0dc55fc183d","sha256":"b287a3e9b9a8c304e0d72800d79f0abc92410ef32931639c3a7d93ac0532286f","sha512":"f2776d9150ad0afa7f8826916d4a4a40ad2c9ff85e949736906c4a900ceec6e3fb8e8c7a95477f5c0e8bfd6abb56fb48b05cbfd4d20dcbd6dbfcec368e1ca91e","ssdeep":"3072:uZRyZf30RnjyBRy9Gpj4rf0HYOo7Ng4aoErThbsDn65sfuguNF8PCB:uZRyu43pj4r8HYV7qv5rThban65+6N5B","tlshash":"1a047e4e66050fbf5ffe084c655a055021093f82a74cc893b2bd9e1a37f7c94a7aa72d","size":182789,"data":"","first_seen":"2026-08-26T10:43:11.029645Z","last_seen":"2026-08-28T13:11:51.054026Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0e88b4359f0189f87f4e970cc1566c0","sha1":"c53bd6aba8a4c20f8a63e7dddd84de5cf4da3874","sha256":"5a98ac47317bb264d96e04f3376a4c39b8c6a5199377a17eea157585ac3a3f76","sha512":"14dffbbd1c5bd10f79d5593c73278105b0cfc7b3c9989a506402c642fb9ee5dd8546e6ec17bb4903802a961b7189e5c0c2e948b3bdeaeacd089ea9b200af1bb5","ssdeep":"","tlshash":"d0c08cc8b0c36e201a42641150bf35e8d034402ab84c2b168ce4e8582e228b08233f9c","size":156,"data":"","first_seen":"2024-12-26T23:29:40.147455Z","last_seen":"2026-08-28T13:11:51.126935Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-08-28T20:21:12.231854Z","times_seen":686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b6bf1cfede1e63bdee0b6975b795108a","sha1":"2bb68d688a44094dd322348e4e176bfe765e8ff7","sha256":"7af90459ae36e3c183ad72d1689cc4041001092c3015e0ed344ac0311b915934","sha512":"17971ffaea8b3fd2c8a04ba74027226d76a47c69c22bb8623d8490c1f48c155a221e6bd785ed924c7d2802806e497a589df58bb7cd2a1545b12e75a452511fde","ssdeep":"","tlshash":"15c080d460d22e002705655425af35d4502c501a71485b569de4d8483e630f4d333dfc","size":167,"data":"","first_seen":"2024-12-26T23:29:40.167833Z","last_seen":"2026-08-28T13:11:51.128033Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b58db56244ebcfd6a85dcf916fffc69","sha1":"1c6fc921903930b2c592d55173139d7ac0b74f72","sha256":"cca7e23feff36a15e04cb272e18dab9759c807fd3f19e77b34f8b882b8943012","sha512":"c9eeeb6ea699d2bf16040ae078ba87aa5da85bcaf137cebda5f8969780b3031f707b5207f3b9f6568fbb43494bd39fc1d5bbac0352f513f570e40621e2bc82c5","ssdeep":"","tlshash":"ffc08cc4a0d36d101622681010bf24e490248027b25c2b028cd4d8892e630b08237e98","size":144,"data":"","first_seen":"2023-11-16T03:00:18Z","last_seen":"2026-08-28T13:11:51.128881Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad5d63c4f600679e0cdf14f7a15e9e51","sha1":"5794bb07fc89c9f3d0f290285949880d9823c986","sha256":"0aee5b78242ca1a6c056722e3936c438adce345b75a607dbab3f8c8d5053521d","sha512":"5d29325b67459a069e1e34ae7f6cd6bad228a75f5a260436d08665f8526d15201c3c5fb890b3f60fd7bf899518e5628f651b1ada50a4cadec011926fa3d21877","ssdeep":"","tlshash":"fdc08cc8b0e62d102622652166af25e890288426708c6b16add4d8483e720b08373ea8","size":151,"data":"","first_seen":"2024-04-05T15:11:11Z","last_seen":"2026-08-28T13:11:51.129515Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7eac0ed17a41f6d3eb1e9e37f81d1e58","sha1":"2a940f5438b80e4f4e24f1d9d5faf65b9c436b79","sha256":"a1484e4f765eb72144c20920e693a14b9dd355378fb9d0310eab0b2d8b1bd2e7","sha512":"342365bca1287f0ec76d01cf96a3fab44b594f191b474a0697d8ba6d62f946acd9c7295b352bca633910de87f6946f0900de6761f4e60afe9a7a515ec5185c99","ssdeep":"","tlshash":"15c08cc4a0c32d042b26655815af25e590284026b04c1b129ce8e8882e230b48333ea8","size":151,"data":"","first_seen":"2024-12-26T23:29:40.186257Z","last_seen":"2026-08-28T13:11:51.130677Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-333f12dd.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddca22ee77556ce06fa9606e3574b919","sha1":"c3a1a53a9160f0fd36fa3bb2d7a4de9cb19d45b2","sha256":"7172fb0d9f31bac84df3ad14fe46295f9c373a3cbe01f7278a5e036232a7fae2","sha512":"859870559bf193115c49fbc226bbad1e09058b6635b7633ac958fe17dfbb18d474c0e3ec609fd77a001d38dd31d385f6abae1442d9893563bae4405c3e56c642","ssdeep":"","tlshash":"aff00c6f4d6e0533acb34068201b2409176c0ff92bcc6989e1d407a427d18a4ef8f2a2","size":632,"data":"","first_seen":"2026-08-26T10:43:11.014623Z","last_seen":"2026-08-28T13:11:51.077265Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-08-28T20:22:40.024933Z","times_seen":1712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d07ac8293a895d5cd36ac4a1bb6ebe89","sha1":"ca073c02e761f0687cd428bbd5a5a4a739b3e809","sha256":"c632f36da8c1b069e2dfb84a059900f7587fbded33002ea457cb8a9982e8a21f","sha512":"fe08a6e9309462264fbb0b9b3cd5c0f7cd26ec73a2e11b52a3bb6cd40fbcfa083884e9e1bfb31837c39ee4c0e0ff76274ecf3def1a415ecb56af7b32d68d43ed","ssdeep":"","tlshash":"78c08cc5a0c23d101602642010bf24e8a024802770481b128d94d8483e220b48237e98","size":139,"data":"","first_seen":"2025-07-19T00:50:04.706874Z","last_seen":"2026-08-28T13:11:51.132317Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94a8a0aafb9251852f4b5b9a62c8a990","sha1":"020af04f3ce6c017efae4efa1be13ed45ceb97d1","sha256":"b94645c98d1e5bd2aeec0b254793bf494cda8d4bd43ec7219b78a0b0ad29fda8","sha512":"453e9805e21e26347226630f2fbebba62eab7a8e498fbecf004135ceca9a5b3632df5fa26137c47231c93bf3487eef3e4ecb4d93f8e5a8b6a1c3cda722e50a42","ssdeep":"","tlshash":"5ac08cc4a0cb2e001602646010af25e4a028402670481b429c94dc592e620b08233ed8","size":139,"data":"","first_seen":"2024-12-26T23:29:40.145852Z","last_seen":"2026-08-28T13:11:51.132892Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e18503cc965f5cacb2f944e681422199","sha1":"e5c5c1d6e670e6126d578b06ceba270330a76095","sha256":"8037f722f9ceaae2e99df478aa531fb130753f6a5103b87e2bfb314b9079948d","sha512":"63253698754f87d781a34ddff94d661cfe02acf79f4ee5dcc771691eed20576e1d20e09506a2758e6cdc5053e7766d99f3977028fef2eebe458d67c52fb0e7b9","ssdeep":"","tlshash":"e1c08cc8a0c26e00160a641421af24e890244026b0482b128dd4d8882e220b48233e98","size":140,"data":"","first_seen":"2024-12-26T23:29:40.157725Z","last_seen":"2026-08-28T13:11:51.133502Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2f10007f2371a0b5e0441b476377b959","sha1":"b8d3365dd0554b84bd9c28d233f1c0d6554d79e8","sha256":"5fcc6424818038cb977efbedac638cffaf1a6280506a2a79a1fa85f3bfffdf3f","sha512":"b6f68ebe712ed948804fc92d555518e1d636137582895e465419a2f699679fc79afb09fcab6e0140f3752e745538f72acc34adc8562eb5380d7e8041e5f447ff","ssdeep":"","tlshash":"40c08cc8a0c32d006612651164af24e89024402a74481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2024-12-26T23:29:40.173962Z","last_seen":"2026-08-28T13:11:51.134176Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/charting_library/charting_library.min.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-28T20:21:12.205695Z","times_seen":1382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/en-030aadcc.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"17c66dd72e5620375f047a9aa34a53ae","sha1":"ef9572267225a00c250bce67ce1cb8483b2b5676","sha256":"695d137cee62d91d5eecca08cb0cb64d1df95581bbb87d46ff231df59213fba1","sha512":"b87772387563233df98cce76bcaf542edeeb3cd227dd0fdfc30a31da5821c58ec666655e8b02828608284bb72e12ac5f7524ff27a979baed2a6a89e2bd4ceb68","ssdeep":"1536:tHDZiw1A14lUlTm3Dj6TupoT1LnXIrdKV2Py2FX3W:1ZiN140mzOCWVHoW","tlshash":"08731a4e7e0a88a909f3032278ce2f6561f409c18356c85f4eecc5bc53e1b5ae7a7675","size":75104,"data":"","first_seen":"2026-06-01T14:33:26.418099Z","last_seen":"2026-08-28T13:11:51.134713Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0bdfbccbc6d898ee51eaa3b961c798a6","sha1":"c894c07aef0757480960b3686131f827f8ce3f50","sha256":"3a3185c3a7e53a7152a5e17ac9970a556b6fb332b13daca744c0f305ad32abc5","sha512":"3d9fdf087e9de100b08c2cb899fc211e30960fe4fbe7352afedf7ece185b4a275d1e2d1c53ebc7058cc9261edad1f2ec8481bacd15f1f2c6d62ed99d718b0df1","ssdeep":"","tlshash":"56c08cc4a0c23d001602661150af25e49034402a70481b02cc95d8482e220b08237ea8","size":138,"data":"","first_seen":"2024-12-26T23:29:40.150645Z","last_seen":"2026-08-28T13:11:51.135789Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afc8490e468f7b633e2c4221d6712d54","sha1":"b6efa8027a8b452305ca1d2fcaa32632cbd108ff","sha256":"38bc34c915b53e2444ae9e6c602d5010d370de127ec7c141a55d964a91ed7f96","sha512":"5158d9fda9d8c70eb8eedd8f75163df63e261a505f5c2e3b2f6627c24944f8c2bd3664d110d0d7fc10507a85672598fd87973f933544cf83edd9d22110b605e0","ssdeep":"","tlshash":"28c080c570c26e405b016510107f27f49038445771c91756ccd4dc453e220f08233f9c","size":159,"data":"","first_seen":"2025-07-19T00:50:04.724885Z","last_seen":"2026-08-28T13:11:51.136374Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"754f1a92bcda7b7b70bcb4c84d6b90a2","sha1":"68dae7cea08fcdf789277cc378cb53d8c9540c8a","sha256":"bf00ce7899e0c4b35810c2cb7c550f0db913f7240ba6dbb7df0e374fa7c127a6","sha512":"741805a147e34ae9e3faab586312edf0097951d85015bf6d9dab655ff4dd2e968eb4beeb762544d19f6a8d357f12fa5c310f061359e21fb00d2906d4a9728a74","ssdeep":"","tlshash":"4fc08cc4a0cb6e001a02781010ef24e8a024802670481b43ddd4d8482e230b48233e98","size":146,"data":"","first_seen":"2024-12-26T23:29:40.208529Z","last_seen":"2026-08-28T13:11:51.13829Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c02f76b8d173e1d0afc93a75753a8a9a","sha1":"5a3ff21341053a0ce6dec4cab0e4a8739bc8ef19","sha256":"e6dbb4df2b7605ab60ad69cc08ce5e7acbb99970e89f3e34e52bc5df7a19b3bf","sha512":"f1be22dcd1d064fc9038900bc3a7555b233735cdcda79b27c8cb0ccafbc58d4402ed5ac8189dba463b6b589aac7e4fe5324246c7d94b127d7dd8bd39f8773b3d","ssdeep":"","tlshash":"74c08cc5a0c22e101a02641419bf79e4903881a774481b138ca4e9692e220b09233e98","size":149,"data":"","first_seen":"2024-12-26T23:29:40.15335Z","last_seen":"2026-08-28T13:11:51.139332Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//#/?from=mobile","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eec71620e7079102b12e71f32e8c2cdd","sha1":"065e89e4f7183ea7c67024a8422a122cf5376097","sha256":"b95cced158bccf2098be61afc331cc501a5f3720d00ab1f0dee7f548ca08a460","sha512":"7f618ca5c4e728695a3071d9742a42f6e2d3adb9f08ea0590cb3b1f2aa6963f418a7ff85caccb1b2bf4fa5c947de21f581a9299540e61a8a11984d74ec537772","ssdeep":"","tlshash":"bd418f4a16ff75519123f079876ba308603299032d0aee98bf4d93403f6522b86f2bcd","size":1990,"data":"","first_seen":"2026-06-25T16:53:33.911983Z","last_seen":"2026-08-28T13:11:51.141043Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-206ba516.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a7924fedce37c7f902c39baf54f00a0","sha1":"c00d0cc683df29d4b4a12ce7dc6f965deff79e61","sha256":"1c50da7936c89b1d4da56056a83a38707b344a62e483ca15b2b9f7b86a2d8110","sha512":"41bc5da2409d8fd15c5d8b3c25196c95bbf8f0cf9d19ac2b7bf8bc1991baf56d0d04546f8bcbe20d49f20ce3c16d048cef0f7a05c930285f2bd3eb9eccdad89e","ssdeep":"192:cUx+gk5Bx+S8k5TdOwuHzxMhyu2wEh5sUZ0BLKrOzsamehXDpjAWp:Hxi5vf75pHuHzchEh5sUZ0BLKrOzs+xd","tlshash":"98121a06fc16c93ecef2565ce0d90030718a1fca5016d4b6b1bfb81a17b9db4a79272a","size":9783,"data":"","first_seen":"2026-08-26T10:43:11.030825Z","last_seen":"2026-08-28T13:11:51.088808Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-c03a0534.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"600ad565a05ad65da5c87288e22853c7","sha1":"bae28e318a8edf044903806f5bd8b123bd7f2c12","sha256":"c51d47819da1c8f2edd94bfcf6939b4db1e7d063923930b3c895e9f7a4ba0870","sha512":"62d9eda2ac6631bf3c9f2c3cbb16b950968750616f7207085c840293e89676cf75cbd192fd76d42060e8db9e4dce9df42567c61dca00f914ce358b1c86319fcd","ssdeep":"","tlshash":"3e01d0f9fd0ccf7b2fa3065512d02641100a0fedfa1019e55c977e651be5950ca9eb1d","size":776,"data":"","first_seen":"2026-08-26T10:43:11.00092Z","last_seen":"2026-08-28T13:11:51.091295Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-29T02:39:33.808055Z","times_seen":4545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"958713e9cfe5596854ed0b863f4d907b","sha1":"dac8755881013fc4078021ba1e551de0af8f6d94","sha256":"4eaeb0325b6bfce2510e1786f9cd8513dd1617a9f384725983745751cb6960dc","sha512":"9e713931d544f9a9b15a59606205b925ea5ca6dee61ab50ac01b9ed6459c92720c5c31c81939ee0a5a1caf3c414bb1ca5172af93f19afd79adf6045c68304b56","ssdeep":"","tlshash":"f9c08cc4a0c26d001a16649010bf25e4a024402af44c1b02cc94d8482e220b08233edc","size":141,"data":"","first_seen":"2024-08-20T15:10:19.411327Z","last_seen":"2026-08-28T13:11:51.142237Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/#/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b80f31fc52f8be5c347edbab4f9e15a0","sha1":"0552aea41dfcab393a9ebf9edc3f69262ca22477","sha256":"10ecf23ed4ab90ff714aa13bc13c976cd1cc440bced982a5c23c38bd91b57586","sha512":"c0d447b400ac1748996b58bf9b234aa4b9efcc4258a89365ddceccd4294ca9202cd267f042df772d15ed4e2dddb6e1aa151bd6a30688d9ea0da422fd924e25e9","ssdeep":"","tlshash":"5ac023c9d0c17f1016912001506f64d55020405974045676dde0d9161fd60b04133dc4","size":181,"data":"","first_seen":"2025-07-19T00:50:04.700499Z","last_seen":"2026-08-28T13:11:51.14276Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/CookieConsent-Bu6z0aTL.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7169a610f9e575cb81d79ac480fc37c0","sha1":"9b7cce3b5620a8fe07e724e20b5a4f71acc61733","sha256":"f416824db87ad14beb35da6d046c43c0eee2c3f848c5e64cb3366e8b294129b0","sha512":"938fff0d4b64283979eef4eb0b313cbeae35781bcc26006fe933f7866bb54db1e78fd6f5c980a46cdf35fd7693b80f503ffe458b9f60d219a06b39f0b6e145a1","ssdeep":"1536:qjxMkbZcbyEyNNBlxvHCfG6f6XbvSA6EkZLSCnYtgm+4g1GCt6iLn3:KxZNvSAfkpBiguan3","tlshash":"cfa33b88a120b57a46e356e652a88211b3b45d45f449c4f4b1fccc6b0daed9813feff8","size":101886,"data":"","first_seen":"2026-06-01T14:33:26.196923Z","last_seen":"2026-08-28T13:11:51.069729Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/PdfViewer-DQUWpIe6.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dd7e6321a11efe74369bfcd8140ed8d","sha1":"6a705ce9f291d0f9bc559768875779cd2344a71a","sha256":"f0481a66c2dba2bb24f01ea00fe5d6c1e05a867e969b7086e201c901aea66ae1","sha512":"8a6f9dfdd2e45c1a87fc8e2478ab5602c956dad42330f860ac9aa856c551ed5b637b716f5bab5cc6cfbf99e0132198d89c8d64a534f338437927f8c80c8dc03a","ssdeep":"24576:340pIoOWl6r3dqbOt7aFMz3FuEoYlOsp8yDpm0gLsC7Xlf:340pIHWl6r38CFR+lf","tlshash":"a3a5a072634372e96b79468671b91609437f154d34f3a2c8ed8e2ed9c52ad2b237c23c","size":2203497,"data":"","first_seen":"2026-06-01T14:33:26.37833Z","last_seen":"2026-08-28T13:11:51.144863Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/xauusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.965Z","timestamp":1787922661965,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/forex/xauusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.01802302864b24cd082a311fb10910d85.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.957Z","timestamp":1787922661957,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.01802302864b24cd082a311fb10910d85.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/stock/NVDA.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.972Z","timestamp":1787922661972,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/stock/NVDA.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/assets-55d8d0ae.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.375Z","timestamp":1787922660375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/assets-55d8d0ae.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-8c5\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Hs7LP%2FSixvh%2FBjMGrY%2Frsh%2BZ6BNy3PzV0fvnoyt5EJXNdpG2W0j8dS%2B5c27TXQIGyq%2FmyN3pd25FtaVxZsgi0i7o%2Fe6N%2FO6LPxPhuWxvQfFHgAZ9KelTu96YjSY1w%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f335e132efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2245,"size_decoded":1922,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2244)","md5":"d2d24fff9423df1157be415da510a275","sha1":"cb4f3087731b0744cff3c2f48f94677b3c8f6ce7","sha256":"f1f837b7d720d0028a07d873cd7d41590ac90fb1a692e7d7f5d3aa172d76adae","sha512":"641808a8d86e7c08505d721322e258c2320c0d2226963a2e34cb1415daade9ede7a08d9d7a2fb0741f3ae0bf584182a68a13ad575e82a58598419c9648b9b84a","ssdeep":"","tlshash":"2c41b4342242313bc6e640824640aa91b70dab9a4f18edb0bdee47b55f28cc9917e2e4","first_seen":"2026-08-26T10:43:10.990089Z","last_seen":"2026-08-28T13:11:51.0298Z","times_seen":8,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/ETH.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.967Z","timestamp":1787922661967,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/file/ETH.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0e13afc1e39af46b5af2aae698d6973de.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.018Z","timestamp":1787922662018,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0e13afc1e39af46b5af2aae698d6973de.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Frame%201-CUL4cChQ.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.098Z","timestamp":1787922663098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Frame%201-CUL4cChQ.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-129c\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxCbd2j9QKOCR1ilQHIceYeUB2NEWIkW8DI%2FIUuU%2FtAf%2FjyJycIm4co7NZTgwaHkhDgWRaJskJRHRHLhRYAYWOeUgLq8v9FPyG07395rWyvJkWkxoMn05EATDU%2F1sm3oSA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459062efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":4874,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"8d212c8ea1591dfa2ba2794f71335ad5","sha1":"d4a46b85989a0fc68543d47374d7fb23b9533649","sha256":"db3891a7c41e37fcb3a5e36143a9c032486bdb2fa3baf924407a47b6a302e276","sha512":"ff704746c4dfe41083ec85ae9f9b807d3dc784b4055bd2ec149c4f8846966b55ee358218746f767e28c7778cdeadab955f976f4bc3c1e022320c7b0df88e34af","ssdeep":"96:Zj/zFb6cLBHNRnCWjwKWsEUW18YYbAcUsFXk8ZpRw:N4cLBtVCr9kAcpFDvy","tlshash":"74a18d25b470107e48e2d366dfae5cc200c4401e4c662fabd28a81bce28cb996473037","first_seen":"2024-12-26T23:29:40.085743Z","last_seen":"2026-08-28T13:11:51.032082Z","times_seen":172,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getVideo","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.127Z","timestamp":1787922663127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"GET /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:04 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMaM8EANC%2Fp3s05AR5z92LZipKPUnq73xflQBs%2FcRekzK5BSU5%2Fm4aS4S5sJ%2Fi1gPsxvJoBL0FlvVIUMeg3ABJzE9XQSkiuaJ8W5FT3MCxaXZE4w%2F761%2BCYLssQ%2BUj6oh%2FKZnz3Zwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f465d2d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2570,"size_decoded":1585,"mime_type":"application/json","magic":"JSON text data","md5":"808f69af15008c4ec44c29ec32134fc3","sha1":"5313a06504ae7c419f0e3a83f6a95eeeda8a8b46","sha256":"34db2f114b6746adc885a7f58be274dedb1c033f45916dddc43d984ad6807919","sha512":"ce112f581cd147a80b877a964e3038b14ce8f62e5a39c8c6d74e5d27377d888f9de4314e123819b31b5a4118e50b45e9062877c8d5a5ce8cf7c30e2723226e8e","ssdeep":"","tlshash":"05519e125678cc2d5a6c8cc395ea3c88f59c771f9250cd385846cf4c99f8db91a1f10a","first_seen":"2026-03-16T14:21:50.086187Z","last_seen":"2026-08-28T13:11:51.032773Z","times_seen":18,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b3670fc00bef475293fe0a26faf1af3b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.324Z","timestamp":1787922663324,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b3670fc00bef475293fe0a26faf1af3b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9485\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E88B9044303294F820\r\nAccept-Ranges: bytes\r\nETag: \"D143069824ACBE37EECCBD88F815F7D3\"\r\nLast-Modified: Wed, 09 Apr 2025 12:01:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4371194900719359147\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0UMGmCSsvjfuzL2I+BX30w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9485,"size_decoded":10059,"mime_type":"image/png","magic":"PNG image data, 229 x 232, 8-bit/color RGBA, non-interlaced","md5":"d143069824acbe37eeccbd88f815f7d3","sha1":"01578ca91debd1fc6e93eed6b801d480d6f8d3ca","sha256":"eeb85cddb7caa1a0edd46ec513beac3096383a0f72204770dc0f5c21f1dd20a7","sha512":"c0c53c4964b33660fc484430507a32b1a3cc67356766e85ddbf67dd2f920ed843b4fe7b13c361a34751540aecaf694e3c40c3671b2d4baacd90d59dc687f8f86","ssdeep":"192:BSi3wY4uC8KtQadptGikhhG1GLvMjI0/cbX/LioBh2iv16V+:o2wY4iKLvM/amvaSP5BhxvwV+","tlshash":"0812af9cd1a964665c84ee1f7148c5087f2217c78465175a91e8f077ac9bc3d1328eff","first_seen":"2026-03-16T14:21:50.116822Z","last_seen":"2026-08-28T13:11:51.033322Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":269,"send":0,"wait":277,"receive":0,"ssl":547},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.09cca26b322c34bc8806cd8d4a48e1141.