{"report_id":"233c0532-133d-4fac-88b5-aae4cc102161","version":0,"status":"done","tags":[],"date":"2026-10-13T12:12:17Z","url":{"schema":"https","addr":"slon911.cc/","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":0,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"slon911.cc/","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"title":"KRAKEN","dom":{"size":19589,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3278)","md5":"6add2a310d3c4e1fb308d8fef65db461","sha1":"c018ab045f5718453e7a019fbfee18fd8f2db56f","sha256":"a0c136fe9c17fc6be3ff372d36ac60524c019eb9031b3eb93dd639efb6b4cd45","sha512":"a3e27f912df310b5811b60ac69f97e52bce3179144b38cdef3ae5288f19ffaa09c3297dc2fe41d7c7dc93b5952461b59ce76a6b3e8fc93261836d2ee8ed94a93","ssdeep":"192:NVyImrtivhdoLn2VYBsxJ9/ttEkpaUVniN8wrjOBfQuuFpj4tURcIp:NVcpKdNL9/nwbXO8FqtURcIp","tlshash":"59920c67f4da1055240382659aebbb7c397da013a7008e70bead33784fc87db6562b4c","dom_hash":"domhashb21de7dc031153df23c4f5117cb46f0d","first_seen":"2026-10-13T12:12:19.837025Z","last_seen":"2026-10-13T12:12:19.837025Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon911.cc/","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":0,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T12:12:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"slon911.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"slon911.cc","ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-10-13T12:08:52.534887Z","last_seen":"2026-10-13T12:08:52.534887Z","alert_count":4,"request_count":4,"received_data":33121,"sent_data":2140,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-10-13T05:03:16.804395Z","alert_count":0,"request_count":3,"received_data":5811,"sent_data":1662,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-10-12T23:27:52.507128Z","alert_count":0,"request_count":14,"received_data":725001,"sent_data":7043,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vsb19.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1345500,"first_seen":"2020-04-04T21:02:07Z","last_seen":"2026-10-08T22:07:33.811081Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1100,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","size":4539,"data":"","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-10-13T14:44:22.370569Z","times_seen":3730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-iframe-styles-B2khbVVL.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dcd487e101db97c06c812d909d74da30","sha1":"f19ce228c383cc5cce52723fcc654685e25aa5bd","sha256":"9c6010b0a736f85108806df05b0ba6c98f45d95f037f7f96c546b67d59e916b2","sha512":"47241b0ca4db52bf7edcc67dee03fc101988927218f133492f8f000b74db1c0ed8c42d43e0674651539e876d7575102f9994cb4ffc0b05d0b07a8bdc640f0188","ssdeep":"192:V8+V00Bv2jxZbTsEcAl61qDqXfKuOmrGi8Fpfs/xmk0pEeRYRPgTxmd8AAX:fV04OjDTXD9cGiupfspmk0pFRYRoTxm4","tlshash":"fd12b722f2ef3066b254494c55f7bb783a2d62217f118df16564bf3d1b80ac66021fa9","size":9482,"data":"","first_seen":"2026-10-13T05:37:59.033692Z","last_seen":"2026-10-13T14:44:22.39885Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-messenger-components.es-_Rag-kfX.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dbdb2bb3646ae4c99412377ce1d8aa2f","sha1":"1976f92b3db8aa0e38da09af38a52d5eed7f7bbd","sha256":"fee51944dc9cb2aa47cb13a607c851c037a9f302a71ee2bf46c5767419004ae6","sha512":"0da491b6f6f403b0fcdb3e518a10ff8ba879160e450beaee90e3486e786f6462058f8bcf6f5e56fe9f7778a473b27636e76ba5f031cf3235d42556f3de7b4c5c","ssdeep":"3072:zFtH8S+Rao1Q5Ar6VKkOPPsfpxiRo5Pip2li/T:z/HD2aQQ5Ar6kMxhPiImT","tlshash":"46242bd0f647e6f8d5e6eb88448b9212322f137b6df4c6d0c0a4cf992194f68259ef58","size":226564,"data":"","first_seen":"2026-10-13T05:49:54.455114Z","last_seen":"2026-10-13T14:44:22.369645Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6aa451ae279bff344394ad36/1k28tu5af","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf91a01bee09f00c698a6293ba17fdcb","sha1":"21647156414c5d450dce157bc1cf8e0a2f77c89e","sha256":"8bab7e2f2e21f3ff4f84e9a87bc46b1033e4cfc62873d4b2e409528dd2ad1f74","sha512":"39c9c0bd8ba5231bc693afe0993ee61adb496b98f48da86f0c9467cf9c76bf57efa63afcc6c1c209a8be6a93f19c57d20c731e9627059fc3cbfa2fbb29257b28","ssdeep":"","tlshash":"702147f57e5a263baa3150e92eaafe0835b2015704185c85460ce8d6365077a171ade9","size":1159,"data":"","first_seen":"2026-10-13T12:08:57.077087Z","last_seen":"2026-10-13T12:12:19.851666Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MinWidget-Bx7FCqWR.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3f0fa5a69a1521e105b2ecb23ec2322c","sha1":"cda611fe912096d64e2fe5dd569b1038f10613bb","sha256":"6926e04c83e5e7639efee94af959383e7a5f820f8a25488fa68aa35aef95d976","sha512":"d1052747cd869ab3037986774ea43f508611632d8ffa49785c63ca920b14e1bb983f47caffcfb3ab8617ffa84d166d4a0216e5b1b6a21607dd1ff1476d83b38f","ssdeep":"384:28NZA6OHofI+waonyDpyvCKDswetZ8R3G5xlXkuEm8ZOWI:TNu6OIAHvyDpWDNAbk9OWI","tlshash":"c7421866f284a068c730d28590d56d7c222d03b54f408dfaf0b5aeb703e4cc8647abbd","size":13016,"data":"","first_seen":"2026-10-13T05:37:58.782396Z","last_seen":"2026-10-13T14:44:22.3789Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon911.cc/","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"f374b6781f21c026e120b3bd1c60f079","sha1":"4d92a49d29cb1a163d5e3a05ac3ac7489bb01ec3","sha256":"857211f42b397f433633942dbbf5ee4c3803e7367ba3399e688f0165d25f1890","sha512":"474c32188306ddcd6651dbc23e16b290ce4ce27093279cf702e7fe127be06bec59ed69c84c3ed1f232ff6a689d3246e36b6a83a7ee5ad954ed563f6097a992b2","ssdeep":"","tlshash":"59115908e4dd3a12a257f1bbc5eb7a0c12b92037e4169210bc1f45888fd88ad875bf1d","size":1033,"data":"","first_seen":"2026-10-13T12:08:57.087947Z","last_seen":"2026-10-13T12:12:19.881611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon911.cc/","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed247a732534ca0281be3780b018addb","sha1":"9f12e6e3c19c88b660f24033478804b85efe5b5a","sha256":"ac5027c008fa619a61fb340d200f23c110b40f367c5171ac6389201b6cc16c7b","sha512":"abcb976c31acc911830926f4984486097f3bd2e6a16fb7acdf68699825f62a22734dc76fc5fba3535b0c6aa998bf0c1285832d364f5fa7289756d8b15c9e8a2c","ssdeep":"96:8pau7hdot5ntZSVtZMtsCv3jpUt94BqHJTh5VD4lVZt5klBD6YEkpaxOVeJeign:2vhdoLn2VYBsxJ9/ttEkpaUVniO","tlshash":"ca02fba3f4da14652453e13586dbbb7c3939a007a7009e60bdad63794f843cb26b1f8d","size":8716,"data":"","first_seen":"2026-10-13T12:08:57.089318Z","last_seen":"2026-10-13T12:12:19.883912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fadd07acdbed5dd7a19fa1a2d8df8773","sha1":"a07b115f39d2d6c037bcdf26413f7c9897fbbe13","sha256":"2da6e6e725375ca74151c2b91078f323e46327de53aaaf5c104c346038ff5ca3","sha512":"cc816ebbe5f1fbd4e2de1488abd669cef875240929338491f77e0d3f26317158a71f3a770a70b5a8baac32bcf04b3170c5f74fdd7d6525f978d6cefe358b5907","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFRyN9d/y07:wC2FAPvktTDkCQTA0OjyN9d/y07","tlshash":"ad645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","size":325187,"data":"","first_seen":"2026-10-13T05:03:19.998869Z","last_seen":"2026-10-13T15:17:16.007626Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-BrandingWidget-_lhoW2co.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b61e85c1ea19b376672b383287c2ee6f","sha1":"fef65d1f1ced69e4b3be24a9cf97b356f7e98482","sha256":"e5ee5734f5d44a0ac3e56fe4912c6ec884e278895d339ee0e712c5b3e79ff6e3","sha512":"b153453405b123c57af369e5842a2bc194b43a73f990a82c74e965ef470eeedef28e3787a53c34abfa6037249428d8db9287b9e2f982a70cd6fb56d0a7c61829","ssdeep":"","tlshash":"c171e64ff0eab4f4f334410450eb663e947d1b0447358df6822bada62358dc29073ab6","size":3526,"data":"","first_seen":"2026-10-13T05:37:58.784882Z","last_seen":"2026-10-13T14:44:22.397981Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MessagePreview-DWarn9rm.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3f930714358bdb21e081d5383fe5f9b6","sha1":"a5dc0f67a4ab40ba296a5906580597f3dd9f8a9e","sha256":"86c658f385290c58625bf39613ce4877fb9c090fdf349432a9747694ec110983","sha512":"6a04f5bdffa538209723971c4954f8ecc5e8aab33fa61d094c67f16717a15703803e9d8fc0e47d1c795ebaf344de457f0b5d4408b4a9d6f96cfdff0444660489","ssdeep":"192:9uSNkPkQ4xIj552UsblZbEyTrj5hUEwc0zNGSNa3UqUu/bECybaOh9O9QCpV/m2F:8FcInjSv7HdhUDvzneUqUunOHO9NpV/B","tlshash":"8a42e959b2b86438a333c5c7b2cb2621a3182f119501d4e2f49e5fae1369de421d6f3f","size":12155,"data":"","first_seen":"2026-10-13T05:37:58.744424Z","last_seen":"2026-10-13T14:44:22.379857Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[kraken-tawk] style script active","filename":"https://slon911.cc/","line_number":494,"column_number":26}]},"http":[{"url":{"schema":"https","addr":"slon911.cc/antibot_generatecaptcha?G1cS0fC3MY","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.270Z","timestamp":1791893507270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"slon911.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 12:29:25 GMT","end":"Sat, 09 Jan 2027 12:29:24 GMT"},"fingerprint":{"sha1":"E6:48:C3:9C:2D:DB:1E:A7:D6:D4:E2:12:7B:C0:99:56:91:37:D6:24","sha256":"79:DE:2E:4B:7D:88:68:6E:3B:29:5B:04:6E:9F:5F:C8:CF:AC:6B:85:97:E6:20:53:9F:C3:6E:83:A4:80:4F:31"}}},"request":{"raw":"GET /antibot_generatecaptcha?G1cS0fC3MY HTTP/1.1\r\nHost: slon911.