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:06.216Z","timestamp":1787922666216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09cca26b322c34bc8806cd8d4a48e1141.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 923594\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188EACE63A833392C09B5\r\nAccept-Ranges: bytes\r\nETag: \"65854A160CE21592B039F4F62751F730\"\r\nLast-Modified: Tue, 11 Mar 2025 14:24:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1983646765410002933\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZYVKFgziFZKwOfT2J1H3MA==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":923594,"size_decoded":924170,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1238, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2200], baseline, precision 8, 2200x1238, components 3","md5":"65854a160ce21592b039f4f62751f730","sha1":"2a51b71b65a211dc93795a275e9827b48df7f088","sha256":"a4d9da7a3496c0dc89eb4f6799f84ed485fb81c74b85ee5ee798c329ff28d40d","sha512":"fbec9b5be0bf7430e64bc00c6a2ad74ed9734373cf3a6c165c9fce016eb2e2f47181bfae33c376e3c7b5290442bdfd2261d7582d3530c01a9bf70ffbba66f8ed","ssdeep":"12288:07IA3Y7wolBJn0eww8evl8Z9EUJCC9CNw+5WbhXzGYHmIu390/tdIg5coJPrdH0m:sBob8m8P0C9Cyr/sg5ccrSFHJQOsMgS8","tlshash":"281533eb1108dfa5cbf41eb151d5d78d4a22c4bb5beb088af58ef05b53bdbab8064140","first_seen":"2025-09-04T00:18:50.344416Z","last_seen":"2026-08-28T13:11:51.033983Z","times_seen":62,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/dash-divece.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.951Z","timestamp":1787922661951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/dash-divece.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-1c006\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STgevRgbpyRusv7n2O8ohtr4bwuPNN4754Mvu%2BmFE1BWZ3z6TRHGH3Lu6x8fJb4BHaH9TvO2cjRxMAxR9%2FJCfr5Dv2mxSCv%2FOISD9gkD%2FkZ36ef1%2BWkpAMJ%2FMJv%2BQg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d3f9d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114694,"size_decoded":115476,"mime_type":"image/png","magic":"PNG image data, 626 x 340, 8-bit/color RGBA, non-interlaced","md5":"2bea02d52d0820ab7a6b90fdbd4c66d1","sha1":"f70e36cc99716baf39e8a35070462e6f79c464b3","sha256":"fb3b1fd2a168b7b7d3ccbe4d0b122b3e5c3f95860d11f86c923ba504a00e75cb","sha512":"6ed1c2fee87274a6e22d23133a95e090637d94ae83dced411cf50c82c16e5a0cce631b231e08b8bdcbe2755890139efa88334dee8f70b7c1a126fb97b361e546","ssdeep":"1536:KJxb0gUubsxD2luDrkSOdsoqqKUzInv4rBtGXKv0KmvuvukDPfIBSZfJWQK:KJx0gwxS07OdHqqKCInhKsZ25jI6fJxK","tlshash":"86b312605766d34942f1923785f41fb380339621f2c53239b4a8358eaf96adcd4afe60","first_seen":"2024-12-26T23:29:40.076771Z","last_seen":"2026-08-28T13:11:51.034737Z","times_seen":17,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/XAUT.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.970Z","timestamp":1787922661970,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/file/XAUT.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Frame%204.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.984Z","timestamp":1787922661984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Frame%204.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-20dd\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMjOMdbMhxj5J7ScMYnykBhyMJ3xoSWGEKiwQEwtwYNae7TMLsCAYi3w3z6NprY3LILNbteQBATnWFY3suKnnhrvjxsxTICnuR6By0xsrq2xETOebMdyMbKnwsw8DQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fb32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8413,"size_decoded":9222,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"264df1bab5915017aa44a0e0b8743667","sha1":"bd97c7bd5c839e29446cded395805af0a08f9b8e","sha256":"841a45a62324a18518fb30f38f1c097827d6b9585c35dbd9856f94755bb15e0e","sha512":"483aa21467a4ae27ed9f2ac5a7b705e8483c6926a2c43ce8d116943faab02f1ed9943fbbb72926edd5d1a32ecca8ef00acee2e7b4c37714730ef88ebbe53af2d","ssdeep":"192:caJgBbRcbRgI/EZ+ZsoUSRZnVHdtda+gv6ah2:xgBbwxcKVdNdtb66I2","tlshash":"7802af77d5c6848c122ce2a7eb287950f21448011175d26cf6d81ed7e1bb93be937b0b","first_seen":"2024-12-26T23:29:40.054476Z","last_seen":"2026-08-28T13:11:51.035292Z","times_seen":128,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_1.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.988Z","timestamp":1787922661988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_1.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-167a\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urtzTD1ibxoDuPIxrDgNRcJlgR9l1wjuj2APcb5DP4s%2B9S5Kra%2FkZLxRq6HRM0iY7F9J%2FhfrhsEiL2a%2BRDqMyG9YVZwlRSaSiMzau3ZI2UM5ONX97yQ7lmIB%2Fb1REA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fb72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5754,"size_decoded":5647,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"827be7c066c1c0ff48d4edcae9c08ae8","sha1":"cf2c4d66c3c1fd50d4762ce77179180a0d73758b","sha256":"f95c44c7f06279aa1c42f597e330381a88e2e3f456f32063787f9be45fc1bf8e","sha512":"41fd6284da1928cc22d595968a0f795dbb2681aa389469190010c429d35e8a4e423871b6c6db56c3129cb05d0c0d4cba7a7a5b1b8e73e96f618f35ebb910ea11","ssdeep":"96:LknmWq2imH2+x1NG0KGY+xqHZTHc+xLYTm8KUZjjrwrX98Ph9CTMP6L6CS9WU1bh:LknQ+3q+g5T8+SmS4N8PXCTM66CtUBxf","tlshash":"84c15d5ae6524d980b1eba88bdebe8075f7346c0d9e0a871fdd5c84328303bdcc498d6","first_seen":"2024-12-26T23:29:40.08734Z","last_seen":"2026-08-28T13:11:51.035913Z","times_seen":61,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_2.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.989Z","timestamp":1787922661989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_2.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-1c70\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxcP9iiDR11z1OBU0w1s06nwmqrMDZUWx8koAncX8MhAe6yiUCNo%2BjAIyXOUouyhQ1t%2B73paHBbLlPko%2FRvqDFdSf7OqGUic7ypT4GZCI95RuWVXn1UgCBoo%2B3Wnrg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fb82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7280,"size_decoded":8097,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"3bba6d7047f93b8079b6574966141522","sha1":"6315fa7577ca55f1ea3f1cbdbf1d8c92b88646ce","sha256":"45b87f2619cb785de2ea69042fbad87abecc7d73e6838f6e7e21bb7a4fc24dd9","sha512":"2460ada343603c0555e7015a28f8d72417166827be8e300a741f6557adc9e5aded4ef7d6294f234e777851afa3d39586a8bb61fe461727efda1a975b070b22f8","ssdeep":"96:fSo4ltvV8m5Zcw/IPgUW0Vc0BpNZJfqa6hnliuUxWNBgPe0pSipGDhreyCiK:fSo4rvqAZjiBzZJyaslNzNuPddkDhrV8","tlshash":"8ae1affd77d102087854606a154710309ad06f1beae4ffc689915b839a0b1fcad2e6a8","first_seen":"2025-02-12T08:38:06.871461Z","last_seen":"2026-08-28T13:11:51.037019Z","times_seen":127,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_6.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.995Z","timestamp":1787922661995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_6.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-26d4\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ww1csxRSIQzrhQ8dP0I42Lk1cJBUuY3eIX22nbYcTKV82L9CeKHJfW9wGqu%2FJ1sEIdj%2B64tWebO8EiXhmcKzgPwZF0cgNNCQv2U1M%2BAy8IqHxXcFEodriCYc07f7lg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fbc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9940,"size_decoded":10755,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4e6adb95ea32bce12b23d17e5c0bead","sha1":"00ced7819afc7267f587e68ad7dfe84c7eec7261","sha256":"b13acac1bd74d72c21facafcd3dbf6bb44dbb271b23a0df6a228eb28b7e337c9","sha512":"30f9dc0634ab618910888f5b34671d727e6e853facbee428b3e0177cc0dc3defe2f26dbaf96997e6bc351c241335da5f320d8f97f034269987cb2e99b4a1c838","ssdeep":"192:fS71Xz65HFwfkYKFafIGQA0GIQuuUa3b5hevzXLOU/8Ea4FM5OCZ:KNzUHFwlyafIGQAx7Ua3b5hevzX0EXaJ","tlshash":"2922a04ab28e49fdfc8a605c80b78d78764c2831f333e6110480f6a653941f756f3217","first_seen":"2024-12-26T23:29:40.06096Z","last_seen":"2026-08-28T13:11:51.037584Z","times_seen":125,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_13.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.000Z","timestamp":1787922662000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_13.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-242d\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtCIztOhUWUHAGKFYq5NgQRYrr0CAl97qCHXNyLUTty%2BVDeMfikW161TEWZEVgSUesXOO6sZ4vQo3RuMg2Tw5jBNOk2u7FrS2usl20dSNknItmgiwFRAmgZnjfq%2Bvg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d8fc02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9261,"size_decoded":10000,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGB, non-interlaced","md5":"473b877f35fd8e2c26b629a32bb0b733","sha1":"6922b11cf8e041bb57eef34c879a5c1f9807bb63","sha256":"1b1dc637506f0226348c5574de7d1b8031f0b12d9fe0144bfd625faf61ac9371","sha512":"93dc9f6425cc5b68adf2157db0052b9ba45c97561257bb0bfb006a23d161a80a9f66852c292fed76e9ae2a3d7772b5e3a88a659cd4d710708bd3199a2d27fadb","ssdeep":"192:USe5KQaDvRvCSLTDDQlJYJvIk+2+nWcb+0IUypGI0:Te5fUvRqSLXD3ZIk+2+nWcb+0tyoI0","tlshash":"7c129e79793f50989b63412519376196fa6becbcbec9f1843206c527fc9acd11aa004f","first_seen":"2025-02-12T08:38:06.880637Z","last_seen":"2026-08-28T13:11:51.038655Z","times_seen":32,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/type/t_second_coin_type","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.078Z","timestamp":1787922662078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/type/t_second_coin_type HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vO1pBIvYsJKFRkQr6GQTLiF0c7dFXn8h0OgVsE%2BWSaU0sl6vrrcEaEUcyRhkaCakcljGyC5AajfCva1iPxJgtYN%2FYRSHdJtZx0TtmSDX9T%2BJ1VhPMpFgFNLOFnEf9YoZhttA51uRaQ%3D%3D\"}]}\r\ncf-ray: a3238f3dfbe73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-a79f94b0.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:10:59.866Z","timestamp":1787922659866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-a79f94b0.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-7096f\"\r\nexpires: Sat, 29 Aug 2026 01:06:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 251\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtHJT1a7ZlLMo%2BfFhJQXQC9aAMkOnLH%2ByhKc33MXoG%2FYZ6hi81sEajH5JyKKjoHtCGBF3w5uulHPkF6Nnrlr%2BMHdl0DTQPAsI0gz8D27DWQXy5MN55D0tXBefha2dg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f302d532efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461167,"size_decoded":104964,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"04102e196c7427f77282fbecf685e055","sha1":"908b3b5a6b2c8dfdf7ded20cda192e4f39103b2d","sha256":"a79f94b07ba59553bfce15f52814444252aeb96546b888994b1880c98aa1225f","sha512":"e5c6de0e36fa234ca162627ba79dee814953ad9a8d6f095576794c2f7c909adac7244c70fcd88566485cceefaee876b2d0545c4a772280ce88f95bde913c3a60","ssdeep":"12288:Rnuv10zdZ8w71ZACkFDS3vyf58rBeV05TN9IM:8v10zdZ8w71ZACkFDS3vyf58rBeV05TX","tlshash":"13a41eade68801f86b27dd66d7e967cca13cf671c8815d94f10b500d8fc3bf51292a2a","first_seen":"2026-07-18T21:05:42.723672Z","last_seen":"2026-08-28T13:11:51.039737Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getAllSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.380Z","timestamp":1787922660380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qs2VZ7LdCgFWU0YH0m25aCuF9%2FWILmxeQBsp6E2jBPDiQs9qqh4ja3xkkhpdvd3rnf01yrRT1%2FmchTfpYlkoFCbTTVeNQpO%2Bdt0PpMRybLya0DK92T9Oxp6nUvGf5%2Fal0eTSKR7uyw%3D%3D\"}]}\r\ncf-ray: a3238f337a7d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":937,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.07d035e9aace54e04893ffaabb45b53cc.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.016Z","timestamp":1787922662016,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.07d035e9aace54e04893ffaabb45b53cc.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getTeam","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.080Z","timestamp":1787922662080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Htmich%2Fso3%2BcUJl23E5xkh%2BmQFjwU9xCjHVwuN2NWRv6idU%2BkYZnTQvSPoCGrIvl11sAv2TqCGlVxXL6p6fiUrQHLP6hgMMNNI8CjqCbYVzzx9d22YDv39Xf6kZkGlDR9Am91uViFA%3D%3D\"}]}\r\ncf-ray: a3238f3e0be93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":946,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/type/defi_activity_type","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.085Z","timestamp":1787922662085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbSIxPjnLzjIZVanAkCqlE3cKtkMke%2BK5fiOroLkdsLqqwvT4xSfISifS991qrGN4iDl3WnMaK4w4j%2FLwEmBIB034bO05uN%2BEK8CdENJOrcEB2QQbhoPz2VutDlMxH3RtcUw4epK4w%3D%3D\"}]}\r\ncf-ray: a3238f3e0bed3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/index-fUVOazKT.css","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.573Z","timestamp":1787922662573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/index-fUVOazKT.css HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-2f6eb\"\r\nexpires: Sat, 29 Aug 2026 01:06:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pi%2BDo%2FoX8uE3GIoItqgRtf%2BqwaJRFT04bpqjpv%2FUkIsyfJIxZSN%2BJObFLaMl7GxJGzXubZnajiB3NwaSHAhWoxnqq5a79QXNsZX50OnwlF%2BqlSAsWuygSTjk0Pk4rzPSpA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f41184d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194283,"size_decoded":38177,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f9c5cd39c47ac5392dce7ac0c98f778","sha1":"dace5effa56df74c4f16fff41d92e8e3ab35d6d0","sha256":"0817cff9fd26c1c6d60b892fcf787df575ab75396e0c7141a1d96437657e6375","sha512":"14f47450f7b85e50c804356aaf114ab952673af7a3cb00a4adcff0a4def69fdbb1105ea5f84516484c99a5587bdd744894d5c63d75783fb56294018438396b30","ssdeep":"3072:kKOExgAtraQe7jdCh2CfvkauNgDXPt9giyYam4okKv7b46VZ36:k/ExgAtraQe7jdCh2CfvkauNgDt9+Qkj","tlshash":"18140cbde28804e53b36cca6d374778e6039f6b2c9951d95f91b801dafc37a106c1a78","first_seen":"2026-05-15T17:15:24.725094Z","last_seen":"2026-08-28T13:11:51.041052Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/index-DeunBlyi.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.825Z","timestamp":1787922662825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //js/index-DeunBlyi.js HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-8ccb\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 247\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D7%2FdkqkbcsTnYZ2Lll2aiHZN5nVTHjhgedAXpKiBAhbNNs1ULDwdYrBEVODLJmVnOFrRgguoBlxL4bjzwYWRstWGqU3375WDAj2TBa5pkLsiH%2FrqsbBmoHsrsc1VKdg9Sw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f42a8b42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36043,"size_decoded":16512,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36026)","md5":"44dac057176c4ad79bfda85e4336e656","sha1":"8990d0253cd64247a28c08b2b5ad563961548d02","sha256":"0ae9b9f1ec0faa51d95151cafd85a4824149cc0620bead2899ae63eaad861295","sha512":"698586bf1a5aa26a78fc00980104059e0a00419657970590693e5f23d89de579b14968b89ee29d856d45f7cefb4484eccac6ab96cdebd04338fbf3c61e0cc996","ssdeep":"768:KrQ8sElJTLHEHYXIH1LR5Tynv/Q/LoOmBzfAfKvrQtMK4qeV:IsElJTLHEHYXIVLRBkHQ/wVvK6","tlshash":"2bf22a3d42129bbf6fb39625b8567114ee581f9fdb3489adfbf9b010fd808700596228","first_seen":"2026-06-01T14:33:26.200578Z","last_seen":"2026-08-28T13:11:51.041661Z","times_seen":13,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/vendor-3d4b162e.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:10:59.861Z","timestamp":1787922659861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/vendor-3d4b162e.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-f059e\"\r\nexpires: Sat, 29 Aug 2026 01:06:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 250\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HaOZOUXkFUhsRFF0nk3q8%2FJMXwp3oy%2BX2XxdT6m6pZ%2Fa08uK0%2FPDC9g4JIpDtQ6O5nnEmQzUTKC1dnfhKQdAsZqu8fpDr1jeM5%2BTNlkH01FMGlC7p0fOkAMQ53dkAg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f302d502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984478,"size_decoded":358244,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d2a595b3bf7c1a86194b9250b0eda2a3","sha1":"b2fd1684f04a196d68b701201781a9d216ac61b9","sha256":"e87610e8f3085bc31dc3819780b26bf8935db041a1e693a5cd42aff496b3eee0","sha512":"b83e53a11d8a26a6811abf57a67c5f6152a302bc32c42bfcdce0f007ae93f790fd53ec219b4aca806845b93ff8b48eab0136bcd633fecf8a5e2adff9f90f610b","ssdeep":"24576:XXLIWxFw/LaOt1I+J5Zt67Zt6vODba2Gs88As7nW09ND:XXLIWxFw/ZI+J5Zt67Zt6vODrn8c7nWY","tlshash":"3b2529c57292f06547ab24e240bb0006f3396e59740d84a8f16dd8eb7d79d89a2b7f3c","first_seen":"2026-08-26T10:43:11.033969Z","last_seen":"2026-08-28T13:11:51.042868Z","times_seen":8,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-bc011be9.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.367Z","timestamp":1787922660367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpScgFU8X1iXt8iyrEkuwSC5H5fo5fOwk6cFgjjaakUOVBlWjAJkPxMiJw7PmT9229MSmm7ixz%2BfUWFQkr0eP3qZthZAlDiftPgtY831FIFLL6JhZPOjm3%2FzhruvFw%3D%3D\"}]}\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 249\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a69608b-18d\"\r\ncf-ray: a3238f334e0b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":959,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-28T20:20:52.697986Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_12.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.001Z","timestamp":1787922662001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_12.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-109d\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7tMgXIVqb4ikWDAbQteIUZpi9gw5PLD5lKNOs8k914ifRL5iTmqvP15c9KbIb75gH83q9zp7HSQ0Jk2%2Blv%2Bdw91G9g8DGEyjZARh%2BtVLQhTogANVn3%2BujxkNZ%2BbUw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d8fc12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4253,"size_decoded":4858,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"5474bc1fd289447c043d29c1673bf0c1","sha1":"e0ff0e5a0e0615073489086a250b95a6c5ef2b20","sha256":"852c2395a5bc13757059527725920a3b673a263fa22a9ac32ddcb1f6e30114d2","sha512":"759d7e7fc67f08a7200822def23b10d602550edbb0434dae630ecbf9e601b1059544b59780db43b78840db1bdac6e3faddea9672da1de7b7ac5ed6b52e4b9a70","ssdeep":"96:Z7SLjEvDoo0doJP8xJTpH+mNdDdZPm9F8XZdexpv1AKHuh2qwUe3t:RSforzB8xJTpHBpZOncs9HFUc","tlshash":"d0916d523198872bd230d654ac36be00b5fb1f6ba194e41ddad634a249b27f7026b413","first_seen":"2025-02-12T08:38:06.879531Z","last_seen":"2026-08-28T13:11:51.044136Z","times_seen":32,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/test-banner-BQxVGhys.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.089Z","timestamp":1787922663089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/test-banner-BQxVGhys.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-189055\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fskxu0%2FJExDg3QftLzTHHg4eZRzbr8g1Aco9AYXWMRj97ICcDZkWSpyP0YUiYobJ%2BoiFkov6WKYOLMX%2Fj9DHcOe5q6N6%2FNsmkm1PmCGlXb%2Fmk1ICo2vGQgcYGsyFEJgaMw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459002efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1609813,"size_decoded":1544487,"mime_type":"image/png","magic":"PNG image data, 5760 x 1410, 8-bit/color RGBA, non-interlaced","md5":"068ffefed26b5a72168f158658b9a2f4","sha1":"2ce2db9abcb1feedddd98d5b53ad607a5b0df748","sha256":"9bbbecbbbdaa2afa4d2412b9208bc080d3c13597cb38dc80069dfea2317a14e9","sha512":"c741fff5018559eab2f1e2a738ede90b3ee6c15fefedbcf6d3126190fee129e61bf8a03eab11bd44aa1f904fa0bc0d99d152a1cfcc08b0cd811c295fd5cf3b2c","ssdeep":"24576:DcSET7hb2PQJj5R158yzygpkVNYCtmD8zm95p9pi:QDlb2PQJj5R15rXtb8zm95Zi","tlshash":"5b2523ee5475dd14fcbb09b867a33f37a287109184f8c265d62ab09e748bed818c54cb","first_seen":"2025-09-04T00:18:50.351314Z","last_seen":"2026-08-28T13:11:51.044735Z","times_seen":72,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/notice/GetBanner/2","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.122Z","timestamp":1787922663122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"GET /api/notice/GetBanner/2 HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r93de%2F5DoQG8wlVdzuLnNVDWCpnp6OQQmt3Ghs%2FwJ4Hwf4wzCs2s8fVvganWJnEwqamuRT9JGEtu61hpaZ9j3gsPDvOSWLGUbGzt4xPMaUby%2F7N1CNR2Sak7UhVi1qHx7xuQ57fzoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f462d253181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":1081,"mime_type":"application/json","magic":"JSON text data","md5":"6882daa178c1dc15640d4290e1f71368","sha1":"077e91cddb437af52cef6e1ce14067d08def40fb","sha256":"aa535dbab8dcfd3879b3479e76d7a942ae000993efd220611700f141b9405aae","sha512":"4c4c77158a1c3b8094321db719b5f9300901abb47227a8f4012685f9dec139b0faa0f49fc4af556bdc73ed9707b3d10a037deb4f9746689c793a57b2d64e4692","ssdeep":"","tlshash":"3ce02663ab0890b088b14ecce97b225df0fd3c7f569042c2ac218884ba89ff794019cd","first_seen":"2025-09-04T00:18:50.299963Z","last_seen":"2026-08-28T13:11:51.045253Z","times_seen":33,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.06f70e855e507453db74709d8f3fc8451.