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slon911.cc/\r\nCookie: antibot=4f512df1-9b6e-40a2-9edb-fa9a7665b773\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"antibot","value":"4f512df1-9b6e-40a2-9edb-fa9a7665b773"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Oct 2026 12:11:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11189\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: no-store, no-cache, must-revalidate, private\r\nExpires: 0\r\nLast-Modified: Wed, 14 Jan 2026 16:48:55 GMT\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11189,"size_decoded":11492,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/15 01:57:03\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.08\", baseline, precision 8, 380x120, components 3","md5":"91801005fd50c8c6b2fff671ba9ad217","sha1":"25e585849ae58cd3534c7912968d1294e7651f6d","sha256":"05a13c9f69d74e7e9ccfc46a9cb5632f3683aac43014ddf889e4b8a1554914a7","sha512":"eed0f9716cda628874606bb44b864a9e392eb9485547f8b15ff358de5ac40a4baac6861b21d2fdc25af551974bf614442ca5dbdbcedfe87ee98de76e1b49d998","ssdeep":"192:Djyv2LzWTavIdrGEy/6dt1RXnuWbvmMSKekdooJuBG99AzvOtxNYCaeD41:3yv2LzWGvIdrbuWb+LkdoAu4AzObNYCS","tlshash":"7532cf53d69002f2e2331bbbbc141507a70dbf95e6cfbaa13fc9128c52055b021a8f39","first_seen":"2026-02-20T15:13:20.168361Z","last_seen":"2026-10-13T12:12:19.845558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":136,"dns":0,"connect":17,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"slon911.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.877Z","timestamp":1791893507877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://slon911.cc/\r\nOrigin: https://slon911.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-c4zs\r\naccess-control-allow-origin: https://slon911.cc\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Oct 2026 12:11:48 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a49e3fb83cfe56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":708,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T15:42:38.690533Z","times_seen":19084803,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MinWidget-Bx7FCqWR.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.136Z","timestamp":1791893509136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-MinWidget-Bx7FCqWR.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"3f0fa5a69a1521e105b2ecb23ec2322c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17449\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fc01e6d56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13016,"size_decoded":5415,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11094)","md5":"3f0fa5a69a1521e105b2ecb23ec2322c","sha1":"cda611fe912096d64e2fe5dd569b1038f10613bb","sha256":"6926e04c83e5e7639efee94af959383e7a5f820f8a25488fa68aa35aef95d976","sha512":"d1052747cd869ab3037986774ea43f508611632d8ffa49785c63ca920b14e1bb983f47caffcfb3ab8617ffa84d166d4a0216e5b1b6a21607dd1ff1476d83b38f","ssdeep":"384:28NZA6OHofI+waonyDpyvCKDswetZ8R3G5xlXkuEm8ZOWI:TNu6OIAHvyDpWDNAbk9OWI","tlshash":"c7421866f284a068c730d28590d56d7c222d03b54f408dfaf0b5aeb703e4cc8647abbd","first_seen":"2026-10-13T05:37:58.782396Z","last_seen":"2026-10-13T14:44:22.3789Z","times_seen":36,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-BrandingWidget-_lhoW2co.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.141Z","timestamp":1791893509141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-BrandingWidget-_lhoW2co.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"b61e85c1ea19b376672b383287c2ee6f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17449\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fc01e7056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3526,"size_decoded":2169,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3525)","md5":"b61e85c1ea19b376672b383287c2ee6f","sha1":"fef65d1f1ced69e4b3be24a9cf97b356f7e98482","sha256":"e5ee5734f5d44a0ac3e56fe4912c6ec884e278895d339ee0e712c5b3e79ff6e3","sha512":"b153453405b123c57af369e5842a2bc194b43a73f990a82c74e965ef470eeedef28e3787a53c34abfa6037249428d8db9287b9e2f982a70cd6fb56d0a7c61829","ssdeep":"","tlshash":"c171e64ff0eab4f4f334410450eb663e947d1b0447358df6822bada62358dc29073ab6","first_seen":"2026-10-13T05:37:58.784882Z","last_seen":"2026-10-13T14:44:22.397981Z","times_seen":40,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb19.tawk.to/s/?k=6ace200597adc9035efb2d53\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YWE0NTFhZTI3OWJmZjM0NDM5NGFkMzYiLCJ2aWQiOiI2YWE0NTFhZTI3OWJmZjM0NDM5NGFkMzYtdjJZSGZqZTQ5VjRiSjhKVDZZcjNTIiwic2lkIjoiNmFjZTIwMDU5N2FkYzkwMzVlZmIyZDUzIiwiaWF0IjoxNzkxODkzNTA5LCJleHAiOjE3OTE4OTUzMDksImp0aSI6ImtHbVFxSUF1UVRDYklRQXhEWlNyZSJ9.tesyL8jPhc7-izem4_XFJ8DqUBAzi0WV90dMPTo_8Y_YoMxVLeVbN-AEOY0l4DKRAA-tj0nD3pS6Ys62_7gzkQ\u0026EIO=3\u0026transport=websocket\u0026__t=Q4rBHGD","fqdn":"vsb19.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.143Z","timestamp":1791893509143,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /s/?k=6ace200597adc9035efb2d53\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YWE0NTFhZTI3OWJmZjM0NDM5NGFkMzYiLCJ2aWQiOiI2YWE0NTFhZTI3OWJmZjM0NDM5NGFkMzYtdjJZSGZqZTQ5VjRiSjhKVDZZcjNTIiwic2lkIjoiNmFjZTIwMDU5N2FkYzkwMzVlZmIyZDUzIiwiaWF0IjoxNzkxODkzNTA5LCJleHAiOjE3OTE4OTUzMDksImp0aSI6ImtHbVFxSUF1UVRDYklRQXhEWlNyZSJ9.tesyL8jPhc7-izem4_XFJ8DqUBAzi0WV90dMPTo_8Y_YoMxVLeVbN-AEOY0l4DKRAA-tj0nD3pS6Ys62_7gzkQ\u0026EIO=3\u0026transport=websocket\u0026__t=Q4rBHGD HTTP/1.1\r\nHost: vsb19.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://slon911.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9eQ/7FDLOUBOgzqUX/Cc/A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 13 Oct 2026 12:11:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: vvJTI1bh8ky6wywoAzUEhrl/FjU=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a49e3fd3bc021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T15:42:38.690533Z","times_seen":19084803,"resource_available":true,"data":null}},"time_used":6777,"timings":{"blocked":0,"dns":3128,"connect":3126,"send":0,"wait":518,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6aa451ae279bff344394ad36/1k28tu5af","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.676Z","timestamp":1791893507676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /6aa451ae279bff344394ad36/1k28tu5af HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slon911.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6acdb8c93b0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 13 Oct 2026 12:11:47 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 206\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a49e3fb71c9e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159,"size_decoded":1200,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"cf91a01bee09f00c698a6293ba17fdcb","sha1":"21647156414c5d450dce157bc1cf8e0a2f77c89e","sha256":"8bab7e2f2e21f3ff4f84e9a87bc46b1033e4cfc62873d4b2e409528dd2ad1f74","sha512":"39c9c0bd8ba5231bc693afe0993ee61adb496b98f48da86f0c9467cf9c76bf57efa63afcc6c1c209a8be6a93f19c57d20c731e9627059fc3cbfa2fbb29257b28","ssdeep":"","tlshash":"702147f57e5a263baa3150e92eaafe0835b2015704185c85460ce8d6365077a171ade9","first_seen":"2026-10-13T12:08:57.077087Z","last_seen":"2026-10-13T12:12:19.851666Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon911.cc/antibot_assets/kraken-favicon.svg","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.739Z","timestamp":1791893507739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"slon911.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 12:29:25 GMT","end":"Sat, 09 Jan 2027 12:29:24 GMT"},"fingerprint":{"sha1":"E6:48:C3:9C:2D:DB:1E:A7:D6:D4:E2:12:7B:C0:99:56:91:37:D6:24","sha256":"79:DE:2E:4B:7D:88:68:6E:3B:29:5B:04:6E:9F:5F:C8:CF:AC:6B:85:97:E6:20:53:9F:C3:6E:83:A4:80:4F:31"}}},"request":{"raw":"GET /antibot_assets/kraken-favicon.svg HTTP/1.1\r\nHost: slon911.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slon911.cc/\r\nCookie: antibot=4f512df1-9b6e-40a2-9edb-fa9a7665b773\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"antibot","value":"4f512df1-9b6e-40a2-9edb-fa9a7665b773"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Oct 2026 12:11:47 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1167\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 03 Sep 2026 15:26:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1167,"size_decoded":1381,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c43e17f11a86a2b716b8cd402dce5f43","sha1":"043e9c49d0e96f6fdb347344e07e64bff03a5237","sha256":"9136035acf15bcf4013e965b93c84abbfb6a2da3fa041b82e8659520787c9367","sha512":"83fe6e984640c4fe0348e5f673833b8ed308755f2a8e8ff53e07134b0efc6fd646d5b1d614448e722a33a79febb0d961be966c3b1ec9352c82d5657a1e6c98f1","ssdeep":"","tlshash":"4b21ce8c68455c75c7e087c08bb8f9c8023eb38f40e13979aead3a430d0acb949be701","first_seen":"2026-09-24T04:57:25.473877Z","last_seen":"2026-10-13T12:12:19.853516Z","times_seen":9,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"slon911.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.747Z","timestamp":1791893507747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slon911.