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:06.633Z","timestamp":1787922666633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.06f70e855e507453db74709d8f3fc8451.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 437898\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188EACE63A83339420AB5\r\nAccept-Ranges: bytes\r\nETag: \"61A1EB6B91FEF987F87A82431A97F32A\"\r\nLast-Modified: Tue, 11 Mar 2025 14:24:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7433871154220718262\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: YaHra5H++Yf4eoJDGpfzKg==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":437898,"size_decoded":438474,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1980x1318, components 3","md5":"61a1eb6b91fef987f87a82431a97f32a","sha1":"250606929f84d1920041751c30d14e850b726984","sha256":"576931b330dda52610362489dd790baa72fa15cee647e3c91f11f8a2c6ac70c0","sha512":"1a5617a2a496c60927e92dc1702ca93c375ff6bb74ef9ac49422854bc56ba0eb4b5c1196774f6900f0132ea2079c82c51618f386a4cb6cec92ae5ceb89e0e441","ssdeep":"6144:86/BLL9ck/rc22A31IfRf886D0+wfrn4ildqVtLaF1SoiKEPBt+74sC8hOZW3bH7://3cU31IfRU86D0lrFvhnEP/sp9HQY","tlshash":"79942324fdc1a597d1275ff7a85a39e94c3643d85a8002db78ccdf022b971ec66af211","first_seen":"2025-09-04T00:18:50.346046Z","last_seen":"2026-08-28T13:11:51.045795Z","times_seen":62,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_11.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.003Z","timestamp":1787922662003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_11.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-a88\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TaQ8WB8Cmes55PITfdYNrVW52EXHt7XP6bHsRcT%2FlvF65sueXYs5eiWweMiY0p6fr6vLldvpYEsaal3Yuwiilpt69O%2BB%2B0kWUc1MfN0zuydMHfjuA5L%2BSrxAYGst5g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d8fc42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2696,"size_decoded":2979,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"95d0adf27d154a499330a867ef2ece18","sha1":"6e461ca1b6570bcda6e20947aa34041e175ecc0c","sha256":"19c67ff8f558894b85eba58d2b91344bf324275905acda2f4eb3d40fd264d527","sha512":"57cc1a2788e446fea667697b4d5271b4dea3dcb1a528d7cab951d1301b85f9d3a670a5c576e9d13737013420d17eb79eec10117cb15c5d11b91367f549671038","ssdeep":"","tlshash":"1c51e7ce1b3a9b1e9cd97453a8d1313ca0560e8f0a28cc0cf5ee6584d81c6a02f50177","first_seen":"2025-02-12T08:38:06.862252Z","last_seen":"2026-08-28T13:11:51.046285Z","times_seen":32,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/fonts/DINOT-Medium.otf","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.050Z","timestamp":1787922662050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kta.capital/assets/index-a79f94b0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\netag: \"6a696052-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 248\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KujsYkEEYZEF77%2BS9jTznj9n3BBlx7nDbd2DYmW2J7wppjA%2FppE0NEUPsN98zEUzNRm6DMfW%2BC%2BnKZOeSwNFiKL6uIoDH1ISpnhsgSSA0KuRXHq5ZUUuekgawbTj%2BQ%3D%3D\"}]}\r\ncf-ray: a3238f3ddfd32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":73860,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-28T20:22:39.981947Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getWhitePaperSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.059Z","timestamp":1787922662059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZ7s9t1DbF4sbfJd3AqSjYSrZU4v74Ew6wNgeAtyaJ%2F7qAAKyFvOx4q%2B4%2FjkwRspB8UDPfwkFvl8NJCCSEHdmb4J8vdNydrQN1qvwgG8ZcpEy5AzolKmhBb0QyFMKdRQZRUSuThNag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f3f4c173181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251,"size_decoded":1061,"mime_type":"application/json","magic":"JSON text data","md5":"807a3da1bef70baa577f595c8e96c5b2","sha1":"b160a29c5c130f8ff29d9af93a355b16d83cfbde","sha256":"ac1b31128629ff8270da660165d708c5466873281a26fabcdadfc9d66ee351f1","sha512":"1cc652dbdd0d6749aa432dedd46c0f881ac2f1b486b4937997c627907ecb709fed1155b8f309a1c3e8d9fe6370670454baee1c54a6f8d269fcbae3d622d36ed2","ssdeep":"","tlshash":"23d02b27750990a045e02bccd52a1a0df09834bf2620754064614988aa5cefad40e8cd","first_seen":"2026-03-16T14:21:50.072089Z","last_seen":"2026-08-28T13:11:51.047896Z","times_seen":20,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_12-C1QilreQ.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.168Z","timestamp":1787922663168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_12-C1QilreQ.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1298\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GTU%2BAxYw3XhX%2BLXh6slIGa6bbe9UHVJwWmuWZIaj%2FYbd6Ahmn8MMQBqiu%2FcSBCw6PVvq%2F6mBHr3gTL%2F0K%2Bcyuqs1w2h6dLU%2FAVp8tQNTiUnImVLCHZloEucTw6aTjtf%2Bw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44c9282efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4760,"size_decoded":4875,"mime_type":"image/png","magic":"PNG image data, 300 x 87, 8-bit colormap, non-interlaced","md5":"96005bed58ee3407bddafa6c12707734","sha1":"c3220fb9384f290f2487bcca0acf38cb9dd90964","sha256":"53a0ff4b5ede57448da0e58c94ade19ef52a993015f4d06c556e5e1731c7edb8","sha512":"94d4d49ffaff9847318b6bdf7661dcabc080eee8fa4a033cb9fe7bccc2fa2235992f8cd3f42cb80e1e9d3520623d698183277577a7148739dbd2a3fd864e3eba","ssdeep":"96:z+5+dVokXu1S0zHAtRB73Hne4QDCvx65yOvOBkYK1+iL:z+5m+EoKNHne36x4yOkkJPL","tlshash":"bea16d969d8e8028e8e238b872d5f4edcd340134609bf20ab375ecb60cb50925d2fe42","first_seen":"2025-09-04T00:18:50.316456Z","last_seen":"2026-08-28T13:11:51.048529Z","times_seen":108,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.744Z","timestamp":1787922664744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4 HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=6750208-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 48864\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E97CD23C3335B8DBFB\r\nContent-Range: bytes 6750208-6799071/6799072\r\nAccept-Ranges: bytes\r\nETag: \"BA426146606C1037C96FAD76A9B0112C\"\r\nLast-Modified: Sun, 13 Apr 2025 14:52:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15547162464997827607\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48864,"size_decoded":49460,"mime_type":"image/jpeg","magic":"data","md5":"6883aa6cd86f79ffce787a8d14191659","sha1":"cea7b91155d1dd3321736306e661d0e2f2986bba","sha256":"d5b36311fc9060e9be1870a550323e9b50a74c0a1882357dd1f01d4bf1b77032","sha512":"f7c0fd59403897ac3dfe2abb83e07a6d55d344273e2c3e0195d1020de6998e616f69bd1e7ec51da7aecbf15f4733498c057172157d41a36ef57284e2b2cd77ba","ssdeep":"768:KKR/eRuTLmvm4U9WZhOBWHjESCuPhYlAhZ1nniypwnrY1KqxhmQzRSr:FR/aSU3hS8jESCuXvun8IEh4r","tlshash":"1923d6f1a375811bdb5217fe97d11b2435a0d464c2b6f3ab44b7922b9cb26a8cb035c3","first_seen":"2026-03-16T14:21:50.144271Z","last_seen":"2026-08-28T13:11:51.049183Z","times_seen":25,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":411,"dns":0,"connect":0,"send":0,"wait":283,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:05.473Z","timestamp":1787922665473,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4 HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=32768-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Frame%201.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.980Z","timestamp":1787922661980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Frame%201.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-129c\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtMnHK93eN0nHIHQjJIwsKobKAVD3LhytUyvsQtoNdjLNilcxKd3hjZ%2BYwxz6JbslldDe%2FPz9RD6Ylyp8JwG6WHMGVwbRDRtQsQAvVj7MPYY1MLwc3xyic%2BMbEnjfA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fab2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":4868,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"8d212c8ea1591dfa2ba2794f71335ad5","sha1":"d4a46b85989a0fc68543d47374d7fb23b9533649","sha256":"db3891a7c41e37fcb3a5e36143a9c032486bdb2fa3baf924407a47b6a302e276","sha512":"ff704746c4dfe41083ec85ae9f9b807d3dc784b4055bd2ec149c4f8846966b55ee358218746f767e28c7778cdeadab955f976f4bc3c1e022320c7b0df88e34af","ssdeep":"96:Zj/zFb6cLBHNRnCWjwKWsEUW18YYbAcUsFXk8ZpRw:N4cLBtVCr9kAcpFDvy","tlshash":"74a18d25b470107e48e2d366dfae5cc200c4401e4c662fabd28a81bce28cb996473037","first_seen":"2024-12-26T23:29:40.085743Z","last_seen":"2026-08-28T13:11:51.032082Z","times_seen":172,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Frame%203.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.982Z","timestamp":1787922661982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Frame%203.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-d58\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjpAZcb1TRyC87ZwExZtVU7O3AkwNETkDm6YOd9zCM47Kg3a8xIanCA%2BUDaunouSS8GqCw1s9rE3pioyphs8MW6QpReP0GpLegjZ32AH8GZF1YDqxdeZyUxaryFNkg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fb22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3416,"size_decoded":3578,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"d420e44f93e80595584ffcd6d4ec4bda","sha1":"6a352eee58d8d6ef3a91821e24106534c963708c","sha256":"c92d54c438dfbe4d2324ea3359a1e70069095fbbc33ae492ca5709a20cd85918","sha512":"c2179b4109e1b2d227b5f34245e044cc5cfdb77e3b8d15445471b17176d777ae1b1775dfcdc8115b32af4831f96cf72538788ac83139fc051f4a9783e5205789","ssdeep":"","tlshash":"ba615c79e3c8b0ece11c7bf15d1430b9dec914a4b637a5c372798d1a4061d1bdaca382","first_seen":"2024-12-26T23:29:40.063484Z","last_seen":"2026-08-28T13:11:51.049709Z","times_seen":33,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getAllSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.823Z","timestamp":1787922662823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WzyDV%2BFZrKvHsE%2F9RgM%2Bq66PLq7vyzr8c3pjc2JXVUCd%2BkBItf5A6VwN9nE2uZnIFNVfnAbibH4fuOjQk%2F%2B8FxNwjrF1cmBk3ndJ7yKyUN04H4Q52QCeaszkPAWssesjtWOpXtiakw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f43ecdf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39999,"size_decoded":11371,"mime_type":"application/json","magic":"JSON text data","md5":"85c9e2389d60293c54b84dd0d4a9ee8a","sha1":"ec7b4b448448e134219fbf45aaf40808f5e606f0","sha256":"d876a07c47cf87051025e4467072f4c565172b55dfd50d5e399fbf534b484ed1","sha512":"1d7dc40c7a65ad5e9a553f3343509f07e79254c03af0a914b80c6ea3bc3ed5484f10458ccf444fb13c9ea8c98caaa6ea849fc5ddf259b7b38b54a41567e2ef7e","ssdeep":"384:DhuS0abVlZozqDOJlDYN3HMTfb2dnCEDU07q:DhyahlZozjOZ52","tlshash":"e803841ab0a8fcbdc7da98c600773a6b35ac387beed55d54e0cd4e4c47e9471860b60a","first_seen":"2026-08-26T10:43:10.981531Z","last_seen":"2026-08-28T13:11:51.050256Z","times_seen":6,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/PdfViewer-jwhQnCfx.css","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.831Z","timestamp":1787922662831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/PdfViewer-jwhQnCfx.css HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mRlFjqcvYEVCHHe%2BxZRS8TeLPwHV0Ijk3mvOTH87787BuzM6Baj07gjMXxLggyyjqoQLPNrukHORrL6KuWy5uWfU0roOkrnspjkkBH5Gahmx5U4%2B%2FHyrcQKt1r62SGqpA%3D%3D\"}]}\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 247\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a053cf6-5f\"\r\ncf-ray: a3238f42b8ba2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":856,"mime_type":"text/css","magic":"ASCII text","md5":"c439a7310a8063562461d46b3035ad78","sha1":"67c60ebf7e20dddcf9853fc50ca4460e3fd25462","sha256":"4b9e3742eed481eea512c3004a6b6811b9c6b449a598ca409aa3ee49454d7fa0","sha512":"0f608bda78d0477835af6d2b57c18ac810c79e09d46f121908b4e424cae43815947889ac5a606ee259373551cc870f520721555cc5e4c9dd2bb24d5934d4cd10","ssdeep":"","tlshash":"e7b01223f2c4a04c15111000a005337c193c410893010cf04917b735023a283a621041","first_seen":"2025-12-01T22:48:41.440533Z","last_seen":"2026-08-28T13:11:51.050784Z","times_seen":40,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0a561ba465fde4856bb30a1a0bc0e009c.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.056Z","timestamp":1787922664056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a561ba465fde4856bb30a1a0bc0e009c.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 113562\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E8AB4B813137E1DAF4\r\nAccept-Ranges: bytes\r\nETag: \"BE6B51B09ACD0044D9587FDD9A2E42BE\"\r\nLast-Modified: Tue, 15 Apr 2025 17:58:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13764507527797607285\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vmtRsJrNAETZWH/dmi5Cvg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":113562,"size_decoded":114139,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1042x1350, components 3","md5":"be6b51b09acd0044d9587fdd9a2e42be","sha1":"aca0b9897f5913b7786e265f3ccc5d5c456e47fa","sha256":"2c152e0b1c41114633965c19d28f28ebb9bd1d4a54fdfd3f4f7e52f7f79c749d","sha512":"0ceefbae085cc08479ec0811e11fbbde7c2f77df3dad009356c39087a7f978a23766076122cb668771ff4ca83158695ec5cc251aa055464452507824962906e4","ssdeep":"3072:o4dvCjmfR9Rr6q7cZL5Z/dOpefYd37gPaV2b12:/1Jp6q7cZVIYw","tlshash":"1cb31263159e00e7e468a5ff15abd26ecdbb5c01bf15a22a0fdc8ceded3258434164b2","first_seen":"2026-03-16T14:21:50.058642Z","last_seen":"2026-08-28T13:11:51.051375Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1395,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":281,"receive":303,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0050b93b5545a423898acf983a68981ff.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.964Z","timestamp":1787922661964,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0050b93b5545a423898acf983a68981ff.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/gbpusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.971Z","timestamp":1787922661971,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/forex/gbpusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.004d392a61f4c488f8b5e9515ab077fae.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.007Z","timestamp":1787922662007,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.004d392a61f4c488f8b5e9515ab077fae.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/capabilities-bg-Dwew3lpW.svg","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.096Z","timestamp":1787922663096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/capabilities-bg-Dwew3lpW.svg HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-70027\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOb7diVpdacGezFjhPqH9bC38cZH%2FO6rglLzK5Ls6wI4OJc1nvzWlEy94c2CjD10Kj%2BXYo%2BCUbOvjNkNDEDUGB0nLupY3sjsQll9qgjKx0RpYBc%2BYi4fANJtRxAH0QJbFw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459052efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458791,"size_decoded":350605,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d350326b7f8b8abbee3fcea058c7dfba","sha1":"257aa76de05ee37f42bf20da73bf6fb7016f0d20","sha256":"c17a5adeea08cbe690d9a0aaecabfd265b55e29d69890bb816d0c72cad1cfa0a","sha512":"abec84d75420c9b294aabfe14635c6239d16a984219c2951d66a859fcc7e6054e0ca07b73f03cee801609f787d5f1e67e1d866860d858ba695f8a9a16557f75f","ssdeep":"6144:Q8y2HtFP8Opu+2JaO8bTLvXXLAo2XULHs22l1OkbGKA9UadGwLDrSOO2LyQpH/rw:+2HtFP8OILDMnv32kLsr1gTSOOkrBlU","tlshash":"c9a422e1b1e87fdb69f4a65d449d4c936c2409c4a118d0c9df9a9fb603daa306c0fd3a","first_seen":"2025-08-30T18:06:20.953547Z","last_seen":"2026-08-28T13:11:51.052261Z","times_seen":55,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Frame%204-qWkfDJjf.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.130Z","timestamp":1787922663130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Frame%204-qWkfDJjf.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-20dd\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bd8kgigcLSYSJJ2zn8dKVW0EfoXaUhTYzc0z7vMBoAx2E%2FhiY4Y7k60DHyoTTBhecZyRLlvRsX1xRE81SAt7nUZDKIh8Kz66TvPjcS5xrtKkhmirLC1Z1WZ13xvvwp3sww%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4499162efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8413,"size_decoded":9228,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"264df1bab5915017aa44a0e0b8743667","sha1":"bd97c7bd5c839e29446cded395805af0a08f9b8e","sha256":"841a45a62324a18518fb30f38f1c097827d6b9585c35dbd9856f94755bb15e0e","sha512":"483aa21467a4ae27ed9f2ac5a7b705e8483c6926a2c43ce8d116943faab02f1ed9943fbbb72926edd5d1a32ecca8ef00acee2e7b4c37714730ef88ebbe53af2d","ssdeep":"192:caJgBbRcbRgI/EZ+ZsoUSRZnVHdtda+gv6ah2:xgBbwxcKVdNdtb66I2","tlshash":"7802af77d5c6848c122ce2a7eb287950f21448011175d26cf6d81ed7e1bb93be937b0b","first_seen":"2024-12-26T23:29:40.054476Z","last_seen":"2026-08-28T13:11:51.035292Z","times_seen":128,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.05917b0d5d55a47a7ac278cb58509e8c9.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.099Z","timestamp":1787922664099,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.05917b0d5d55a47a7ac278cb58509e8c9.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 81979\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E9AB4B813137F2DCF4\r\nAccept-Ranges: bytes\r\nETag: \"8FB2ABE6BDAB7035349FD7DAD64F04F8\"\r\nLast-Modified: Wed, 16 Apr 2025 10:05:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13880447912329519715\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: j7Kr5r2rcDU0n9fa1k8E+A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":81979,"size_decoded":82555,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x547, components 3","md5":"8fb2abe6bdab7035349fd7dad64f04f8","sha1":"87b792e41cf9495b1b5329d80e5f294cfa636088","sha256":"52ffe321b6f635630c21729da2ef3db982b8814f9df9c28e74e29b8d731e636f","sha512":"2121d2a8e57c6fc3f65d3439deb270f9b8fe2a45a5fb694019a30c4b3b65c59f7933b7d689c1ea87c2b6b8d9a89324b2121239d06e327b1f3854cb7bd88e6b0c","ssdeep":"1536:gnS23oGf7+xbFdNGD+rA7cFX5qax4NidyyRRHjJlt48ze6yjTJFXmkgL6uomE:8S23RWbFL6pji3XfL6JLJuS","tlshash":"c383121ff6b43f87c582a92c50d77b3181bf7d25685b0555261efe0a336ce48ac883a5","first_seen":"2026-03-16T14:21:50.120696Z","last_seen":"2026-08-28T13:11:51.053318Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":1351,"dns":0,"connect":0,"send":0,"wait":285,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-fef1c564.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:10:59.859Z","timestamp":1787922659859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-fef1c564.