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"fadd07acdbed5dd7a19fa1a2d8df8773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17453\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fb76cb956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325187,"size_decoded":121335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42299)","md5":"fadd07acdbed5dd7a19fa1a2d8df8773","sha1":"a07b115f39d2d6c037bcdf26413f7c9897fbbe13","sha256":"2da6e6e725375ca74151c2b91078f323e46327de53aaaf5c104c346038ff5ca3","sha512":"cc816ebbe5f1fbd4e2de1488abd669cef875240929338491f77e0d3f26317158a71f3a770a70b5a8baac32bcf04b3170c5f74fdd7d6525f978d6cefe358b5907","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFRyN9d/y07:wC2FAPvktTDkCQTA0OjyN9d/y07","tlshash":"ad645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","first_seen":"2026-10-13T05:03:19.998869Z","last_seen":"2026-10-13T15:17:16.007626Z","times_seen":56,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.864Z","timestamp":1791893507864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon911.cc/\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:47 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 13 Oct 2026 04:52:08 GMT\r\netag: W/\"4a58c4dc353e5db942b58778f5c0909e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17453\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a49e3fb82cf656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10588,"size_decoded":4425,"mime_type":"application/json","magic":"JSON text data","md5":"4a58c4dc353e5db942b58778f5c0909e","sha1":"2282d4435942709dec55ce96c191d3a3a60535ae","sha256":"746e316546dd1b5ce0b4565c7181ce250439c25430962fa74cfdb283cb528402","sha512":"e86536d378d4d4e9d46b27305fd3976cf3aaf842af5ebb6eb31298829c7a97ba9bca9fd50e6e622c95bc46699c0f1149bb2579e0aba3be82a9b0d169a69e28e6","ssdeep":"192:vmdjWl179zTRVUEAHq9iH+TidAg8G+9pPmKVKOetm6ksTAdYPizj1L:ak179zOHq9iH+TK58G+9pEtHLPizp","tlshash":"b922a557cb145adb02c257863e8fb5c2b63841de179425fbec4834bc03cddaa6617b86","first_seen":"2026-10-13T05:03:20.04514Z","last_seen":"2026-10-13T15:17:16.023071Z","times_seen":56,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-messenger-components.es-_Rag-kfX.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.165Z","timestamp":1791893509165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-messenger-components.es-_Rag-kfX.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MinWidget-Bx7FCqWR.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"dbdb2bb3646ae4c99412377ce1d8aa2f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17449\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fc04e7956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226564,"size_decoded":76990,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"dbdb2bb3646ae4c99412377ce1d8aa2f","sha1":"1976f92b3db8aa0e38da09af38a52d5eed7f7bbd","sha256":"fee51944dc9cb2aa47cb13a607c851c037a9f302a71ee2bf46c5767419004ae6","sha512":"0da491b6f6f403b0fcdb3e518a10ff8ba879160e450beaee90e3486e786f6462058f8bcf6f5e56fe9f7778a473b27636e76ba5f031cf3235d42556f3de7b4c5c","ssdeep":"3072:zFtH8S+Rao1Q5Ar6VKkOPPsfpxiRo5Pip2li/T:z/HD2aQQ5Ar6kMxhPiImT","tlshash":"46242bd0f647e6f8d5e6eb88448b9212322f137b6df4c6d0c0a4cf992194f68259ef58","first_seen":"2026-10-13T05:49:54.455114Z","last_seen":"2026-10-13T14:44:22.369645Z","times_seen":38,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.253Z","timestamp":1791893509253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"95fa576ff32490baa52652a17f62e04c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 26272\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a49e3fc0df671ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39935,"size_decoded":9746,"mime_type":"text/css","magic":"ASCII text, with very long lines (39935), with no line terminators","md5":"95fa576ff32490baa52652a17f62e04c","sha1":"16359dfeaee9eac6142541fb857ef49c790f9196","sha256":"103867cb284cc821fa8e3a9fcb38f938eeea660e8efdef3950f5324428cebca7","sha512":"d3e19999896c457ab78b0c8df6b748b3fe7c2ffb0dd09dafa6569fe2f6d8a4d363c2a8747b6cbe143fd1b88fc73954998d86305682d3b85c9e719b7f56969057","ssdeep":"384:gwaRBMbrYbv+esY2jcWlnrCxN82TNSixi7riPftTQUifm7kUdwddCri43V64gpjJ:gwaKUAgMUifm7kUdwddCri43V+SffQ","tlshash":"920374a2b59720ccb197c33290d1fabc642b9670d753c6a6f5137bb98ac25d63612f0c","first_seen":"2026-09-14T08:43:43.753483Z","last_seen":"2026-10-13T14:44:22.399967Z","times_seen":3624,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon911.cc/","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T12:11:46.772Z","timestamp":1791893506772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"slon911.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 12:29:25 GMT","end":"Sat, 09 Jan 2027 12:29:24 GMT"},"fingerprint":{"sha1":"E6:48:C3:9C:2D:DB:1E:A7:D6:D4:E2:12:7B:C0:99:56:91:37:D6:24","sha256":"79:DE:2E:4B:7D:88:68:6E:3B:29:5B:04:6E:9F:5F:C8:CF:AC:6B:85:97:E6:20:53:9F:C3:6E:83:A4:80:4F:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon911.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Oct 2026 12:11:46 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: antibot=4f512df1-9b6e-40a2-9edb-fa9a7665b773; Path=/; HttpOnly; Secure; SameSite=Strict\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"antibot","value":"4f512df1-9b6e-40a2-9edb-fa9a7665b773","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"antibot=4f512df1-9b6e-40a2-9edb-fa9a7665b773; Path=/; HttpOnly; Secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14968,"size_decoded":4731,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"62125717838f28eb2ea75c1a6db24b3a","sha1":"36b6436fa635d01b76b713b2a4b22bd273c2e51c","sha256":"4516ea145cdadf430f4989602ade4f33c113264c3c7d3b029dbffeb97b6913a9","sha512":"1d66f06fff81c323d2b9b3afc11bc79d9156e3f023e699afc0a08bd223dc6efc7c835a9d2594eb9c26fd4ab2ba64f47ffe6154b70a4ecc596790e3d32158b5e0","ssdeep":"192:BGH8l9Y8iVIhfgckVUYOyiljPpPXMCLP6:Bi8lWRVUYSZPg","tlshash":"81621caea48b145527329274df93be3cfb2a5113d3018660bdbc63790fb178556a2f8c","first_seen":"2026-10-13T12:12:19.858671Z","last_seen":"2026-10-13T12:12:19.858671Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":21,"connect":17,"send":0,"wait":189,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"slon911.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon911.cc/antibot_assets/kraken.css","fqdn":"slon911.cc","domain":"slon911.cc","tld":"cc"},"ip":{"addr":"104.194.149.158","port":443,"asn":198983,"as":"'Tornado Datacenter GmbH \u0026 Co. KG'","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.265Z","timestamp":1791893507265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"slon911.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 12:29:25 GMT","end":"Sat, 09 Jan 2027 12:29:24 GMT"},"fingerprint":{"sha1":"E6:48:C3:9C:2D:DB:1E:A7:D6:D4:E2:12:7B:C0:99:56:91:37:D6:24","sha256":"79:DE:2E:4B:7D:88:68:6E:3B:29:5B:04:6E:9F:5F:C8:CF:AC:6B:85:97:E6:20:53:9F:C3:6E:83:A4:80:4F:31"}}},"request":{"raw":"GET /antibot_assets/kraken.css HTTP/1.1\r\nHost: slon911.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slon911.cc/\r\nCookie: antibot=4f512df1-9b6e-40a2-9edb-fa9a7665b773\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"antibot","value":"4f512df1-9b6e-40a2-9edb-fa9a7665b773"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Oct 2026 12:11:47 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 4768\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 06 Jan 2026 17:09:55 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4768,"size_decoded":4992,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"75fd64fc8e99dc317f41914081a03352","sha1":"97c20a567cf31b997322b3228838ae44b1394233","sha256":"db6ad8d74f75b4ec10be88cbf8dcf0134d1f63f7126accf2b375a0833aba0028","sha512":"9b8c26c9e7b3ca6fbdd5337dbbe2a6bfa06cb476355406f010cf4ea09438a406c804f5c56577e7b68b11870ee8fedb397ffd11a72ab2036c5485175779aafc99","ssdeep":"48:W3AtE0JlzWvwIpQnStqoemMHmGmRm6iRtmQmHxa9uuuma86cPBmJz9K+N3z+0hCK:/zGwIU2jMxALy63zD2s5","tlshash":"78a1df9e16022b5083324f3463979b15b72402768e4530edb8d04ab9eb96be686d0fcf","first_seen":"2024-09-22T02:59:45Z","last_seen":"2026-10-13T12:12:19.860239Z","times_seen":248,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"slon911.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6aa451ae279bff344394ad36\u0026widgetId=1k28tu5af\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.856Z","timestamp":1791893507856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6aa451ae279bff344394ad36\u0026widgetId=1k28tu5af\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon911.cc/\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-ndmg\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-70-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 13 Oct 2026 12:11:47 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 206\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a49e3fb81cf256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2749,"size_decoded":1893,"mime_type":"application/json","magic":"JSON text data","md5":"663b74a35bfdc2b82d0fcceae3d2b639","sha1":"87af479f5f6d4b6629b50d26d17fed4c1bfcf657","sha256":"e49e3771f83aa52ea2a22ad2ff6fe7bb163e763f17532eeec78259f7d743f9d2","sha512":"b9303f87275b3550cfa6fd3c57282658a625658ff4538dfa8b4cddcf6d805d165051612de233342f36074b6d43d34cea14a7b8f76a33d8bbedd987d2639f8971","ssdeep":"","tlshash":"3451532a0c1669f8938c921370aa3a17792d9036f6c4235dd5ec6e29b3f729c9211b87","first_seen":"2026-10-13T12:08:57.078629Z","last_seen":"2026-10-13T12:12:19.866006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":4,"dns":3,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.862Z","timestamp":1791893507862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon911.cc/\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:47 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 13 Oct 2026 04:52:08 GMT\r\netag: W/\"6443b4a78680b653277a5eab38bc39c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17453\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a49e3fb81cf356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11849,"size_decoded":4470,"mime_type":"application/json","magic":"JSON text data","md5":"6443b4a78680b653277a5eab38bc39c4","sha1":"da3e8628df112b90bfcff80e667c90a91b3fe718","sha256":"effa79e13780ba62f6dc090fd3d33b6ec8c31f7dc01b98326f6cc42882cb6c3d","sha512":"3ed4993f4effe88e939ad76d4c58fd8f687f4aabca5b52eb3a77b3737285df595b6b3ddf59144d5121ac19f2c6b24cac1c75542cd23d4e86466ced5a5e6cc03d","ssdeep":"192:Om265/bLHzPrquLUVid+BCzfF+npqpK9KvKGC6KEt1aZwf1E:4CbLHzxUVid+BEfF+npH9t3Zwfi","tlshash":"30324169ce504ea702c29246389f31437624819b1f54392eb78c91ac0f8ed6f61f77ce","first_seen":"2026-10-13T05:03:20.014734Z","last_seen":"2026-10-13T15:17:16.030584Z","times_seen":56,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-iframe-styles-B2khbVVL.