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-2ca05\"\r\nexpires: Sat, 29 Aug 2026 01:06:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 251\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpmsGIk9wrqaE53X5et%2B3ZLoOQFkDmrKEF0osR53XapL9EjpTzrfG%2B%2FD%2FFkIYWfNIFKCHkJb2DpJ%2F5AhnChprQQX0wDGD8S2Qkh3E9qcS4kmra%2BQ4TF%2BPR5rqAYB1g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f302d472efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182789,"size_decoded":58278,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"06f8d33d51180b68b75a47e0d637a93c","sha1":"3ad83294f948c3ec1d854b56db06b0dc55fc183d","sha256":"b287a3e9b9a8c304e0d72800d79f0abc92410ef32931639c3a7d93ac0532286f","sha512":"f2776d9150ad0afa7f8826916d4a4a40ad2c9ff85e949736906c4a900ceec6e3fb8e8c7a95477f5c0e8bfd6abb56fb48b05cbfd4d20dcbd6dbfcec368e1ca91e","ssdeep":"3072:uZRyZf30RnjyBRy9Gpj4rf0HYOo7Ng4aoErThbsDn65sfuguNF8PCB:uZRyu43pj4r8HYV7qv5rThban65+6N5B","tlshash":"1a047e4e66050fbf5ffe084c655a055021093f82a74cc893b2bd9e1a37f7c94a7aa72d","first_seen":"2026-08-26T10:43:11.029645Z","last_seen":"2026-08-28T13:11:51.054026Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/user/LoginLog","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.354Z","timestamp":1787922660354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/user/LoginLog HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KY%2BmbjthNjPHIVi5YhHt5xfj9gctYnIyYIqtHD2r6JmH5l20YE1Bptb9%2B1qVJLcYMqdKtwL0jM7GfN0NSXeVbV7xaiDvnO72t8VB7z51t85MVpkGIZB3zkviAppWW2W%2BcjtCctnyWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f351ab73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":975,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3d2e5fb53b8d5de1a79b1d919ff4955c","sha1":"a31977ae114dc5f40d8d3dcbf0bf8bdf872e4281","sha256":"6598c6c1e1c5ac9f379438c2fbc4f2846bb117d2b8820633cc50f6c213508b69","sha512":"bbfa0b4b980346bbd630660f20ea5f1b201cd397048713fcc8987cc032a8aa4d89320b6f26216efccaea32b33471c4eb58124615afc5655bbc90d2fe0fc270a3","ssdeep":"","tlshash":"9090025a94189582255701454156060455f4508d27545a09fe5e9274510466a6583444","first_seen":"2025-07-19T00:50:04.649347Z","last_seen":"2026-08-28T13:11:51.054649Z","times_seen":34,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/Sparkline-fc5ba93c.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.376Z","timestamp":1787922660376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/Sparkline-fc5ba93c.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3kL4GXVRXXV0pge2ZUWJUPFjVnFM%2BX3MjOWXjJadgMOgBcqUPwN2GPorMMsLdI0Bsiq0ZP1w3owJjVedkRxm0f57iNOc6t3d2W2dI3RRLm4pNiQzN9PQGwqTNXodA%3D%3D\"}]}\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 249\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a69608b-6b\"\r\ncf-ray: a3238f335e142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107,"size_decoded":864,"mime_type":"text/css","magic":"ASCII text","md5":"bf7c86c59f3e438384c2ad4be8dd0f09","sha1":"d0fb9993fb0afb3f88c3b7ed08541e2f42ea7836","sha256":"fc5ba93c24759a9e83f92a25a748d6122056df61faf0bf5d6fbe0b779aa9ae60","sha512":"04569a8a29762dc8038b8f0d16d8a9ca9c161d86e5ecb1b9e175a598b204f211b979a9045411d618a45a37fe9df2a50ceb2277a250276a3e0eab69b086a55844","ssdeep":"","tlshash":"d1b0122802003558d3224310b2f3178d9738cf8127934c4f950a7e2368513af1822dcc","first_seen":"2024-12-26T23:29:40.001098Z","last_seen":"2026-08-28T13:11:51.05564Z","times_seen":61,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getCoinSecondList","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.381Z","timestamp":1787922660381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hc8eNkVmURy6pRRvHNkWX%2BaKc1ZhQNN%2B%2B78iGuZX5UUqMkkvzK1SGp52tu8awGZ6x7bz3KnrI91zdSJEFH94JkHJTooDu7ziAmtV7FKAbW0gKzcUuYAcCxtDuWtseorwup%2F6kWa6w%3D%3D\"}]}\r\ncf-ray: a3238f337a7e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":937,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/user/LoginLog","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.383Z","timestamp":1787922660383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/user/LoginLog HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKXsfqr65JW%2F9ZqA9a8Mb3AVcUBuxnSGs8Ug0lngWAp8cSBvu3CF%2FbhjH4uqWuWMYPNagbKMYvbtXNcS8boM9%2FZyI9KHHcc6f68PI%2F4UeXH8KP4qVi78JwItoP%2B8OdbHRLzM5dSKAA%3D%3D\"}]}\r\ncf-ray: a3238f337a7f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/svg/light/language.svg","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.948Z","timestamp":1787922661948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/svg/light/language.svg HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-43f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FQgkYyuaRAOSi12qgpX434rp2QWGeumv5QS2y48P2yYUca56o1L9iJOMXqDQ42pjN1jk8HUhwGVMTezVdubLwLpueI3nL4WW8AeFOsmiTcf1PvfHh%2FXSviGB9BWBg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d2f9b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1087,"size_decoded":1386,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04bcd0b24084a7d5ae00b1ac725d9925","sha1":"9f15c9a5ef2439938b835ed2dae979b327c18f72","sha256":"6bcca21bd398db18012167c500240f11aa3b74640d14b4f62398a8464bfef822","sha512":"805a8d2185bae9736471915bf7c13c15b1b1c49a277548937b383e460a9da0b3828c66c4819dc7822070b3393cdb0b81202fd2896939b8c9acc905214807fefb","ssdeep":"","tlshash":"e811ad960399d3759f8892295ce04846f385fca582f0e284ee475557e00d4d4b66c7aa","first_seen":"2025-07-19T00:50:04.629518Z","last_seen":"2026-08-28T13:11:51.056201Z","times_seen":20,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_2-DlfMR8Iv.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.134Z","timestamp":1787922663134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_2-DlfMR8Iv.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1c70\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcmtw0O5oEWPfBam%2FzmH6R8Z3fYFfzfrv%2FDZzushtIV%2BRGZROaEDo%2BzqMWGpxSczZFFGl1ZGIc4QoPkjCpgS%2BYtCTjy1Ehb4mrU4Zn0WWYKciVgzPMpmErtHQ1yexMqMfA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4499192efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7280,"size_decoded":8103,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"3bba6d7047f93b8079b6574966141522","sha1":"6315fa7577ca55f1ea3f1cbdbf1d8c92b88646ce","sha256":"45b87f2619cb785de2ea69042fbad87abecc7d73e6838f6e7e21bb7a4fc24dd9","sha512":"2460ada343603c0555e7015a28f8d72417166827be8e300a741f6557adc9e5aded4ef7d6294f234e777851afa3d39586a8bb61fe461727efda1a975b070b22f8","ssdeep":"96:fSo4ltvV8m5Zcw/IPgUW0Vc0BpNZJfqa6hnliuUxWNBgPe0pSipGDhreyCiK:fSo4rvqAZjiBzZJyaslNzNuPddkDhrV8","tlshash":"8ae1affd77d102087854606a154710309ad06f1beae4ffc689915b839a0b1fcad2e6a8","first_seen":"2025-02-12T08:38:06.871461Z","last_seen":"2026-08-28T13:11:51.037019Z","times_seen":127,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_3-CZAdRCrv.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.135Z","timestamp":1787922663135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_3-CZAdRCrv.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1476\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edz5aulX4Uw6rypM1jNQI7rB%2FkNZ9BQt10w8DiDWviB0GjBl1XOJKZ4FgWZrvlyhglJYeMHPxGEDOCvWdSH%2Ftf1YOJdeA0onAE13Hd6XA%2FWmaaP0rB3iTrOeyYzgSKrV3g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44991a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":5703,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"44e1a5b762465a0eb365f3f6fcc1d60d","sha1":"0acc5c63c3660a7c702ae6957c4b827574ea07f5","sha256":"186abff8e623d5232e4d46a8719269905148ee6b8dbeb47ee45878568fe6bf36","sha512":"f61cde643eb6a175d0e0e4435503a05d0d982e475ef31704096a9767e1bd2bd91e830e056f702626a919e06f6277119f4cbb4f282e9b0b014958ef79eaac93ae","ssdeep":"96:NknS2ia5BOmDq6Q0bXWl/dLdt/mTzv+zIkPJcFciGB:NknJBOmG+w9dt/2VEJicP","tlshash":"bdb18e6a8641ed4039cb8fc274e58847c371e048a3f0972b19ddda5e47378a8dd694ea","first_seen":"2024-12-26T23:29:40.099933Z","last_seen":"2026-08-28T13:11:51.056721Z","times_seen":128,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b8e639339aec4a2eaa16d85db2eb4180.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.011Z","timestamp":1787922662011,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0b8e639339aec4a2eaa16d85db2eb4180.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.055d91ba220b9487faca555d2d3c78b3c.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.015Z","timestamp":1787922662015,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.055d91ba220b9487faca555d2d3c78b3c.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_5-C71n8onc.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.144Z","timestamp":1787922663144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_5-C71n8onc.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-4fb4\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tA2cTIMvi7re89%2B%2BFJL09OpiUowpukyTTRocPJhEGZ6GWNsZIPcmOfgeEl%2BJNEw5AxPdrnla%2B1U2L1nerHb2BRDRzKjWdyXgKSNqAEMGuzHYd9M9pSmb5oT5nurR1ypc9Q%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44a91c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20404,"size_decoded":20062,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"92aebd9e0e41071377fcaa664328e73b","sha1":"bca41b209ccb35004a1d926c4f5219e4529331c2","sha256":"df48430fe13782354a476bfa43769b893312990feec6ca44148f705d637d31ee","sha512":"28572d96317587904072f3ba65dc957fe5193e88121c213557038150b43fe06ebfd14eae7c33a5725ce1b05466de57b85eadef136f5d6b146ebe1cdbccd48694","ssdeep":"384:Anr3XfgBsR36w0j9hFNbDNe34iPtNPtshDwG4EMpUxgbRafnDCtDJbeDfibINeuX:Ar/v3oTJCDPzuRDDqCff+nATvqc","tlshash":"6e92d01db90bb4215e1f6150a0e9d23bb69356d024a0d571efcbcab1a8614fecb0f4d7","first_seen":"2024-12-26T23:29:40.10144Z","last_seen":"2026-08-28T13:11:51.057779Z","times_seen":126,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_8-8hE399Ma.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.165Z","timestamp":1787922663165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_8-8hE399Ma.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1463\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EW78w98hPuzzblnSSd5sq3D1b5bcRyEbIEI4g589c9UDt8sXjUKG2BOPol3WuJ5l6iNMEbP988KkTLr6Y99NdeR4m85KLuYgKqdAO673iCJt1z6mkdEqlvqgRxOB0ogdzQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44c9242efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5219,"size_decoded":4816,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"6211d145652aa5683717095a2b8f3cb9","sha1":"e723a1eb0b976b950c7918554ca3e03b82517b2a","sha256":"4ffbb5844e062f2f9fc2a8d92fbb4e20eefda839538163f19cad9127a9882b5a","sha512":"c586421b8bab3f03423e22a99e4733fc6de0e8947fe5544cadd46d6f8cee89d2906504e34ed9a133a4e349be47d931ad936609fa19daa7e00b910b5d28d9a835","ssdeep":"96:rknmWq2iSs+x1Nfa9cNG0KGY+xqHZTHOHU+xLYTiuL+R83xrIN1KEVXDFQLsFnu8:rknK+3Xq+g5Tu0+ZuybZVXDFFtfQke9Q","tlshash":"b3b12a0abf406c114a9d66c067ee610767775bc086a4a560fce6cd175c306fdcd8e9c6","first_seen":"2024-12-26T23:29:40.093755Z","last_seen":"2026-08-28T13:11:51.058305Z","times_seen":128,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/assets/style/css/chatStyle.css?v=1787922663408","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"104.21.21.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.041Z","timestamp":1787922664041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 21:03:21 GMT","end":"Sat, 07 Nov 2026 21:03:20 GMT"},"fingerprint":{"sha1":"16:0A:76:9E:0D:F1:B6:57:9E:E1:CD:08:7A:3C:48:A4:3E:F9:46:12","sha256":"97:DC:B1:14:92:E5:8F:B5:6B:30:D6:35:94:2C:6B:62:0F:08:62:80:A4:F1:83:1A:0D:66:62:38:9A:4E:30:58"}}},"request":{"raw":"GET /assets/style/css/chatStyle.css?v=1787922663408 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Oct 2025 16:46:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ffa1e0-b303\"\r\nexpires: Sat, 29 Aug 2026 01:11:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COzHsXd4X0aN61yEDkraimPRbsYZARBKfLA4gl3PMWIBb%2BfE2%2Fj%2ByRHA1b2eyANngjLJ0JlaSViA6eAZ%2FxY4YzeTX3OcQO0L%2FtU2kuw6EQ4gGNwIf4BrT%2Fr%2BNsY%2FMmM2FXPN\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f4a4f7c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45827,"size_decoded":11036,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1414), with CRLF line terminators","md5":"7f04d716a07903513dd26bdc041cded9","sha1":"87cc4821c93b3691c2cc6ed6c07504f9c5030d5d","sha256":"eca5ab3a8577e84adaf245950a20cb525d5c762c14576671dbcdfc9a46de476d","sha512":"f4a86fb88cfef3906b7debb45e8d4d02a58f4afbb14ff8479e630c3f8c84f97be7d3996d3e399f29498f31066c28fb7a63d8a83e00bc151686e434bf796cd0a5","ssdeep":"768:b8hjh3T4m4G4/4y738BY8+kJYcJHJlxGSndLcR4xhQ14YYi631N8VNi3rdwLcKda:Izr9l","tlshash":"b423433ceb65218da123b4a9bff16be5af514013df0b06a5b5f17a38c2504bd39712d8","first_seen":"2025-11-30T14:17:39.779365Z","last_seen":"2026-08-28T13:11:51.059395Z","times_seen":268,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":799,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//#/?from=mobile","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:11:01.917Z","timestamp":1787922661917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET // HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4IRS3ofAMdOSpr3%2Box3nvGtphFo7478%2BF7n3RsfWsvqrO%2Bvq1nUbWsbPuQnxl9YyBJ9qoKT90huJcl94wVpjae0m5pkahw4bkB2dL%2Fuo0EpR1OA3PcflmTWV23EAw7CMQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3238f3d0f982efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2502,"size_decoded":1665,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a5603c99a0237e92f4c61089704aa4ee","sha1":"a7afb8478a0e01f1c44f725c5e7cc32489a085a2","sha256":"7c989ff14273db56297c345ba3edd7739b324476fc5bf0fa1c121a91284c1ff3","sha512":"b48f1d2d8a2c62109e8b99c81e4579111bde9162d7b56ad423bbdb4a65590cc54914eda3ff8186294086d6c0fe5411e64ce7c65aae46b4e114c1b6b843b7c380","ssdeep":"","tlshash":"a951f24615fb69119222b0784b9bb3086132a9032e09ed84bf8d93502f95317caf7bdd","first_seen":"2026-06-01T14:33:26.308349Z","last_seen":"2026-08-28T13:11:51.060046Z","times_seen":13,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":8,"dns":9,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/fonts/Arial.ttf","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kta.capital/","date":"2026-08-28T13:10:59.944Z","timestamp":1787922659944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kta.capital/assets/index-a79f94b0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\netag: \"6a696052-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 249\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqLoIaAhAzRto5OTSrWw%2FEmT6Igxp9C5HN1uIPPaSxlT3ApPK7fqe%2FSMJ7T0kGTCUbK7WlB2MDdOHLMq4vFbntY%2FLeTY1reoa0ATXTXAiqv1XuoFG0F6v0xANP%2BbNg%3D%3D\"}]}\r\ncf-ray: a3238f30ad862efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047776,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-08-28T20:32:07.763636Z","times_seen":2302,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getCoinSecondList","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.350Z","timestamp":1787922660350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klQaHnAZ7ApR53%2BXI9rc%2B1PFFf9HAOqmrrvI6%2F0IuDoyUzibrisK9l7046%2FaBohjufFBH6M0vtlbXSlQtcyD2lWV%2FHpbVY%2F1ddbs2%2BoSYS%2BLQ5J%2B0dRqHTA%2BIf2gI%2B%2BO9%2Bk4FvOFxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f352ab93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47342,"size_decoded":6216,"mime_type":"application/json","magic":"JSON text data","md5":"bd883a3e3050ac5c8adf83938483531e","sha1":"935db65680b456bc167c680eeed595f460eeecc2","sha256":"d7fa76df8f9be52515fdad07a9f9e3ddf645545e72f79c0f65ff7bab9647d288","sha512":"c69e698619cdb1c4f98c9b6c1f7b9f34c7ce0aa2a3db797813b949ba847610294ab480c2b077589d3884b7f35e9f6c2d2ae393abb26df43251b8dd3a212df8aa","ssdeep":"192:Pth1fr9eDcOZAgmtq9tGi5ZhLvjLPqIAusCGkNOqKocYfXdAAqNznIo0z5H6h7+K:q+lWzkWNafT9w+","tlshash":"c723a829b664847c475084df69533a53d25e257ffe8c8a2ac8ff899520ecf7a6303d06","first_seen":"2026-08-28T13:11:51.06238Z","last_seen":"2026-08-28T13:11:51.06238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getCoinContractList","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.103Z","timestamp":1787922661103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getCoinContractList HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gc53CKduHNwuwYyBJRMSzZroxzyDn0SJVvSq24ssILZjrG8qgpWyYGDBNl%2B%2BUlaA02D3B%2BU6Le2VsDhZOeQ9W8wyMVoVJX5sIYi4wgCzJ58DdSSUR5rw0NBz6Pp5Enx1p2UI7TPlXg%3D%3D\"}]}\r\ncf-ray: a3238f37eb163181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":935,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/BTC.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.966Z","timestamp":1787922661966,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/file/BTC.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-87461d8f.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.359Z","timestamp":1787922660359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-87461d8f.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-b3b0\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXuZQ4MGXAZDE%2F%2Fm1FdUwguo67APD4N3kIECMoZYhCZuYcgDsRq7sMKXpRuO97q3a7QFhwzsoazymFb4CCcRzwIEl0%2BWm5ER83VRGZabxa%2FXfUf5IuWCHcyuP3TzaQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f333e082efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":46000,"size_decoded":16430,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (45995)","md5":"d20a9108405c6c399539c99fa677b12f","sha1":"64a38030cad18f322c40a8dbdbd3a9d497555dcc","sha256":"589df0701bc4094133e0adf90ae649bc6198155c4d6d5f9eeee0033bbd082c1c","sha512":"c82100ec4b7c666f121d113aff43c6eebf664ac80523e2b43abb187f7db3cb9ae40953bd8a0815d6037a4b4ce51edf557612e203f9d16671d337f99b14314aa6","ssdeep":"768:vk0vYNpymXSIZbtO97eI2L+fElGgIlffw4L0knzJiRJTijnCTv5V1CSzhoO6wNNy:vk0YpymC+I2GElbN4LiijnCTjzjx7XjG","tlshash":"5b231713fa46d53d9fb2a160148e1110a6182f8ed04888d7b4bd691e37f7eb07b6a37d","first_seen":"2026-08-26T10:43:11.021436Z","last_seen":"2026-08-28T13:11:51.063407Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getAllSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.344Z","timestamp":1787922660344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNjF12kSWMyVJG33T%2F2axbCQk1wGw7c2ysukUye4l3BQJp7WYzWqVg0%2F5T%2FeRfgdxxfdD58LIVyopkSPge%2FqdeoTfg6Y1ocaMBg%2Fqni4SvFBIrV0oUhqOaDDeVwCrga02CLFF4pImA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f353aba3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39999,"size_decoded":11366,"mime_type":"application/json","magic":"JSON text data","md5":"85c9e2389d60293c54b84dd0d4a9ee8a","sha1":"ec7b4b448448e134219fbf45aaf40808f5e606f0","sha256":"d876a07c47cf87051025e4467072f4c565172b55dfd50d5e399fbf534b484ed1","sha512":"1d7dc40c7a65ad5e9a553f3343509f07e79254c03af0a914b80c6ea3bc3ed5484f10458ccf444fb13c9ea8c98caaa6ea849fc5ddf259b7b38b54a41567e2ef7e","ssdeep":"384:DhuS0abVlZozqDOJlDYN3HMTfb2dnCEDU07q:DhyahlZozjOZ52","tlshash":"e803841ab0a8fcbdc7da98c600773a6b35ac387beed55d54e0cd4e4c47e9471860b60a","first_seen":"2026-08-26T10:43:10.981531Z","last_seen":"2026-08-28T13:11:51.050256Z","times_seen":6,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_8.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.998Z","timestamp":1787922661998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_8.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-1463\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4OtZ6I%2FVQI8rkXaKIpANvbgLokZ%2F3pi6MyOGfTQ47mFO5p3FYfnsifFif3GBb5oq1xZfgqJfwmmawH%2BiviX2e3FDMHCnoJVkra1mWHEMeasiWyQ0oq42Ttai2XBig%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fbf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5219,"size_decoded":4818,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"6211d145652aa5683717095a2b8f3cb9","sha1":"e723a1eb0b976b950c7918554ca3e03b82517b2a","sha256":"4ffbb5844e062f2f9fc2a8d92fbb4e20eefda839538163f19cad9127a9882b5a","sha512":"c586421b8bab3f03423e22a99e4733fc6de0e8947fe5544cadd46d6f8cee89d2906504e34ed9a133a4e349be47d931ad936609fa19daa7e00b910b5d28d9a835","ssdeep":"96:rknmWq2iSs+x1Nfa9cNG0KGY+xqHZTHOHU+xLYTiuL+R83xrIN1KEVXDFQLsFnu8:rknK+3Xq+g5Tu0+ZuybZVXDFFtfQke9Q","tlshash":"b3b12a0abf406c114a9d66c067ee610767775bc086a4a560fce6cd175c306fdcd8e9c6","first_seen":"2024-12-26T23:29:40.093755Z","last_seen":"2026-08-28T13:11:51.058305Z","times_seen":128,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getVideo","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.056Z","timestamp":1787922662056,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"GET /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/notice/GetBanner/2","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.177Z","timestamp":1787922663177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/notice/GetBanner/2 HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkyLmsBSEBh73mNCT09wabeQ%2F%2FCx%2F8zl0Vz%2FrR%2BBQM8gg2LzOTMiK%2FQSh03asuZWQsZNXrKOLhdiOAFE3Gnem1Xvfm1a6e5SvWKeMK9c19ukxZKDyWQhWoND17vSQTe1ZbLhtkdDzQ%3D%3D\"}]}\r\ncf-ray: a3238f44dcfb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b3670fc00bef475293fe0a26faf1af3b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.947Z","timestamp":1787922661947,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0b3670fc00bef475293fe0a26faf1af3b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.04a248e3d8a4a4a79abe6b5c8bbeb411c.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.005Z","timestamp":1787922662005,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.04a248e3d8a4a4a79abe6b5c8bbeb411c.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.077Z","timestamp":1787922662077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26W2g5Z%2BjaxNGcDjAr0lPFp9XOsLhs18EyV6xwbVQouEAV106yrRuAia5x%2FBHvogPR92%2FR1T97pZlTi0MHh3uAhta0hrIoeVl8q2TmfZduIOuPkXIZZyhnfJxULjoZ31PGsBxUZ6KQ%3D%3D\"}]}\r\ncf-ray: a3238f3dfbe63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/ArticleViewer-ycO729OF.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.832Z","timestamp":1787922662832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //js/ArticleViewer-ycO729OF.js HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-983\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 247\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHyfRLdP0TAXzWIlzX5l67TBF114DiH%2BJWK62ciQESe%2BFQwejsz9bxGY9xOIKnTW8BdU%2FMBqoPMs%2F%2BdMNSq9jUbM7zHuJ8mS5x%2B0NQM7O33mL%2BvQe7j7qd7hk8V%2BuU9oYw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f42b8bc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2435,"size_decoded":1970,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2434)","md5":"b0e39b9ba06a4c877ba4848342f3cc1f","sha1":"51476b42f74b9a0bab3b30101f8f4c7f5840f777","sha256":"38482fbaa48ec0b599ae7413663e10d661ef376646d684323075a3f2d9120a73","sha512":"07581f16a1e034c485e2f2b12ac660582d9c4de23a358788f398b8338dc01bd78fe0c4d4b0d76833cab02e54c541879b64637c183266f52d99054aabee23187e","ssdeep":"","tlshash":"904175ad7471cfb942b3933165cfe35491447bdbd7608a86716e18293bc1ef06a1c304","first_seen":"2026-06-01T14:33:26.250251Z","last_seen":"2026-08-28T13:11:51.063942Z","times_seen":13,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/test-banner-2-BOzsBh0j.jpg","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.091Z","timestamp":1787922663091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/test-banner-2-BOzsBh0j.jpg HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-e17ca\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2FXYeR4O6%2FrESdrgaH%2BqFRixJqzYdpUkUEmwPcX7v1dTLeHwsZevxMQT3JCUAcd0ceAudl5wFQNeXENaIVzFO0aUuEqrFJpD890%2BClhOjvXBpoQOv40pWxv4ACqeMDP9rw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459012efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":923594,"size_decoded":913468,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1238, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2200], baseline, precision 8, 2200x1238, components 3","md5":"65854a160ce21592b039f4f62751f730","sha1":"2a51b71b65a211dc93795a275e9827b48df7f088","sha256":"a4d9da7a3496c0dc89eb4f6799f84ed485fb81c74b85ee5ee798c329ff28d40d","sha512":"fbec9b5be0bf7430e64bc00c6a2ad74ed9734373cf3a6c165c9fce016eb2e2f47181bfae33c376e3c7b5290442bdfd2261d7582d3530c01a9bf70ffbba66f8ed","ssdeep":"12288:07IA3Y7wolBJn0eww8evl8Z9EUJCC9CNw+5WbhXzGYHmIu390/tdIg5coJPrdH0m:sBob8m8P0C9Cyr/sg5ccrSFHJQOsMgS8","tlshash":"281533eb1108dfa5cbf41eb151d5d78d4a22c4bb5beb088af58ef05b53bdbab8064140","first_seen":"2025-09-04T00:18:50.344416Z","last_seen":"2026-08-28T13:11:51.033983Z","times_seen":62,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/low-fee-ByNYPW5l.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.093Z","timestamp":1787922663093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/low-fee-ByNYPW5l.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-64408\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRROBpIglcOFSrBauG5pRCu8EflatqClpf3Rrs%2FdyxFge08dKsraEVG%2FewJM6M2D4lTg2EwE7EmVmGyzyEzNxukFziivpoobdWnYM2S8Tg9CiGVbC20QWW1XIhkQNH0FYQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459032efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410632,"size_decoded":397265,"mime_type":"image/png","magic":"PNG image data, 1560 x 1345, 8-bit/color RGBA, non-interlaced","md5":"4904db96fba13ac0e2a1c402c5b7b337","sha1":"a685f21e35a89536be7c6bb1b81925d761fc8749","sha256":"8bc07dbafbe213a3bebafb929b95a9c44aae9156abeb7392147779181bb509ce","sha512":"1c8f59b84b36d285ac7a9c2072d5cf757ca584b90343a92b00f5fd2f82e7bdc0db2a2cea3739c78a6e6389f0f0a0ab0ff22e330d8cbb8dd282e0c21e84047045","ssdeep":"6144:RLAC7dJu4FFzg5UgoJJ9dz6Te4FzRMX2kad6uhe0WrsT12f5WpgNFDk1d:RAC7d04FFk5LonP14I2kUw0WLBWKNZEd","tlshash":"5a941248c0582700fcfa75b9e2caae37d99477325987966833e3317103a638e5b917db","first_seen":"2025-09-04T00:18:50.3611Z","last_seen":"2026-08-28T13:11:51.064541Z","times_seen":60,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/commodities/LCOZ4.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.968Z","timestamp":1787922661968,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/commodities/LCOZ4.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_10.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.004Z","timestamp":1787922662004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_10.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-1e85\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXoijyB%2FfDlL4mrr00pqijb8WPhffSzzc5CEZk1dp18QZzJen11faeB%2FwaJXzejgb8vFbdj7xCh8HD7BRklFA%2Foyak3jiCJv3MrY9PGHmyYzfmVVeXkW1N%2FiokhKpA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d8fc72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7813,"size_decoded":8592,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"ee91dd1f10c738a951cdd6d6f56c6d2a","sha1":"0f18b1339f62b322f0ca87bba04d7274d9cd6327","sha256":"66bca87cc8e292cc6a136f92fc1cf68f613195bc9b393aa90de3688565521bc7","sha512":"f6c643c252ea556ee6eeea30c1fec6bcb34682601d0dc99435acfd70ef1e48987c5b01a83d327343ba59a0f4ebcd5a49d3cd3b61db9a0c54faaaddc8c9a493e1","ssdeep":"192:fStX5dARBEEYxJg1L4f5aZzsPhY9706OTHEL:K5LEEEYxi1Uf6IPhko8L","tlshash":"7ef1bf40648a2e63661e7d48c2e0c5b557b655cf5338c35bad3210fd15e6281ee39ca7","first_seen":"2025-02-12T08:38:06.881528Z","last_seen":"2026-08-28T13:11:51.065097Z","times_seen":127,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/investor-tools-mIchEutl.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.095Z","timestamp":1787922663095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/investor-tools-mIchEutl.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-44e75\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6lyDXywRRm1ThjbSj5SADyNJldczSqVjse93GJZiRHHEoaovfOvKGE8%2FfoddNhitm%2FbWhUxn1IBwlyuEWlVnFc4pFaLs%2B3IHiQpAQfKJq3%2BMDK1aZqMEUcq5ezhG%2FQqNw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459042efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282229,"size_decoded":276254,"mime_type":"image/png","magic":"PNG image data, 1041 x 1012, 8-bit/color RGBA, non-interlaced","md5":"9aed9e0adadd8090ff9340a30b10f11d","sha1":"abef31e250c31e193639efe81a3009a6def4b1fa","sha256":"e53565aaa497f6df7348bd39e7f8dd7a0254901d61c3bbbf7c84a27db6bbac07","sha512":"9273d1c788485714d79d74578ba79f7e32c54f5901831209f8955db96707868980a8d931b956966302db7793d8a069748a38a4f4686abdb7d6a2af65de800879","ssdeep":"6144:1/qcM5MbnWGbV0InJOcl7NuVYi2VD3D5xoEvWQn3v0y8d:1CB5CzV0IJOcl7QVYi2VDb38yC","tlshash":"575412c2cdf6ebe54da9a03972f0db231afd69236691407c4ce1521fa91cbe98975303","first_seen":"2025-09-04T00:18:50.313726Z","last_seen":"2026-08-28T13:11:51.065683Z","times_seen":72,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Frame%207-DhyADEO1.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.131Z","timestamp":1787922663131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Frame%207-DhyADEO1.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-11df\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2hJIebWHRZSJyZM4wyAzgfZ57%2B%2FsWCbWXykjt9CBR5ZuNohLzKb5jpdTP8y67HkeJPeG3baVSFuiilWucklz6%2Bp01jC88V8GntcQG1m924DTd14097y14TIAwPffdPLLw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4499172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4575,"size_decoded":5369,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c32c604441f656c4eda637db0ce64fc3","sha1":"a936a84c35f34bec6296ccea1ca277ed492b3f37","sha256":"c1011c258b378ecd5b229f60bb4de768c1c1644d5e2acdca24076192b771d0f5","sha512":"552ee2eaef75d4aa9bc1cd49166d4aa8253dbe56488a325c4d670cc41f4dc88f424a2bc6ef42e190dbe651c90a9e0cdcc463fd6b6e778f17ec8a077ceeac0c75","ssdeep":"96:fSZLP23oemB7OTWDyKhsF40UKFEcHp4u9uXBIu++6at42k09B:fSJhxYEXsFLUKicKNR9++R4LE","tlshash":"09916c15efb1b3227f10ce36866a5811a71609fba54d20ae958d586c66143b37caf04b","first_seen":"2024-12-26T23:29:40.059828Z","last_seen":"2026-08-28T13:11:51.066781Z","times_seen":137,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0cef26b8cb10b46f696a9a7067fda704d.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.961Z","timestamp":1787922661961,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0cef26b8cb10b46f696a9a7067fda704d.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getTeam","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.179Z","timestamp":1787922663179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJMBE8ePxYlzHb8gNB0ZtFjkrjQm3T8x2r0t1NPOP2swqfY6d4DDLBemnNsIloR%2B7%2BuiV7eqo7oqsV8jzjQEe6ZgpgVMEEWI3jOFBSfQre2fXzgUC3DyQ7E6cyQqcMGtkhvkXY7qug%3D%3D\"}]}\r\ncf-ray: a3238f44dcfc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getWhitePaperSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.184Z","timestamp":1787922663184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5QkS8Ra3zsQ2XqaUXwmW1tH1ugU2G6vJMOR2PHRMA%2BPGRO%2FwjFjcgI0kWvefVqdxpPo7VihtqvbDqGzeVAoLLG8qjnia%2BVfIK2LDq4UZjnlSqxYGFDMAs7lawXM10eB2ntfxD1k%2Fg%3D%3D\"}]}\r\ncf-ray: a3238f44ecff3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":950,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/SparklineDataFetcher-e3b0c442.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.378Z","timestamp":1787922660378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/SparklineDataFetcher-e3b0c442.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\netag: \"6a69608b-0\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 249\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bim%2B7%2BgaZnKE2z3jZOZUhYHlqhtJ%2F0e4WaPXaDSaHqRcpbjMM61Leidax3QZCclVSHE5vWTJ5ZNigK4i%2FfAcuqlqMPGK2TAj9EKtaN3x1zTAoVFSD4u4peBofeChFA%3D%3D\"}]}\r\ncf-ray: a3238f335e162efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":778,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_7.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.997Z","timestamp":1787922661997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_7.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-44f6\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOpmLg0wdh08fcn20%2B%2B2fweX%2BHGExQeijWeLTntM%2FLuSJSLxyUSEf8cwNmugOSRpfMOOuc80%2BvuA%2Bl%2FuvCNuOk8JUTlWGaPSWhweDhRWaCbUCIqtd%2BdzUBaU3u94pw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fbd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":17241,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fb38101b080f0069632af23879f5d08","sha1":"2264f6840d544cc320b59f9861361125ecbca8e3","sha256":"2894d936fe42d3f8357e682c477c6d515f04b78e5b6efced7eba1c03b68f2d68","sha512":"5c45290fa25cd3cc00b06a44a1e11802bcc17b3a39395ab1ca17eb1fef7451abbc47343736a36b4359a3801c1e32a4d872285f9c1bcf76bd8dea8a009a61c17c","ssdeep":"384:Anh3XfgBbzg7igsb8vd81SJE6W/TvVqF9wj2iLFRQeNj8t8:Ah/sgoUq1SJEzTVk9uLItq","tlshash":"8f82be80621318a0ae6c964452be75bba9bf098447e8b0b4ccef8537b4747f9cd245db","first_seen":"2025-02-12T08:38:06.875638Z","last_seen":"2026-08-28T13:11:51.068432Z","times_seen":127,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/CookieConsent-Bu6z0aTL.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.828Z","timestamp":1787922662828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //js/CookieConsent-Bu6z0aTL.js HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-18dfe\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 247\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CKospK6e9PhYYNEfBWN1HzRvKz%2Fj9pk%2FpLhyUq6lBpc7chb7JCbUSTaGDCVv57pApAWKfgbqCmbSiK8HCuv04NhISp%2F2WpYWyg8MjMVNtZb1AzL%2FUHm9UCc95mcQB33cw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f42a8b72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101886,"size_decoded":34388,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7169a610f9e575cb81d79ac480fc37c0","sha1":"9b7cce3b5620a8fe07e724e20b5a4f71acc61733","sha256":"f416824db87ad14beb35da6d046c43c0eee2c3f848c5e64cb3366e8b294129b0","sha512":"938fff0d4b64283979eef4eb0b313cbeae35781bcc26006fe933f7866bb54db1e78fd6f5c980a46cdf35fd7693b80f503ffe458b9f60d219a06b39f0b6e145a1","ssdeep":"1536:qjxMkbZcbyEyNNBlxvHCfG6f6XbvSA6EkZLSCnYtgm+4g1GCt6iLn3:KxZNvSAfkpBiguan3","tlshash":"cfa33b88a120b57a46e356e652a88211b3b45d45f449c4f4b1fccc6b0daed9813feff8","first_seen":"2026-06-01T14:33:26.196923Z","last_seen":"2026-08-28T13:11:51.069729Z","times_seen":13,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-62e59dd1.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.377Z","timestamp":1787922660377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-62e59dd1.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-828c\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDxMiHLiApVzL17xe53fFjKgfhvFSMpITqda%2F%2B6uuifuPWT6PQJzcpsvLkQwgjBs100RchPyYonLqffXc%2B3bkxGbT0h%2FBr5xCYTBPaw%2FbYUQrL0JLBwD%2F2YwOv9CxQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f335e152efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33420,"size_decoded":7497,"mime_type":"text/css","magic":"ASCII text, with very long lines (33419)","md5":"aa5493894d516529aa1a557040fcf128","sha1":"368cb8aee1ae859a53f362c64d96d18ce8dc093f","sha256":"62e59dd1634f031c0505cf48e9dcf772848c1b8594fa97d76b7c63a6e7b9ba94","sha512":"b76f3fad6ac4d9d9f9dd744995191da3e982a0bfcb8c9ca9e89c6d7831d27ac0edfb9d182bfe2e6282566cf1adcdcc7d8ac7ee573f15c9c8cac3b5e8af4a4514","ssdeep":"192:EA47dIePf+EYmO+AjPzegl1lVKJDJXSLEUwm2Cs6KrO/C3Ke5Yj5Y/b8oe4:147dIXRlzlVKNiLhYKe5Yj5YD8ot","tlshash":"33e29425b6981038b837d1557ec84acca218fb22f583ce95fa9379714cdf3e72932649","first_seen":"2026-06-25T16:53:33.837257Z","last_seen":"2026-08-28T13:11:51.070461Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0e973211a600b475ab2a98946823a0820.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.958Z","timestamp":1787922661958,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0e973211a600b475ab2a98946823a0820.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_4-CZsCHZTt.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.141Z","timestamp":1787922663141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_4-CZsCHZTt.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-22f4\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSGppqafRl4efwRdpgpbnd3LcFGTstfcbA2biABGb9GDxbNTL9tWAz%2BIM32f0AkqaqewTNW2KqAvruRl2HbTt21sTYkLddSgEkGztR3xd%2FMTqxdEYnRIik5QgxtXuDmX9A%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44a91f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8948,"size_decoded":8628,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"5b3ee8976381978db00a5d83a5e8bb1d","sha1":"e4c03afd678536b2659f6115ce67e49bc6127f95","sha256":"d16314aa812455f4867fc9124af62e75ac962d48bebf068fb343e5b49c1f87c5","sha512":"2c4884ab65d9d3c62bd64ff25bd2ee709b6405f07e941e3c68ab28e82ff8fd91ba7a1c5a0b189599eda448e0a2f39b8b43a80878628b4afd95f9428e0e8e977c","ssdeep":"192:rknSAq+3Xq+g5TelZa+hXbDROtAir4cIPgi1QghQPkGadurVxKq:AnSAf3XfgBelZPN+DIYEQghOvrKq","tlshash":"40028f4599486e4165d6b294aceda00353a28fc0c782d8747cedcc291cf0bbfce86ad3","first_seen":"2024-12-26T23:29:40.048598Z","last_seen":"2026-08-28T13:11:51.071205Z","times_seen":126,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Frame%207.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.985Z","timestamp":1787922661985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Frame%207.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-11df\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCVsD2yc0GHNhjrU%2BhC3LS1XMCrLw2QC3NHzQ%2BY%2BopVJjLLMgCNZii%2B%2BSimKSDnbYerfpWc%2BlconlBPtPS4v6g9aY3Q5E5pU3hwzHE5c0qvFB2edtb%2BjyIegkwFrqw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fb42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4575,"size_decoded":5373,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c32c604441f656c4eda637db0ce64fc3","sha1":"a936a84c35f34bec6296ccea1ca277ed492b3f37","sha256":"c1011c258b378ecd5b229f60bb4de768c1c1644d5e2acdca24076192b771d0f5","sha512":"552ee2eaef75d4aa9bc1cd49166d4aa8253dbe56488a325c4d670cc41f4dc88f424a2bc6ef42e190dbe651c90a9e0cdcc463fd6b6e778f17ec8a077ceeac0c75","ssdeep":"96:fSZLP23oemB7OTWDyKhsF40UKFEcHp4u9uXBIu++6at42k09B:fSJhxYEXsFLUKicKNR9++R4LE","tlshash":"09916c15efb1b3227f10ce36866a5811a71609fba54d20ae958d586c66143b37caf04b","first_seen":"2024-12-26T23:29:40.059828Z","last_seen":"2026-08-28T13:11:51.066781Z","times_seen":137,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/index-DgicNu3n.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.571Z","timestamp":1787922662571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //js/index-DgicNu3n.js HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1318b0\"\r\nexpires: Sat, 29 Aug 2026 01:06:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJNCfPR9jKLhFlaBtEfPXTKIgefJUmc%2FYAzIszHaloyPQ5%2BHKrD0iGp6YoE8Z8mBvwULsp1cjwY5WLJnJTlP9m%2BAfeP%2ByEY1vfGg09zUnnS83yc9ZzoUiWwR%2BzC15o1U8A%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f41184c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":1251504,"size_decoded":437701,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32818)","md5":"3368b92d464175845528196d2427a68d","sha1":"99de359da5fa9cbd4dff5f535f313efe606b091b","sha256":"3e431b29e12f758a3967c9add19df2f26ec9bc464393387dc7f0dfa34b394982","sha512":"d992116a657cc60569d10db27390f6ee030762e3db4995c6a49a941cd5600eef54ff65a5d3d807da51787f1f04d00900cdad331ba96f6d2c474ed07b2f6fcf3a","ssdeep":"24576:9PyInRsAXZoM79nXJn7MeTZZXX7ZTJE6XS0LHw5S:9PyInRsAXZoM79nr3ZXRQ5S","tlshash":"19358eacb9c6b46806f386a960d71104b2741d45f94ac0e4f9ecc5ba11f1e6de29bf3c","first_seen":"2026-08-28T13:11:51.072953Z","last_seen":"2026-08-28T13:11:51.072953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getAllSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.827Z","timestamp":1787922662827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPHu1dhOERlcxg8pjL3WfWF9pI8wVUG2NXoSFWrG6GnMZ3RNh8hB5tzyP%2BkgsTdbWyxEyjXcF3r4%2F6%2F8aX%2BS9ulagYAgnKchvjOqAs3lAwGR0NSRvterNrDUR4VyysBI2X%2Br3mzTSw%3D%3D\"}]}\r\ncf-ray: a3238f42acbd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":952,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/index-b5JnzVdM.css","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.838Z","timestamp":1787922662838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/index-b5JnzVdM.css HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-5f6\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 247\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkQ6bj0Mua7bUeFh62lgOhZoILZGcn4W2WTt5u9FqtLWeF5eUp46qQtfZgrOmww34AzdU43N5IwSNuqljiDAJFPsP5zSGUqokneU8TBpuBKaxK7NAAJRFflODXJ%2FGTT8mw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f42b8c22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1526,"size_decoded":1337,"mime_type":"text/css","magic":"ASCII text, with very long lines (1525)","md5":"a6a8f8c97ec3da73084a5db5eb486b27","sha1":"e8f2568691d0b6105d0f8ddbefd852c0c4e551e7","sha256":"58deb49c15c8796fdcab9de01d5605a94f51746f0ef857aea798a379ebe8eeb2","sha512":"5b12a4d580a7d9a480baa492a79daa2edf63785da7aa4e7441ea19b2a44061a3cce2e8b5bad43f2e1869b595d76c772e2472b1fd90dd7450226b52ccc5314042","ssdeep":"","tlshash":"ad31ff1966042528d0fbee48e4d0630da330f3639b7a05c963612b10dd8b36731385ed","first_seen":"2025-12-01T22:48:41.449516Z","last_seen":"2026-08-28T13:11:51.073986Z","times_seen":45,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b3670fc00bef475293fe0a26faf1af3b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.323Z","timestamp":1787922663323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b3670fc00bef475293fe0a26faf1af3b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9485\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E7AFAD5B3131BD1DEF\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Max-Age: 0\r\nAccept-Ranges: bytes\r\nETag: \"D143069824ACBE37EECCBD88F815F7D3\"\r\nLast-Modified: Wed, 09 Apr 2025 12:01:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4371194900719359147\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0UMGmCSsvjfuzL2I+BX30w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9485,"size_decoded":10159,"mime_type":"image/jpeg","magic":"PNG image data, 229 x 232, 8-bit/color RGBA, non-interlaced","md5":"d143069824acbe37eeccbd88f815f7d3","sha1":"01578ca91debd1fc6e93eed6b801d480d6f8d3ca","sha256":"eeb85cddb7caa1a0edd46ec513beac3096383a0f72204770dc0f5c21f1dd20a7","sha512":"c0c53c4964b33660fc484430507a32b1a3cc67356766e85ddbf67dd2f920ed843b4fe7b13c361a34751540aecaf694e3c40c3671b2d4baacd90d59dc687f8f86","ssdeep":"192:BSi3wY4uC8KtQadptGikhhG1GLvMjI0/cbX/LioBh2iv16V+:o2wY4iKLvM/amvaSP5BhxvwV+","tlshash":"0812af9cd1a964665c84ee1f7148c5087f2217c78465175a91e8f077ac9bc3d1328eff","first_seen":"2026-03-16T14:21:50.116822Z","last_seen":"2026-08-28T13:11:51.033322Z","times_seen":23,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.03b1af53bba8d4bc085613a5f018d5997.