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.167Z","timestamp":1791893509167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-iframe-styles-B2khbVVL.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MinWidget-Bx7FCqWR.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"dcd487e101db97c06c812d909d74da30\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17449\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fc04e7a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9482,"size_decoded":4131,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5060)","md5":"dcd487e101db97c06c812d909d74da30","sha1":"f19ce228c383cc5cce52723fcc654685e25aa5bd","sha256":"9c6010b0a736f85108806df05b0ba6c98f45d95f037f7f96c546b67d59e916b2","sha512":"47241b0ca4db52bf7edcc67dee03fc101988927218f133492f8f000b74db1c0ed8c42d43e0674651539e876d7575102f9994cb4ffc0b05d0b07a8bdc640f0188","ssdeep":"192:V8+V00Bv2jxZbTsEcAl61qDqXfKuOmrGi8Fpfs/xmk0pEeRYRPgTxmd8AAX:fV04OjDTXD9cGiupfspmk0pFRYRoTxm4","tlshash":"fd12b722f2ef3066b254494c55f7bb783a2d62217f118df16564bf3d1b80ac66021fa9","first_seen":"2026-10-13T05:37:59.033692Z","last_seen":"2026-10-13T14:44:22.39885Z","times_seen":40,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.170Z","timestamp":1791893509170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-message-format-DKJXm_pH.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MessagePreview-DWarn9rm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"3b65489e3df378341353ddc879819d4a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17449\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fc04e7b56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4539,"size_decoded":2608,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2159)","md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-10-13T14:44:22.370569Z","times_seen":3730,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.871Z","timestamp":1791893507871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon911.cc/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 172\r\nOrigin: https://slon911.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":172,"data":"{\"p\":\"6aa451ae279bff344394ad36\",\"w\":\"1k28tu5af\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://slon911.cc/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"xUYUVCCHx6a4RMAKmXlo5\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-qvzc\r\naccess-control-allow-origin: https://slon911.cc\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a49e3fb92d9156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":1406,"mime_type":"application/json","magic":"JSON text data","md5":"84c6e1a33bd79702beaca1fd07d76c78","sha1":"8f96b59310a95b9540962e5a6cf9a23468eb3263","sha256":"7cbcde4a7204a7a15d7abc9c343c7819311fef5c3bc4d77513e9de96dc53fc43","sha512":"404070ae23efb03e4f1d48bd344e5f706ac6c6648685dc67e535b0a24509d7ad602dea97b44d1f18c8257f7a182a6031bbb9a4c4c57bc05f702fc6dbe1ff05b3","ssdeep":"","tlshash":"0b11a5090fce1e2d36b231c30e4b5d4626cca1d1bc0a100ae1d29dd930a23be595bcb3","first_seen":"2026-10-13T12:12:19.874597Z","last_seen":"2026-10-13T12:12:19.874597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/languages/ru.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:47.890Z","timestamp":1791893507890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/languages/ru.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon911.cc/\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:47 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 13 Oct 2026 04:52:08 GMT\r\netag: W/\"f98c9c81a7f2b044b433c4359d36f2d7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17452\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a49e3fb84d0456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16689,"size_decoded":5819,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"157820d8c4bd2e7616dc09a6be224087","sha1":"f8186901d48f37f4859ca68d35a4338b72309a0f","sha256":"f9767cae65340a2027a61a54944d469f4e05f84e580a29d095cdf90594ab2594","sha512":"1ea413a69ef45cb686fd34f5fad426fba1c28e0108ddb45aefa8b28c2ed38dc03c6a3078a780b7d7741edb78e02bd1c543f64ce2dc623ff54dda18c49800c14c","ssdeep":"192:SKn7WtbO1Z7rwnIelhwJOlpmGgJVdYeErC1aU4CaSL7V:SANrwnlhwIlpr8geE0YO1","tlshash":"8372b961c6566eff0147e01ae8047a0a38a541ff2f657265776c3c7e2fee82e813924d","first_seen":"2026-10-13T12:08:57.070469Z","last_seen":"2026-10-13T12:12:19.876656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-MessagePreview-DWarn9rm.