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.959Z","timestamp":1787922661959,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.03b1af53bba8d4bc085613a5f018d5997.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Frame%202-c2RTuPRh.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.104Z","timestamp":1787922663104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Frame%202-c2RTuPRh.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1904\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lz5MODCoP9bW9jqoNEZ%2Bb6F1%2F6l3qrIOrlK3pWj2Nnrv4p4ZHOcM4KVLK60B5UY8f4s6irdwLhbcT12uW0%2BHPRZQTtUlyoEcfIk2UfSzPbmCeGU2jyh7F7y9z4PRrLCRIw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4479082efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6404,"size_decoded":7166,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5f6ce860b906f355bed0f55e2ae2a88","sha1":"044d4a88650ebbeb71b5ba01dae0993e64ea257d","sha256":"2e5a4148f2f24b69f934319ce6e397de373ccdb3744307d44a9ef747973b945b","sha512":"98b22901d2a1829c6d1953b0a3ff3306f939e2966c166f9971a3a29a95c27c844627c3edeabc4dc7148aeb0a47b8e685e7bcc9abf756f179e5dfe0f563a95fde","ssdeep":"192:MlfDJ/atKb4jNpdL9w9mjidVbFTC7E+XNS2:QM04jNXL9w9vdV6X02","tlshash":"8ed19ef7971026a7fa9855c615356cbacfd4a6034bc72608013a76053dd6728ff0ba86","first_seen":"2024-12-26T23:29:39.991003Z","last_seen":"2026-08-28T13:11:51.075174Z","times_seen":128,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_7-CXcIvExM.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.147Z","timestamp":1787922663147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_7-CXcIvExM.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-44f6\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBv1mIZbePoYJVjBDH3adgKKnjGRzOtDvB1VfXEk682s%2FQ5wdwf9bdvlewvp2K%2FlR8R9OsIqdJwesgKuqwlBnLFA70eN2FFmw2g7QeY%2B3NALCJOIJSFrJpfeY8QEp9jA5g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44a91e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17654,"size_decoded":17235,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fb38101b080f0069632af23879f5d08","sha1":"2264f6840d544cc320b59f9861361125ecbca8e3","sha256":"2894d936fe42d3f8357e682c477c6d515f04b78e5b6efced7eba1c03b68f2d68","sha512":"5c45290fa25cd3cc00b06a44a1e11802bcc17b3a39395ab1ca17eb1fef7451abbc47343736a36b4359a3801c1e32a4d872285f9c1bcf76bd8dea8a009a61c17c","ssdeep":"384:Anh3XfgBbzg7igsb8vd81SJE6W/TvVqF9wj2iLFRQeNj8t8:Ah/sgoUq1SJEzTVk9uLItq","tlshash":"8f82be80621318a0ae6c964452be75bba9bf098447e8b0b4ccef8537b4747f9cd245db","first_seen":"2025-02-12T08:38:06.875638Z","last_seen":"2026-08-28T13:11:51.068432Z","times_seen":127,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0027eb3c22b964755b4d72537d61d9962.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.009Z","timestamp":1787922662009,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0027eb3c22b964755b4d72537d61d9962.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//js/PdfViewer-DQUWpIe6.js","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.830Z","timestamp":1787922662830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //js/PdfViewer-DQUWpIe6.js HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-219f69\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 247\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GM1GwxjEgn%2FaNZ05pGX4%2Bv0zGG2sQbiZVo7DhqXU97PTd7Y2LhNjy%2F9b2qOhqzGw%2FRfZn9pzr7TqRkdBWBjzanWSaOcZJj2Epub43jOSu209lddxTLbuQ5DELbixLxdUA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f42b8b82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2203497,"size_decoded":810137,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"84abc19a7976dcb88927f208fa8dfb0b","sha1":"25170deba4d897415cdd9738f266d09de72aa252","sha256":"76ca4920caf21747c7df5fe1d370b7ff487ae2105c75f1f9353ebce7bc4e66ac","sha512":"9d95eeb92a8016b9bc651578d878fba95e419320989f7ab77c589c4aebbd62542a0b49fa97b6daa928ae4405ce86f937df1d79319abab7d5172d90724048433c","ssdeep":"12288:FkG40pIoOnW2O69x3fOqsbzAar4Y7hdKvWHbzYE/EqkMsxP706zL9bHIOdBEtHbX:340pIoOWl6r3dqbOt7aFMzW","tlshash":"ce258d24735a769d0aa900c370bd1589d3fe1609e062e1dcb78f7a9f6a6ec09633d734","first_seen":"2026-06-01T14:33:26.274563Z","last_seen":"2026-08-28T13:11:51.075837Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-2ee7b3a8.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.370Z","timestamp":1787922660370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-2ee7b3a8.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-553\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brgbcPJXtJ4YI%2BYHiMs%2FF6JOa6O3zjdvqWi%2BKoRVDwSE4zR9x%2BMWntvkrqH%2BjQhOAYAK5ywwjfVMRLTg2u5pEWKT8Q8qzXxTmG3QKHpC739HVrlu2NwKQsJj3miquA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f335e0f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1363,"size_decoded":1220,"mime_type":"text/css","magic":"ASCII text, with very long lines (1362)","md5":"0f5f6fda477235a06349008a000d81c8","sha1":"2431f7ff7dfeac6f2ec44afeb4cd3480abb25990","sha256":"2ee7b3a8a0e1b31b163b33129d9d82b368716adfaadc9f632b97c05fe1937a26","sha512":"e962a30cc904c107b5800bbac6606585b6d74c1d7f0d61eb032bae0a30a77c60d11f232e231bf943f53ee88fa5d971a540ea18881cf1f4855ad5a2e2b7c52f02","ssdeep":"","tlshash":"aa21c478da5090397e12fde5d7d705daf23ca5614c1beb997a18e16083c37f41a13382","first_seen":"2025-07-06T21:44:04.062809Z","last_seen":"2026-08-28T13:11:51.076507Z","times_seen":325,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/audusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.974Z","timestamp":1787922661974,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/forex/audusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_4.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.992Z","timestamp":1787922661992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_4.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-22f4\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vq8NLUgJ8Cl6hsQ%2B%2FR%2FzMeSVLAKHUES2h7bmJolfEBK0MxzgaOsK11wYb2gMOK1UywJqEfwbFIdMbsulW9UBcO2fgaTam3tk7InWKZ7c8J4iDuwegJFr1jsHW0IRIQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fba2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8948,"size_decoded":8626,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"5b3ee8976381978db00a5d83a5e8bb1d","sha1":"e4c03afd678536b2659f6115ce67e49bc6127f95","sha256":"d16314aa812455f4867fc9124af62e75ac962d48bebf068fb343e5b49c1f87c5","sha512":"2c4884ab65d9d3c62bd64ff25bd2ee709b6405f07e941e3c68ab28e82ff8fd91ba7a1c5a0b189599eda448e0a2f39b8b43a80878628b4afd95f9428e0e8e977c","ssdeep":"192:rknSAq+3Xq+g5TelZa+hXbDROtAir4cIPgi1QghQPkGadurVxKq:AnSAf3XfgBelZPN+DIYEQghOvrKq","tlshash":"40028f4599486e4165d6b294aceda00353a28fc0c782d8747cedcc291cf0bbfce86ad3","first_seen":"2024-12-26T23:29:40.048598Z","last_seen":"2026-08-28T13:11:51.071205Z","times_seen":126,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/index-tn0RQdqM.css","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.834Z","timestamp":1787922662834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/index-tn0RQdqM.css HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\netag: \"6a053cf6-0\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 247\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49tjNtIGxmGMr6X%2BXW1KPxRcReDE8pZHg2sKvH5nbxH%2FwU%2FX%2FggY6LUrYH7gsMoYwMW0OYviz70rOkKf5oi704wGhjl%2F3ZWWQEKB6zbNuGl2pcNn9rdkoOBXNx4ZBK23Xw%3D%3D\"}]}\r\ncf-ray: a3238f42b8be2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":784,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-333f12dd.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.372Z","timestamp":1787922660372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-333f12dd.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyH%2F4OK%2Bcjdsk2YTPp1gMJszQ%2Br05Ovhamt6eqLVNCJxxY752%2BgjbsYu7YQY259s2RjCNYLYreLonfqnRUv3fcLNsr3YiTnvrXLGRm7VkgyHnGHq3MvpIDqdMMQdIw%3D%3D\"}]}\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 249\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a69608b-278\"\r\ncf-ray: a3238f335e112efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632,"size_decoded":1220,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (631)","md5":"ddca22ee77556ce06fa9606e3574b919","sha1":"c3a1a53a9160f0fd36fa3bb2d7a4de9cb19d45b2","sha256":"7172fb0d9f31bac84df3ad14fe46295f9c373a3cbe01f7278a5e036232a7fae2","sha512":"859870559bf193115c49fbc226bbad1e09058b6635b7633ac958fe17dfbb18d474c0e3ec609fd77a001d38dd31d385f6abae1442d9893563bae4405c3e56c642","ssdeep":"","tlshash":"aff00c6f4d6e0533acb34068201b2409176c0ff92bcc6989e1d407a427d18a4ef8f2a2","first_seen":"2026-08-26T10:43:11.014623Z","last_seen":"2026-08-28T13:11:51.077265Z","times_seen":8,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/svg/light/menu-icon_2.svg","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.949Z","timestamp":1787922661949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/svg/light/menu-icon_2.svg HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spaWg4sKEGyzAf%2FUvdy19MKiQtfYvlwo%2FDNzCgeyzZGUIlju5pE%2FQ9eGw%2BuNREfeX2UXLlGKrv%2F8Rce673C4AhvNx%2FKf7eKvfJxNZRQDANBE%2BaxrSc7BJ8Q%2FHgbNLg%3D%3D\"}]}\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\nage: 249\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a696052-220\"\r\ncf-ray: a3238f3d3f9c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":544,"size_decoded":1071,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2588c06075d7b160bb07f4e24b87c1ef","sha1":"d159a8c1bec56c459e2c9f72a4e364b2a55b0fdd","sha256":"d4baeedfffd361ae8a0411f79bf26c3cf2f868715dfc3ac9f55f01b1a4495e49","sha512":"bb59d1d9e21918ea226fbb37330f32094755314d0eef44e87430ac72563c83334a5b9e43ce57cc21025ed5e5d81bb0c93fea2704dde530094e4e9c941b903256","ssdeep":"","tlshash":"f7f024988b44d91890a843cdb5b8ad89910e3096b2f2defcd451bd5484b48be1e1c36f","first_seen":"2025-07-19T00:50:04.655275Z","last_seen":"2026-08-28T13:11:51.078016Z","times_seen":17,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.097050d4b848b42069fb00e0b27eee804.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.962Z","timestamp":1787922661962,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.097050d4b848b42069fb00e0b27eee804.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/starslist.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.977Z","timestamp":1787922661977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/starslist.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-569d\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3OauiDk%2BX2rCfB4R9K%2FUqfe%2BiT9Qr%2BFrJxQpnfbq7wr%2Bwf9O2h3ThxJom%2FhqZNzrT4ZWTIn39XfnYwLA65yoMRmQAqohgngrgEWx5FvVg2CtR1BD%2BBeEvPCeOV2Kw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d5fa42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22173,"size_decoded":20094,"mime_type":"image/png","magic":"PNG image data, 2148 x 417, 8-bit/color RGBA, non-interlaced","md5":"78382c82dad9a7dd50655f44fb82f743","sha1":"5cb4a13ba952deeec34e3c4a5f0a1a424efb1cd1","sha256":"3bb15b8fd045ea090c833d5cdce05e097a4f9556f1a74b69232968b505895609","sha512":"f2297ebeeb0a47f59cd03b6b6079b3ad6c54aa1d585416a38ba5220a0a3a34b64a63f70b28460c34739441ba5237dfc5f560adcbdb00cceb83e5508197f687f2","ssdeep":"384:JojM6hkS9bZoCrjbih/rDyNRNMlOuDZ5lxYYWZLesJeDQu:YRN3iZrg3KOoZxqODQu","tlshash":"7ca2c01a9a5eecb1f92cf0313a834d30e9694452bde0c339b542c105feab4bc86b61a5","first_seen":"2024-12-26T23:29:40.083923Z","last_seen":"2026-08-28T13:11:51.07864Z","times_seen":234,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0967c8f03b18144808e35659fb827b38d.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.013Z","timestamp":1787922662013,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0967c8f03b18144808e35659fb827b38d.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getTeam","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.124Z","timestamp":1787922663124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"GET /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:04 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y18yjby1ASAOri5aKD7%2FpE8IN5e1QBMtVFHsO07OnZgZTV0u7V2PfOiw5xgL8xyvUMwxGRr47gJ4tH4hNnsxPbh7%2BX7lz1a6Tcj3zAWiTFpUdoSf382ZXIlGESRiV7Plg5%2F3sbHp5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f462d263181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5028,"size_decoded":2562,"mime_type":"application/json","magic":"JSON text data","md5":"020ead43700c19509eae6dcdddf63d42","sha1":"e3aa76bb5c5e0c96826a84574e6d9fcab40b9ebf","sha256":"4d61c44737ae1a32a5d6c8530989e08158dce41b75e7ce0d667acdb5813b7b1d","sha512":"218f0f2caa28d1183a6db9420c75f93502cb2225b364bc6d0cfdb2f89d3faa17d3cda703441785cc23cdda509f01007a9c134a1d4b958a7d194773753c288857","ssdeep":"96:uYWMp9UIAfhbM0ZU/PJNbrbOjubrbNjubrbtjubrbMj5:uYXaa1xZnOj6nNj6ntj6nMj5","tlshash":"05a14512a2b8dd3d5ea9988321f67ec4b26cb60ba3108c3c41558f0c99e197d4b7f74a","first_seen":"2026-03-16T14:21:50.126008Z","last_seen":"2026-08-28T13:11:51.079198Z","times_seen":19,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getWhitePaperSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.128Z","timestamp":1787922663128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8QNHEzQwMX%2B%2BcI27iA%2Bcpgl9lSqqJPzEz64ZIhW7pAbmxlksiJ7p5ufcVjhi%2BDUNHwy8%2FCTgNMaD7EkHKMyuepayVkK%2B%2FivnopwPw%2BDNqVnVzttKNV4OVHgU3ShG%2Fsa%2F6IGnpe2Pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f462d273181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":1078,"mime_type":"application/json","magic":"JSON text data","md5":"807a3da1bef70baa577f595c8e96c5b2","sha1":"b160a29c5c130f8ff29d9af93a355b16d83cfbde","sha256":"ac1b31128629ff8270da660165d708c5466873281a26fabcdadfc9d66ee351f1","sha512":"1cc652dbdd0d6749aa432dedd46c0f881ac2f1b486b4937997c627907ecb709fed1155b8f309a1c3e8d9fe6370670454baee1c54a6f8d269fcbae3d622d36ed2","ssdeep":"","tlshash":"23d02b27750990a045e02bccd52a1a0df09834bf2620754064614988aa5cefad40e8cd","first_seen":"2026-03-16T14:21:50.072089Z","last_seen":"2026-08-28T13:11:51.047896Z","times_seen":20,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_3.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.991Z","timestamp":1787922661991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_3.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-1476\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvqMJej8JfdzRwViDelqV1lpVI5UGpofugLXCaYu8Sgc8131vl5SNM2m2RQPtOb9vhJfyEQb135nY2Nc9fcxfaTI3wrqY1mRgufCdVYcUva9qdHhXlFAslxuSN0%2BEw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fb92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":5695,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"44e1a5b762465a0eb365f3f6fcc1d60d","sha1":"0acc5c63c3660a7c702ae6957c4b827574ea07f5","sha256":"186abff8e623d5232e4d46a8719269905148ee6b8dbeb47ee45878568fe6bf36","sha512":"f61cde643eb6a175d0e0e4435503a05d0d982e475ef31704096a9767e1bd2bd91e830e056f702626a919e06f6277119f4cbb4f282e9b0b014958ef79eaac93ae","ssdeep":"96:NknS2ia5BOmDq6Q0bXWl/dLdt/mTzv+zIkPJcFciGB:NknJBOmG+w9dt/2VEJicP","tlshash":"bdb18e6a8641ed4039cb8fc274e58847c371e048a3f0972b19ddda5e47378a8dd694ea","first_seen":"2024-12-26T23:29:40.099933Z","last_seen":"2026-08-28T13:11:51.056721Z","times_seen":128,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.keet138ta.com/ws/d41bddd1-fadb-464f-8c28-adce63aa1425","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.789Z","timestamp":1787922662789,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"GET /ws/d41bddd1-fadb-464f-8c28-adce63aa1425 HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pc.kta.capital\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: j7kUhNiqh1Mxl3V/mH+iIQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 28 Aug 2026 13:11:03 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://pc.kta.capital\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6QT+WUZ+yJpFCUira/WpKvk8Ulg=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qDORjbShrj6Jupvpc%2B8pphKkzKEKZacbb%2BxP4XyE%2BWq1GGpHPRTJ%2F6%2BiuOcWWHXobO5T47vD8Nefe2JZaqZSuYpgl0h4y9uEWMhOgW2N8D%2FSrNM%2FbMfFrfcgzCund1ZTshOvA%2BWxw%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3238f4279922efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":897,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":602,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getVideo","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.182Z","timestamp":1787922663182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.kta.capital\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zo8t3Yi6uuIo7PHMfbf%2FPDuufS%2F6L%2BS%2FRMdjPLbadg4QAnc2K%2F%2Fn7skzZxjhbHeMnD%2FRac7WvRsDmfUmeUoBbXhw%2BS656huleO%2FfNVfPp62T57GIoNSzBKjFUVuJR5%2BR2Stt5eJWBg%3D%3D\"}]}\r\ncf-ray: a3238f44ecfe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":961,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1787922663408","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"104.21.21.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.412Z","timestamp":1787922663412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 21:03:21 GMT","end":"Sat, 07 Nov 2026 21:03:20 GMT"},"fingerprint":{"sha1":"16:0A:76:9E:0D:F1:B6:57:9E:E1:CD:08:7A:3C:48:A4:3E:F9:46:12","sha256":"97:DC:B1:14:92:E5:8F:B5:6B:30:D6:35:94:2C:6B:62:0F:08:62:80:A4:F1:83:1A:0D:66:62:38:9A:4E:30:58"}}},"request":{"raw":"GET /js/ai_service_core.js?v=1787922663408 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Nov 2025 06:22:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690d9033-44d2\"\r\nexpires: Sat, 29 Aug 2026 01:11:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDVcRciuqfCOpSlPPcFng2jEz5%2B3YVzT7Y%2F9Uzax%2FhtM3s7RlMjZJYg8xvYiZ9TZnivSA9OBYF34nw%2BD%2FZmqXMlaUD3ITNGcTwYKQEynY6CuzZiuzmAn79qGl5xQwUlTG5Xy\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f465ecd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17618,"size_decoded":5270,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (496)","md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-08-28T13:11:51.079748Z","times_seen":269,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":610,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.008e51f1b5701476aac409df8d8bc0483.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.051Z","timestamp":1787922664051,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.008e51f1b5701476aac409df8d8bc0483.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 207901\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E96AFD363933E29518\r\nAccept-Ranges: bytes\r\nETag: \"19FC68BA1CDA660E4BBD36A6BF854944\"\r\nLast-Modified: Tue, 15 Apr 2025 17:57:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2461070667445855759\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GfxouhzaZg5LvTamv4VJRA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":207901,"size_decoded":208477,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1400x1866, components 3","md5":"19fc68ba1cda660e4bbd36a6bf854944","sha1":"5ba7086187ca0b8160e4f3b9f104e66c2fc08ce2","sha256":"e37e2990c4620ce594f239321f8dcdb5c04746365d26b8ee3e5c643465e62e1f","sha512":"c82813bb4428460fd29964c864109bb1dc9c37578b73ffc0c1a3077461f20c27e315fb9c5104f2c0db738e2fa3d7718f5b5b692fb442293c0e10ec3639a1d946","ssdeep":"3072:iBmsu6A5ZUf8TVD2h5GlPFayeMv7W34BoANdPSDPnqYxKRR:iB9NE6fqSh5CPqMjYANd6LqYYP","tlshash":"781412d9790a01e7caf643b1e0fb30945a6329cbcb45da0a0351de246c6a27d3fdf098","first_seen":"2026-03-16T14:21:50.122054Z","last_seen":"2026-08-28T13:11:51.08047Z","times_seen":25,"resource_available":false,"data":null}},"time_used":2534,"timings":{"blocked":-1,"dns":0,"connect":281,"send":0,"wait":288,"receive":612,"ssl":1352},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.103Z","timestamp":1787922664103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4 HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6799072\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E88B904430320CF920\r\nContent-Range: bytes 0-6799071/6799072\r\nAccept-Ranges: bytes\r\nETag: \"BA426146606C1037C96FAD76A9B0112C\"\r\nLast-Modified: Sun, 13 Apr 2025 14:52:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15547162464997827607\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ukJhRmBsEDfJb612qbARLA==\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48521,"size_decoded":49152,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d4b7ef869b2b9211da26e9de3d108918","sha1":"31f88727e7de02115d1a451850bcf7bbbcd3ab4f","sha256":"c67d22d5a90ce6bfb0f5a95758089a51f9bd164ce5f2cb9126a4fa748fdc99ae","sha512":"6127044612dea03743867726a8d3dccc62471902376750aee2f73772ca6f9beee04c2414e9395984f87b96e2ab51cf5f8ed01bb045642b5739f241af9cbeeb02","ssdeep":"768:raZ6Ap+yAexvZvTFOCAIqFFgmByDa5VfJnlxHRB7eUR+WoA4mpxJlJ8wfa49WgGu:rlQ+cvtF7AIEKMf55JlfBpFNp4aKgG7K","tlshash":"e223f192be28056e6795160c808f8dbc1bf6db56c189e82f261ae7193038ce544b35fc","first_seen":"2026-03-16T14:21:50.140898Z","last_seen":"2026-08-28T13:11:51.081169Z","times_seen":17,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":292,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:10:59.007Z","timestamp":1787922659007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJm1rEvuk3Uwv7r1pggPfz%2BawEvmfaxU%2FFrFGskK8CP65r1GORuES%2FNrImOsHhAX4awRRT6qVuIhwqStQAqGysYHTuDDYInQsvB9qLKfLw0ecNajyDH1GdNESmMFPg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3238f2b2bc82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3211,"size_decoded":1991,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435), with CRLF, LF line terminators","md5":"bb1900d006e87d86405b102816ef7000","sha1":"28d3919358e6385edacad8935c64ee086d7e6a90","sha256":"39947ae68752ab5627c113f8ee7d0fb3def5562efa17392fa8d64a0ecb152645","sha512":"2237a8a87d44c8f95deb99e4bfb466bff76174de0a9ef5d99baa8ac6a41c34fda7618cec1a1e4a4d0bb1a73d9fcd2718b2282f4c14708570ce89a0119b1bee0f","ssdeep":"","tlshash":"c56131a3a8a0896a1371092ba9d7f00cef905683851d9840b4dc50ff5fb2fd6ccd7a76","first_seen":"2026-08-26T10:43:11.03286Z","last_seen":"2026-08-28T13:11:51.082283Z","times_seen":8,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":30,"connect":23,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Low_5.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.994Z","timestamp":1787922661994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Low_5.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-4fb4\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgVspXBzQauCGWPDuaEp%2BekyEKpdDoGp8KSx%2FJOqtZlctlgrHOwwED1GCLy2hp4OFlmPjri69Qvox4GQHm12q3%2BWtg4XUT721g5vcyj0rcD1F3mh4KszaH4SohoK%2BQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d7fbb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20404,"size_decoded":20058,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"92aebd9e0e41071377fcaa664328e73b","sha1":"bca41b209ccb35004a1d926c4f5219e4529331c2","sha256":"df48430fe13782354a476bfa43769b893312990feec6ca44148f705d637d31ee","sha512":"28572d96317587904072f3ba65dc957fe5193e88121c213557038150b43fe06ebfd14eae7c33a5725ce1b05466de57b85eadef136f5d6b146ebe1cdbccd48694","ssdeep":"384:Anr3XfgBsR36w0j9hFNbDNe34iPtNPtshDwG4EMpUxgbRafnDCtDJbeDfibINeuX:Ar/v3oTJCDPzuRDDqCff+nATvqc","tlshash":"6e92d01db90bb4215e1f6150a0e9d23bb69356d024a0d571efcbcab1a8614fecb0f4d7","first_seen":"2024-12-26T23:29:40.10144Z","last_seen":"2026-08-28T13:11:51.057779Z","times_seen":126,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b9a2c7a34eef41be853a17edf7860b1f.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.020Z","timestamp":1787922662020,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0b9a2c7a34eef41be853a17edf7860b1f.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getAllSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.084Z","timestamp":1787922662084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FKFiqR7XfA3sVY9TxinZv4kW3xb6YmuKBe%2BMkOq1sNczzFtmKIWYgeL5Js5%2B7bm%2FdeshYWFOgpk%2FlQSXzx0xpBYIQu6yfgarH7%2FzA1rMlDncrAypSIrMXmppIPg9TumwPCtbMm60Q%3D%3D\"}]}\r\ncf-ray: a3238f3e0bec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":949,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_13-Dtre4Edb.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.171Z","timestamp":1787922663171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_13-Dtre4Edb.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-35c4\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uX2YyqoQlisLd7B7Kv0lqhf5fneeL9QSkfm1Kz8VLwhu7dQUPemualVHQiOeVVlhuEFj86afb7G1eKWNYVrE26LwL3AsqoQdgAtJQqS6Pc1tAC6M2xpfuTe7fVVZ0O1kTQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44d9292efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13764,"size_decoded":13440,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit/color RGBA, non-interlaced","md5":"2c6e67fc2e060d5be1cbe4adeee0101a","sha1":"47a256417b8b8c8f501e46f45201e4de3002f4f4","sha256":"1623e3d17213444597dfd17cf82b953938427487c41cebf5f8d24bcab6ff1045","sha512":"5926dca7f68517e2e11fb30da9538daaa83dd4f2c732443c077ea15717fc8a6dc1a5b86fd1d56f456eab45d9892f6c8a038d1f4f68e72128a08a3643eb27efff","ssdeep":"384:4RDnt7dGap/Krho5yWTenohUtYQZ+o96BJ:yDt7Hp1enMUtY29c","tlshash":"a252af2f7d000d622e049ba51dbf80d683b188d1c8d6b474e759dc12ba7e7bb15cee84","first_seen":"2025-09-04T00:18:50.331142Z","last_seen":"2026-08-28T13:11:51.083008Z","times_seen":110,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getUserCoin","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.352Z","timestamp":1787922660352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCgqLG0Cz5ixB7mPkAe40QZa4FKtv4IZdNmoCCHOcJDDL3s%2BKbizr%2FJaMVzdonBkHrugnIBxTgHA6w0h6Csl8vn%2BuNrGy5y2f79ei8OTV1y81G09kh2QjqXFUGV5KkUhgT7N%2BcEgrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f34fab63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323697,"size_decoded":67570,"mime_type":"application/json","magic":"JSON text data","md5":"c1486c55fc4dad8ed5e02b9dab3444a8","sha1":"e1c23216f61038ef4a5599a858e0268434d06433","sha256":"11cd7bc754ad2db02bb4aa50c145ddc127fbb836b01615b8ccf82bebf1e267a3","sha512":"27c0ffe656fd25029b45bf488679911a1f289e892a1e8994d37c57946bff7041469f978a40f02e43f1de69c5393f72ae54370b61f39b0c72ccf09feda29254da","ssdeep":"3072:BOJpu1qElcKSsDWrmsdy7i6c1xlX5sTCpXbXNpl6E6ovjGUpMQT+Z:BYclcKSRrbyOlQCpXbXNpl6E6ovjGUKn","tlshash":"e864bc71ced890cad9b5acd25fc3eed11e9a37c362ce5c82098e3e015bc2735916179a","first_seen":"2026-08-28T13:11:50.030434Z","last_seen":"2026-08-28T13:11:51.084871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-ac8b249e.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.373Z","timestamp":1787922660373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-ac8b249e.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODnNDGEpjmGY5t7G7%2FD%2Bz3ZFd0oQ01iS2EvljjhaB255uuXR2kb6hqwjptK5ZleuJaKJm4Zl2hQU4vMkOas83DG2JGZOHajZ5UeZPWfjDX4aGRCj2G0m4CZofha%2F3w%3D%3D\"}]}\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 249\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a69608b-1b3\"\r\ncf-ray: a3238f335e122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":1015,"mime_type":"text/css","magic":"ASCII text, with very long lines (434)","md5":"05cf73647486e7f039b8ee2a969d086f","sha1":"bb2d4ab5f6dc6d59f3ccf061cd362ef2316181ac","sha256":"ac8b249e91691778b76a0561f0c5c89262435e8e82d999079f088da70f8cc76f","sha512":"c7b08ed097868ffbeb9341eb41c30c24314609102b50ce57e0be1290bc55d1482d8a57a5c137031b8f7866af4f51c958a3264eac5eb2056054a08f540ec2a771","ssdeep":"","tlshash":"57e05c68504a5a586a33ac193e39670ed185f922d4c08248c746969ac4cba173e7035c","first_seen":"2026-06-01T14:33:26.29977Z","last_seen":"2026-08-28T13:11:51.085601Z","times_seen":17,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getCoinContractList","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.101Z","timestamp":1787922661101,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST /api/common/getCoinContractList HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLZ7UGSADCjX22AcWrPUZdjxQpce8%2BgfAiNGyPgrQaftoW9%2BU2yKjTndocEm7L27TtZ2KMSc7HZGCCa3lzCN0c1zAZbBc9j7g54i3kFF9MyqyKETZ36EZGn5Z4EZOZ%2FhzMiLgpqHkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f394b453181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/CookieConsent-BFrl6Lu4.css","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:02.837Z","timestamp":1787922662837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/CookieConsent-BFrl6Lu4.css HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-3681\"\r\nexpires: Sat, 29 Aug 2026 01:06:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 247\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikPn4NPsZxBAlRKJbJiFMVAbV7ZijRw67D%2F4G9v9bpWPfL4bQfYbNJAuZ7SJHzOKDrDSCARXmudh8kzK6E5gnaiSAlrV4BUD2q8Un9kp6WzUwv4OAF254I9mBbqlDO%2B24w%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f42b8c02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13953,"size_decoded":5274,"mime_type":"text/css","magic":"ASCII text, with very long lines (13952)","md5":"8d6e7f229697288b0196643f78a317b8","sha1":"0a7cac950cdb468f22826d2152a8dcb5eca6f991","sha256":"e8548c6de265d2e5b9b17d234496c6ecf072761e3322cbb11bd14bf1d1bec9cf","sha512":"564de8d4ab06c49acaff403be20e89bccaf343c327dd97d31c4276be565e5c267f02b319854234c4b8a32b67e8cef9403ee8a324362a19fb3dc1bdba7e7f4ee9","ssdeep":"192:fmUJbiKnehJTJdKSme+jeH1Zpbwyfb6913ZvOvibuC:+UbehJFdKW+SVZpbZfOZmve9","tlshash":"e15232a86300282352134e3656b59bb4de74588387d38d7ea1c1ed94c6b7dbd233f6b8","first_seen":"2025-09-04T00:18:50.35281Z","last_seen":"2026-08-28T13:11:51.086201Z","times_seen":50,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Frame%208-QBBarmw8.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.133Z","timestamp":1787922663133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Frame%208-QBBarmw8.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-117e\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOV9laWHqAdylgpLeUvUjgybxwWWVrhxpJQZy3nwHlBKOlCdu7lEtQ%2FAafQqVXbYtIa8%2Fs9zIMlSoaFKVzItCuXSR%2BzizFSKCAWwl9B3TRxXmBazYJWAxUsFleh2cqY%2B1g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4499182efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4478,"size_decoded":5290,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"e7cfd72af14d344bb50ac6a368b99779","sha1":"6d04bc54730a8609351237bafbb0bfc98a07e131","sha256":"180400a26cb69fe17d05af323409d39541eaa734be725363518ebdfb431b8164","sha512":"f981285edc92363ec2c515204f81363c61eb8c8b8bee5cae16b48d9a90866f64e7313813ba306a5d0a9d93b45dd9d7f62341667922f5a4b6d52202ed3573a4e4","ssdeep":"96:fSpM9j52pIOAY8e34ByvkJ8Z0LasASip3bJBK44pv6mb2:fSm94pIOAYgE9S744pO","tlshash":"27917d9dc1239d25cde6caeeafa46ccd7c8d7f009d25726880a5247526040ec4b3e68b","first_seen":"2024-12-26T23:29:40.08069Z","last_seen":"2026-08-28T13:11:51.0874Z","times_seen":128,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.069d83fe03b7e4581b7cb7ccddae1b617.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.652Z","timestamp":1787922663652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.069d83fe03b7e4581b7cb7ccddae1b617.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1609813\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E8CE63A833392205B5\r\nAccept-Ranges: bytes\r\nETag: \"BE0849BC722AD880BCBFBC2CF0E69801\"\r\nLast-Modified: Tue, 11 Mar 2025 14:24:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1605986791831193932\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vghJvHIq2IC8v7ws8OaYAQ==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1609813,"size_decoded":1610391,"mime_type":"image/png","magic":"PNG image data, 5760 x 1410, 8-bit/color RGBA, non-interlaced","md5":"068ffefed26b5a72168f158658b9a2f4","sha1":"2ce2db9abcb1feedddd98d5b53ad607a5b0df748","sha256":"9bbbecbbbdaa2afa4d2412b9208bc080d3c13597cb38dc80069dfea2317a14e9","sha512":"c741fff5018559eab2f1e2a738ede90b3ee6c15fefedbcf6d3126190fee129e61bf8a03eab11bd44aa1f904fa0bc0d99d152a1cfcc08b0cd811c295fd5cf3b2c","ssdeep":"24576:DcSET7hb2PQJj5R158yzygpkVNYCtmD8zm95p9pi:QDlb2PQJj5R15rXtb8zm95Zi","tlshash":"5b2523ee5475dd14fcbb09b867a33f37a287109184f8c265d62ab09e748bed818c54cb","first_seen":"2025-09-04T00:18:50.351314Z","last_seen":"2026-08-28T13:11:51.044735Z","times_seen":72,"resource_available":false,"data":null}},"time_used":2552,"timings":{"blocked":779,"dns":0,"connect":0,"send":0,"wait":294,"receive":1479,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0902c0b8bdf5048b381941e2d93c443f1.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.053Z","timestamp":1787922664053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0902c0b8bdf5048b381941e2d93c443f1.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 332615\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E968F57937358D787A\r\nAccept-Ranges: bytes\r\nETag: \"7ABADE8F0044AA819E40DDCAB808E34D\"\r\nLast-Modified: Tue, 15 Apr 2025 17:58:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10178048346791373546\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: errejwBEqoGeQN3KuAjjTQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":332615,"size_decoded":333192,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2060x2308, components 3","md5":"7abade8f0044aa819e40ddcab808e34d","sha1":"c9dac9f002183a18948e76e3c20599b21181ff59","sha256":"f7f14d170f5e9937b5688184fd4637c78628c9f09bdf665fb20b9b22b8ee421b","sha512":"58664412e84703804b769aa356a424e515036e4a2679e98bd80e6d1027680d2100913e54d8ca7f2e460bde33d3276797922b4a79d46f5377e3d09577da5619cc","ssdeep":"6144:euxir/BoparD62yybp5vVj4k/rNofbDt2ljAxasuGaibRE9prNdt:bko6PnvVcIstijkapGazlN","tlshash":"6864235db71912a7ef9a813774bf8210ae31c92f4902c3e25ba4156f256a3f0f59c782","first_seen":"2026-03-16T14:21:50.142719Z","last_seen":"2026-08-28T13:11:51.088139Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1950,"timings":{"blocked":-1,"dns":0,"connect":277,"send":0,"wait":288,"receive":828,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-206ba516.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.360Z","timestamp":1787922660360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-206ba516.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-2637\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWqe2UI3G3Fb9E28Rad8iih035Y306asbYxdQzHgMj4Y70USAh7nNslDDq6NJmlHx3EZBLxdOk45h1PaBgQe%2BxbKedtGb7j56uaY3uyFlB%2BfmyQDzp6hhfrV%2B4FJxA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3238f334e092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9783,"size_decoded":4703,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9780)","md5":"4a7924fedce37c7f902c39baf54f00a0","sha1":"c00d0cc683df29d4b4a12ce7dc6f965deff79e61","sha256":"1c50da7936c89b1d4da56056a83a38707b344a62e483ca15b2b9f7b86a2d8110","sha512":"41bc5da2409d8fd15c5d8b3c25196c95bbf8f0cf9d19ac2b7bf8bc1991baf56d0d04546f8bcbe20d49f20ce3c16d048cef0f7a05c930285f2bd3eb9eccdad89e","ssdeep":"192:cUx+gk5Bx+S8k5TdOwuHzxMhyu2wEh5sUZ0BLKrOzsamehXDpjAWp:Hxi5vf75pHuHzchEh5sUZ0BLKrOzs+xd","tlshash":"98121a06fc16c93ecef2565ce0d90030718a1fca5016d4b6b1bfb81a17b9db4a79272a","first_seen":"2026-08-26T10:43:11.030825Z","last_seen":"2026-08-28T13:11:51.088808Z","times_seen":8,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/nzdusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.976Z","timestamp":1787922661976,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/forex/nzdusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/remixicon-BVvFtaex.woff2?t=1734404658139","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.085Z","timestamp":1787922663085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/remixicon-BVvFtaex.woff2?t=1734404658139 HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.kta.capital//assets/index-fUVOazKT.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\netag: \"6a053cf6-2b2ac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 245\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTl4IQL%2FLUxcc%2FgkmIOSUWRmBHJ0%2F8xX4RiFiv7QK7m0zk3BJcrjybNDe4dr8aZqY4zWm4Ic8g%2BQ8eyPGHQXjdhsMIjLhPvqsZ%2FFl4hXAC2VYagdthKvh3iAtixAk7E3UQ%3D%3D\"}]}\r\ncf-ray: a3238f4448fe2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 176812\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176812,"size_decoded":177567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-08-28T16:33:04.964035Z","times_seen":2517,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/test-banner-3-jU8dGHsT.jpg","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.092Z","timestamp":1787922663092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/test-banner-3-jU8dGHsT.jpg HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-6ae8a\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJLxjOWrbXPdWAV0fQFg8vnhnywVOnlZa6Z1HSURPat7DG6%2FZw%2Bfmg06h5jamQTUuBcZr7JUJVdWppfwjxkSFWfxzcr7h4WGnkCPqKLl1KMKnli90gSx2T2F8KzxOBtPyw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f4459022efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437898,"size_decoded":428661,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1980x1318, components 3","md5":"61a1eb6b91fef987f87a82431a97f32a","sha1":"250606929f84d1920041751c30d14e850b726984","sha256":"576931b330dda52610362489dd790baa72fa15cee647e3c91f11f8a2c6ac70c0","sha512":"1a5617a2a496c60927e92dc1702ca93c375ff6bb74ef9ac49422854bc56ba0eb4b5c1196774f6900f0132ea2079c82c51618f386a4cb6cec92ae5ceb89e0e441","ssdeep":"6144:86/BLL9ck/rc22A31IfRf886D0+wfrn4ildqVtLaF1SoiKEPBt+74sC8hOZW3bH7://3cU31IfRU86D0lrFvhnEP/sp9HQY","tlshash":"79942324fdc1a597d1275ff7a85a39e94c3643d85a8002db78ccdf022b971ec66af211","first_seen":"2025-09-04T00:18:50.346046Z","last_seen":"2026-08-28T13:11:51.045795Z","times_seen":62,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.03af07a32a0574bafad28820ad1dc5ba7.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.954Z","timestamp":1787922661954,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.03af07a32a0574bafad28820ad1dc5ba7.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.028ace72beb944d4eb6ad4fd908f13e40.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.955Z","timestamp":1787922661955,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.028ace72beb944d4eb6ad4fd908f13e40.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getUserCoin","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.382Z","timestamp":1787922660382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=509cvb4GK5MtOhsCzc3dSMnEjoXbOUN6gZW9HI9byRhJLEV6Wdt%2FmOjLqxh4TXdoh1ys8tKqmOVRz2B%2BlDFwR1SL860RMGamTdq3nC7JudWIC9NzOvqCAwQWi6EF%2ByORoBO53fLZVA%3D%3D\"}]}\r\ncf-ray: a3238f337a803181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":935,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/charting_library/charting_library.min.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:10:59.858Z","timestamp":1787922659858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-2a6b\"\r\nexpires: Sat, 29 Aug 2026 01:06:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 251\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHpkwRxZwRB7KG9VIOfC9vwqQfgkncF6bCmWBHrpRQ2Qed3xUnDD7e%2BQ9Yn2c3JVCvmMw2RqSFVJBUNi6fTXRHpTAaAsoo5MLhS0xhKv63fRjQeEvEQFMugySuhNsg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f301d462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":4242,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-28T20:21:12.205695Z","times_seen":1382,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/vendor-a26129ae.