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.138Z","timestamp":1791893509138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/js/twk-MessagePreview-DWarn9rm.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon911.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6acdb8c93b0/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"3f930714358bdb21e081d5383fe5f9b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 17449\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a49e3fc01e6f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12155,"size_decoded":5400,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6944)","md5":"3f930714358bdb21e081d5383fe5f9b6","sha1":"a5dc0f67a4ab40ba296a5906580597f3dd9f8a9e","sha256":"86c658f385290c58625bf39613ce4877fb9c090fdf349432a9747694ec110983","sha512":"6a04f5bdffa538209723971c4954f8ecc5e8aab33fa61d094c67f16717a15703803e9d8fc0e47d1c795ebaf344de457f0b5d4408b4a9d6f96cfdff0444660489","ssdeep":"192:9uSNkPkQ4xIj552UsblZbEyTrj5hUEwc0zNGSNa3UqUu/bECybaOh9O9QCpV/m2F:8FcInjSv7HdhUDvzneUqUunOHO9NpV/B","tlshash":"8a42e959b2b86438a333c5c7b2cb2621a3182f119501d4e2f49e5fae1369de421d6f3f","first_seen":"2026-10-13T05:37:58.744424Z","last_seen":"2026-10-13T14:44:22.379857Z","times_seen":33,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.250Z","timestamp":1791893509250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"fca40181c727cc29b69045ec5589f638\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 26272\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a49e3fc0cf661ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23816,"size_decoded":6018,"mime_type":"text/css","magic":"ASCII text, with very long lines (23816), with no line terminators","md5":"fca40181c727cc29b69045ec5589f638","sha1":"83aaec5320016a15845195eb1d3fbb8982b66fa3","sha256":"a8c70c82d9bd2a2ef3e4edbe3cdb060bdcca80a3351307d066eee3df4be8a8d0","sha512":"32f6a558154dede9ec9cad1177d1142b7c949d431d8a3e9ed7cfc31ac62bb8ffe2cc501c18a86a26523bba0b0d61f6ea1238e8fec3ab5cf531531a5b6990140e","ssdeep":"384:gZBMbrYbv+esY2jcWlnrCxN82TNSixi7rOPJh3L:giUAEh3L","tlshash":"a2b21da3b5d714dce657c236c0d5f67ca82b4a60c753c6a3b9037bb886c1ad73641a4c","first_seen":"2026-09-14T08:43:43.747289Z","last_seen":"2026-10-13T14:44:22.385053Z","times_seen":3686,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6acdb8c93b0/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.256Z","timestamp":1791893509256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6acdb8c93b0/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 04:52:07 GMT\r\netag: W/\"e0255582e599007d621a42129d7d27f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 26202\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a49e3fc0df691ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18387,"size_decoded":4686,"mime_type":"text/css","magic":"ASCII text, with very long lines (18387), with no line terminators","md5":"e0255582e599007d621a42129d7d27f5","sha1":"7558586a6dfc7f897c6115afd54699f13e657fdc","sha256":"d85c5684bc2ca8b6dfac3e8c95320e22afadf8adb1a923b11a52465c49a00b0e","sha512":"7213efe6431739a3539e9d9c386cf2b623ee42381078447ed1083324268f49aec93e5eebdb7a4c16717e79be0e6b06594a7a801435a054535f243a2143a4519a","ssdeep":"384:KBMbrYbv+esY2jFWlnrCxN82TNSixi7rXt:UUAXt","tlshash":"2d82da93b9e314dce657c632c0e1f67ca83f4a20c757c5a3a9437bb98681ad73641a4c","first_seen":"2026-09-14T08:43:43.711999Z","last_seen":"2026-10-13T14:44:22.371832Z","times_seen":3212,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon911.cc/","date":"2026-10-13T12:11:49.260Z","timestamp":1791893509260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 12:11:49 GMT\r\ndate: Tue, 13 Oct 2026 12:11:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"33e6356edc53e03c127fdeb161a387b7","sha1":"08e3af136c0e4f095ae416065f7553b6f278a6ca","sha256":"022b210161a7517fd08e773268f16af2abea5faa3632a6c130d6b833803da0dd","sha512":"9d625eb4f021b56cfc346f20b2f90cb52adb47e8ddceb1078e428bb8b0137e97cf6d9b6a1a7234208fcf56900c813bc7098c0620d0fbf7787dc3fc542b5fed01","ssdeep":"192:wNA1cO3lnx2rNNIxO34OxvENOPCO3/Nxox:8KkXyMS","tlshash":"9cf17792002ba400ab971dc223cf7e3aaece10896085d1b95ffd0dc59ceed66436876d","first_seen":"2026-10-06T13:13:12.261253Z","last_seen":"2026-10-13T13:29:32.157922Z","times_seen":8,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}