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:10:59.864Z","timestamp":1787922659864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/vendor-a26129ae.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:10:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-19f3f\"\r\nexpires: Sat, 29 Aug 2026 01:06:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 251\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blnL12yYG0x%2Brf5wi5URPleT7V7SuAzMgexVMp8hbrSvZOepuuYqvLkL%2BL49EttGE%2B%2BrcK3Jyb9luhe27097LegqR96wt6YE5kDkIMvaYtWSnF2ed0NYfdsZzWg8mQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f302d512efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106303,"size_decoded":42807,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"d98957f7dc66ebe08e7989195c922966","sha1":"5e64a3972f92b2399cc46ea9aa14f2fc56269d7b","sha256":"a26129ae541645a0121f9f6863d513bc1a8813dbc5ac9eb13b167ed4c7a8300f","sha512":"be20926b774b052879f74ac1af8a80c68f33c4a456fa8553b28945b00efcc27a606b2934b3c05594c447914d82597cc28289b1536bb90153958759072aaf7488","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/z/VX:BnNIClDsIxuVS8nR","tlshash":"f2a3f7a5a9c091fc6f2af265ab8b65dcf13cf671cd40daa4f105515c0ec7bf50223a2a","first_seen":"2026-01-02T01:29:05.251314Z","last_seen":"2026-08-28T13:11:51.090701Z","times_seen":62,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-c03a0534.js","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.366Z","timestamp":1787922660366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-c03a0534.js HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjYZ50ffsOkJFnlXIbPPk7wlwl5J7aUTZgnPtxMbhWF6P%2FayNPS2OTvLHN1Qt9KYR91Fc2WX5aB8QdM3Nz4dl%2F3VJ0NtTIjlBKR1IkjMO0qbID7%2BH9j6h1tbRbzl5A%3D%3D\"}]}\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 249\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a69608b-308\"\r\ncf-ray: a3238f334e0a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":1264,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"600ad565a05ad65da5c87288e22853c7","sha1":"bae28e318a8edf044903806f5bd8b123bd7f2c12","sha256":"c51d47819da1c8f2edd94bfcf6939b4db1e7d063923930b3c895e9f7a4ba0870","sha512":"62d9eda2ac6631bf3c9f2c3cbb16b950968750616f7207085c840293e89676cf75cbd192fd76d42060e8db9e4dce9df42567c61dca00f914ce358b1c86319fcd","ssdeep":"","tlshash":"3e01d0f9fd0ccf7b2fa3065512d02641100a0fedfa1019e55c977e651be5950ca9eb1d","first_seen":"2026-08-26T10:43:11.00092Z","last_seen":"2026-08-28T13:11:51.091295Z","times_seen":7,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0cd72aef4ba2b45c4890e26079280703a.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.021Z","timestamp":1787922662021,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2.0cd72aef4ba2b45c4890e26079280703a.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/option/rules/getVideo","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.081Z","timestamp":1787922662081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7wXi82SioBl27J9oSVHe%2FecYvgdMO7RD1iIxHAvrdl1%2FiviD6Q7FJixvmm7RkmrMb%2FU6l9nmpjBzRp7jMMwreBYp0fr1AzbhnJOxGoAs9eUF7itRdPb12awwYTv3UUxW28dXMIhcQ%3D%3D\"}]}\r\ncf-ray: a3238f3e0bea3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":944,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/common/getWhitePaperSetting","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.083Z","timestamp":1787922662083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"OPTIONS /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baw1GG0oeTkM%2Brk5k4DwVpQiGpW4vkqrTEcD%2B4tOzi7AbKeFiikp8EAf8UV9HiOKHMjejShKzzs16qru7Ut3UM1Tol7lE1PR4oH94eIQ%2BPlPaHtVwwi5WZ5qMhctkyVo46LPDtRXSQ%3D%3D\"}]}\r\ncf-ray: a3238f3e0beb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.keet138ta.com/ws/3b8a0b09-b481-4524-96b8-2546fcddc84d","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.334Z","timestamp":1787922660334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"GET /ws/3b8a0b09-b481-4524-96b8-2546fcddc84d HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kta.capital\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /3pWC1yrar07Ol2q2hqXHg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 28 Aug 2026 13:11:01 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://kta.capital\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: JtvwJvvPtDzTxloK2HFD/Jlt6SA=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUP%2B1zh9EZAJHeRgtUnF1VI0qTDZNxkBzIn0%2FUeijceOfofWPVjrY1rgfBuxvmr8WTl%2Bc08OVI9rT2GFhR32MGHxl8piQHuWvLPah2tXdhNkgbyVBoN6564x51rlRKU%2BAHWlfI3cwA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3238f336ff456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":886,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":31,"connect":29,"send":0,"wait":633,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/assets/index-aacb6d7a.css","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:00.369Z","timestamp":1787922660369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /assets/index-aacb6d7a.css HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 02:08:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69608b-112d\"\r\nexpires: Sat, 29 Aug 2026 01:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1ZjqHNDaHYuGt%2BUiHbhHYLsLHLdOfCSnC5UgaoIjCrJbAgE3q73dNvoEgX%2BjRan%2FQvLb5%2B6XFsXAHpm0LtxB7SARDzo4W7f%2Bsj3HpHml%2B%2F%2Fl0nRq6IIT%2Fh3%2B8HAog%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3238f334e0d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4397,"size_decoded":2065,"mime_type":"text/css","magic":"ASCII text, with very long lines (4396)","md5":"b33a246707228a0f7ebfc37274b5033c","sha1":"0830018fb5478a0ba2d5ce45a71eba649acd1c3a","sha256":"aacb6d7ab839be0d88010af890243521ebe5f51791a85826a105a23614b63c90","sha512":"3df5f2da1f98354a96e331dffe03f9eab80ede1d3a022109d6e34abf5b1c04fcea008723a7ca0f2ead6c3330af1e9fbe121581b4e9a240a260f13c891262952c","ssdeep":"96:UZMxRZ0ZxZLZSZgZPZYfHgmzKxaCCXtly8V:UgSzFEudufAmzCCXtly8V","tlshash":"4991322df38c20392d7bc28a7c4c9accc152fe61d1826bd5fc47aaa50acf6d7265054e","first_seen":"2026-06-25T16:53:33.852711Z","last_seen":"2026-08-28T13:11:51.091879Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/svg/light/notice-icon.svg","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.952Z","timestamp":1787922661952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/svg/light/notice-icon.svg HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-54c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5edNfL1YNgYaJwkEYP2x%2FPFqZjg5coWy7c%2BSndF14Uo3b3KL3TsbHzkTLPCMCh8BXH0cfaZOu6w3yZ5FX2bqnJIgbBMY9Jnu7Iz1Gx95Y%2FBFLpIMBN0xp474AcKTlg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d3f9e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1356,"size_decoded":1423,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0983e0e7a212d0826cf476bf047a976","sha1":"b717cde201db45dc910c89090278446b914b56ad","sha256":"ae29f7ffbe0a11ec0e5d338fb36f6266700ed0d834bfe38061bf13d91728afd9","sha512":"8cbcd468b7f028030445418c46f65970db0fc1f061a9c0bcd983b76649042942345a8c1a780232ea1b5f98a748d099213468fd34d964f5bf43a84409e6b3056e","ssdeep":"","tlshash":"3b21dfb59310a64ca120d76cc3dccf88a52df187a2a20469ffa117974d25477ad5c255","first_seen":"2025-07-19T00:50:04.675303Z","last_seen":"2026-08-28T13:11:51.092467Z","times_seen":17,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/stock/MSFT.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.973Z","timestamp":1787922661973,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /virtual/stock/MSFT.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/logo-tricolor-white.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.978Z","timestamp":1787922661978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/logo-tricolor-white.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-cf7\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 249\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmoRBKa9Uxta0cjfpJ5Vc%2BbNzeJG5W5B0ygSEH1svLuSwosFq8nX8eelcxXosYQjKO3i%2BnVyT%2BZnI9sWO%2F8NSflg7COafde4d%2FjHiY5MDzPtzFSwOQhPCUw81dERxA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d5fa62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3319,"size_decoded":3866,"mime_type":"image/png","magic":"PNG image data, 100 x 25, 8-bit/color RGBA, non-interlaced","md5":"c723c86eb56ae36a46851b5f733c5d99","sha1":"986c89b4d163453e083c3370980c94df37ab0d2c","sha256":"65fddd5e6c3b32add5708cf002e3f4f94200e58c36a75d86041960b1873f7bb7","sha512":"b53751950bff0ee08d4368a4b71a173de2c18510ca94c835711f5c7b831eb21a0ad4e79350f34b5aa2ddc7b406a847d5cc01b2257e4155936bfb937cb54e0470","ssdeep":"","tlshash":"71613a09bdb15602a5c8e5a654a420e7851e0ec19488e9f9bdcfcce348346fd806b4cf","first_seen":"2024-12-26T23:29:40.10466Z","last_seen":"2026-08-28T13:11:51.093761Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Frame%202.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.981Z","timestamp":1787922661981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Frame%202.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-1904\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyfZdJyCLThoVe0AsAQPZpLOCQOXdvKDt0ZdtjoY1qMHNYIAs7BKpodzf8yR0VAtJewBbhF87YFzHOkNY31XWzCObbY1iQtII%2BG8DArLwUv9a6%2F7thEofplp7QvFcA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fb12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6404,"size_decoded":7160,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5f6ce860b906f355bed0f55e2ae2a88","sha1":"044d4a88650ebbeb71b5ba01dae0993e64ea257d","sha256":"2e5a4148f2f24b69f934319ce6e397de373ccdb3744307d44a9ef747973b945b","sha512":"98b22901d2a1829c6d1953b0a3ff3306f939e2966c166f9971a3a29a95c27c844627c3edeabc4dc7148aeb0a47b8e685e7bcc9abf756f179e5dfe0f563a95fde","ssdeep":"192:MlfDJ/atKb4jNpdL9w9mjidVbFTC7E+XNS2:QM04jNXL9w9vdV6X02","tlshash":"8ed19ef7971026a7fa9855c615356cbacfd4a6034bc72608013a76053dd6728ff0ba86","first_seen":"2024-12-26T23:29:39.991003Z","last_seen":"2026-08-28T13:11:51.075174Z","times_seen":128,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keet138ta.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.keet138ta.com","domain":"keet138ta.com","tld":"com"},"ip":{"addr":"172.67.181.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:02.052Z","timestamp":1787922662052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keet138ta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 17:05:17 GMT","end":"Sat, 24 Oct 2026 18:05:03 GMT"},"fingerprint":{"sha1":"F9:E7:51:72:12:2B:77:47:D7:95:34:5D:CF:E1:B0:C5:19:97:CD:A3","sha256":"F8:E1:EC:50:1D:66:1D:E7:AE:9E:16:25:C2:D8:18:06:4F:25:FA:4A:31:DB:B7:EF:01:42:70:F5:04:81:70:6F"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.keet138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://kta.capital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kta.capital\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CDRSU51FkVDzS8y5ky6RgfKyTc4im%2B7FhYYRyfa45IKv0aVDsNM2nPXShpoY8esOoxxYXQ6evXM5RIQAZeGDB0xqkvvyd%2F1yka%2FiF3s9rqqKuQvhcB6QyI4sfm%2FpAFG0bKMn8PMWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f3f4c193181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":1995,"mime_type":"application/json","magic":"JSON text data","md5":"b4c9bd0d3d6d71c4eefa81feee23954d","sha1":"105f98507004a417d47feb40f8696da76866a5d4","sha256":"6971e165a2d960ddc328cd1a88d153a114c0c8ce1cc090cae4a52362e25ef91f","sha512":"ae4b50376728bdf544729932c786f94158a0a09239c688b0502a645b1e8963054375796e46a4668b82e819916a3a233089798c1739b833663184ff7cad4ec7d1","ssdeep":"","tlshash":"5e410d8f23688f75084614c326ed7ee6b36e525b86218c380556cfcc83f1ab9176b640","first_seen":"2025-08-26T17:46:37.257503Z","last_seen":"2026-08-28T13:11:51.09444Z","times_seen":72,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_vr6c0qqm.js?v=1761548384","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"104.21.21.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.318Z","timestamp":1787922663318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 21:03:21 GMT","end":"Sat, 07 Nov 2026 21:03:20 GMT"},"fingerprint":{"sha1":"16:0A:76:9E:0D:F1:B6:57:9E:E1:CD:08:7A:3C:48:A4:3E:F9:46:12","sha256":"97:DC:B1:14:92:E5:8F:B5:6B:30:D6:35:94:2C:6B:62:0F:08:62:80:A4:F1:83:1A:0D:66:62:38:9A:4E:30:58"}}},"request":{"raw":"GET /js/ai_service_diy_vr6c0qqm.js?v=1761548384 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Apr 2026 05:10:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69dc7aca-71a\"\r\nexpires: Sat, 29 Aug 2026 01:06:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 278\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Fku75timcNjiUBGU4OZDhzteOnJ1hjc2IAufdbPX0%2BRFuqMjACgmx74G5wiaJDdYb%2BOc8kpcJX8fbXWrHoHrCCzb0ldZsrt%2BsXFzZyI88PyCig8IJ2TfGZ1qyEoy8P%2BBOx8\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3238f45deba5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1818,"size_decoded":1407,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"55d2a0b3b6f4d855a692a9d7d057d60e","sha1":"3102e656253469f3e6ca80ae62ae803b7bc2a4f0","sha256":"00c156b04b90734fcfd52bb7b52269a12fc14b3f3c48c19394badbd8d34c713f","sha512":"d0a6ec58a9e25dd0fab7cf740000d5e8e8cb5497af3d0e5874ea0337f224e3277e2ca17170b9fb5c129231d56c1ed1c05454d20e74d672a8067d7f94f55fd3ff","ssdeep":"","tlshash":"fb31dd515e99c5771933322a9b3ba228ff3117031901de033efe57009f31e85aa65ec5","first_seen":"2026-06-01T14:33:26.248719Z","last_seen":"2026-08-28T13:11:51.09508Z","times_seen":13,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kta.capital/resource/images/light/Frame%208.png","fqdn":"kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kta.capital/","date":"2026-08-28T13:11:01.986Z","timestamp":1787922661986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET /resource/images/light/Frame%208.png HTTP/1.1\r\nHost: kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jul 2026 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a696052-117e\"\r\nexpires: Sun, 27 Sep 2026 13:06:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 248\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlKt657ptcUCeKkNM%2Fm0GgumhAX9XamlLYV3O0YIDy5BPZkitkRf9kz%2FxKzBX6k%2FMOJ8aURg0NoxLECQdrvRm%2FwlNE5Q2c4Dyuz9bhEm6UC8lNjBeB1Zbs3OHhtCdw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f3d6fb52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4478,"size_decoded":5286,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"e7cfd72af14d344bb50ac6a368b99779","sha1":"6d04bc54730a8609351237bafbb0bfc98a07e131","sha256":"180400a26cb69fe17d05af323409d39541eaa734be725363518ebdfb431b8164","sha512":"f981285edc92363ec2c515204f81363c61eb8c8b8bee5cae16b48d9a90866f64e7313813ba306a5d0a9d93b45dd9d7f62341667922f5a4b6d52202ed3573a4e4","ssdeep":"96:fSpM9j52pIOAY8e34ByvkJ8Z0LasASip3bJBK44pv6mb2:fSm94pIOAYgE9S744pO","tlshash":"27917d9dc1239d25cde6caeeafa46ccd7c8d7f009d25726880a5247526040ec4b3e68b","first_seen":"2024-12-26T23:29:40.08069Z","last_seen":"2026-08-28T13:11:51.0874Z","times_seen":128,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_6-BrdJwosH.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.146Z","timestamp":1787922663146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_6-BrdJwosH.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-26d4\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWrDeJ7RaRMHDI%2B8EYMQnid9ujKwLK%2FMfZThfR%2BrvFxYkIda6jZi6nIpsENu0XtqOI4yqTK33UNhITUWecUr7Q2jEhW6g0re24rgvUT7DCO2rabO4pLvBPCMm0NYQLrgLw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44a91d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9940,"size_decoded":10759,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4e6adb95ea32bce12b23d17e5c0bead","sha1":"00ced7819afc7267f587e68ad7dfe84c7eec7261","sha256":"b13acac1bd74d72c21facafcd3dbf6bb44dbb271b23a0df6a228eb28b7e337c9","sha512":"30f9dc0634ab618910888f5b34671d727e6e853facbee428b3e0177cc0dc3defe2f26dbaf96997e6bc351c241335da5f320d8f97f034269987cb2e99b4a1c838","ssdeep":"192:fS71Xz65HFwfkYKFafIGQA0GIQuuUa3b5hevzXLOU/8Ea4FM5OCZ:KNzUHFwlyafIGQAx7Ua3b5hevzX0EXaJ","tlshash":"2922a04ab28e49fdfc8a605c80b78d78764c2831f333e6110480f6a653941f756f3217","first_seen":"2024-12-26T23:29:40.06096Z","last_seen":"2026-08-28T13:11:51.037584Z","times_seen":125,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.kta.capital//assets/Low_10-oM9rJNnh.png","fqdn":"pc.kta.capital","domain":"kta.capital","tld":"capital"},"ip":{"addr":"172.67.223.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:03.166Z","timestamp":1787922663166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kta.capital","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:29:50 GMT","end":"Sat, 21 Nov 2026 13:29:49 GMT"},"fingerprint":{"sha1":"99:CF:9E:8E:88:44:23:AA:67:B4:B6:B0:20:FD:F7:78:3E:F3:BA:2F","sha256":"32:99:CC:85:85:CE:CA:FC:E2:A0:DA:36:7F:5D:36:D7:E8:73:5C:9E:89:AA:9D:E0:E2:DB:96:EC:2B:5C:DD:C7"}}},"request":{"raw":"GET //assets/Low_10-oM9rJNnh.png HTTP/1.1\r\nHost: pc.kta.capital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 May 2026 03:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a053cf6-1e85\"\r\nexpires: Sun, 27 Sep 2026 13:06:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 245\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zReOsPyyTkNBwgmvCoqxgCrPe4xd%2Bppb4xWWr%2BRC8prVgq9067cpw7aiF5shZEheUwd0kYQehyU0I9ZNux1IsiVkMI9TlzZ66oC64%2F0F2qKXkD7gCyZHd%2FtDprqJ79QlSw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3238f44c9262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7813,"size_decoded":8596,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"ee91dd1f10c738a951cdd6d6f56c6d2a","sha1":"0f18b1339f62b322f0ca87bba04d7274d9cd6327","sha256":"66bca87cc8e292cc6a136f92fc1cf68f613195bc9b393aa90de3688565521bc7","sha512":"f6c643c252ea556ee6eeea30c1fec6bcb34682601d0dc99435acfd70ef1e48987c5b01a83d327343ba59a0f4ebcd5a49d3cd3b61db9a0c54faaaddc8c9a493e1","ssdeep":"192:fStX5dARBEEYxJg1L4f5aZzsPhY9706OTHEL:K5LEEEYxi1Uf6IPhko8L","tlshash":"7ef1bf40648a2e63661e7d48c2e0c5b557b655cf5338c35bad3210fd15e6281ee39ca7","first_seen":"2025-02-12T08:38:06.881528Z","last_seen":"2026-08-28T13:11:51.065097Z","times_seen":127,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"pc.kta.capital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.081cb6f05fd9541cc91971233ed4a0f7b.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.kta.capital//#/?from=mobile","date":"2026-08-28T13:11:04.054Z","timestamp":1787922664054,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.081cb6f05fd9541cc91971233ed4a0f7b.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 13:11:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 85901\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9188E9AB67323934ADAAEC\r\nAccept-Ranges: bytes\r\nETag: \"A6C2AD33EEF6A1D2ADD368C7D2C1E0C0\"\r\nLast-Modified: Tue, 15 Apr 2025 17:58:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4452291654472597505\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: psKtM+72odKt02jH0sHgwA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":85901,"size_decoded":86476,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"a6c2ad33eef6a1d2add368c7d2c1e0c0","sha1":"592d2bc5ea3c96bd5e6e35a91da91c630a50e63c","sha256":"bd5ce34c72f08275243c323800b047573559fe20ec5c9f843d9c45bb91575df1","sha512":"44fc3ac6b7a846bdceaeb1eda899c5cf54870042cd8bacc553c15fb5e6478dce7e51cf7bacb4bc80353866b53b0a427b7cfbb74c39e9007bbff0e1915d5bced2","ssdeep":"1536:I4Iwx/ZKv+dLIzaF4cNmhgt1Ao+GBilaUeMLCUjqST7QRceyk6u9iGKyBERR:zIwxkmGaF4cNUgt17seUjqUkVDBe","tlshash":"578312a80697c2e9cfed953f9e009b5d0d15e663de40a2c572abcb3f514a80ee191b4c","first_seen":"2026-03-16T14:21:50.133022Z","last_seen":"2026-08-28T13:11:51.095817Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":-1,"dns":0,"connect":281,"send":0,"wait":286,"receive":286,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}