{"report_id":"2b288cd1-74eb-42ae-81df-1edc5ef2c869","version":0,"status":"done","tags":[],"date":"2026-10-08T14:29:32Z","url":{"schema":"http","addr":"kunnibot.com/","fqdn":"kunnibot.com","domain":"kunnibot.com","tld":"com"},"ip":{"addr":"15.197.162.184","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"title":"KumiBot: Automated Polymarket Bot for 5-Minute Crypto Rounds","dom":{"size":204944,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (419)","md5":"db499c7c4b865c3f496c61fcd04284d3","sha1":"2953eba196e306da815d6be3a6fe49cd54bdeb71","sha256":"3f8f59f2059c8e9abc0f23f0a02958e5a7afefbf44b9258c7e71621e5cb5aceb","sha512":"dcbea6d612fc4615dccd10b1c77d63c232011e0b13accdbcc61a155fd234d89f559200980298e3ece59e68462a6a9c6184f4a6906db4b26cda011ad8a1677508","ssdeep":"1536:+vbroXjFjZwLaRwUcXIDiql+rb3aDivkaDivFZeiLyuRhZQRZktVxwzbD4C5pUJK:+TVdOiiVPQRZpoC5G1w8k5+SH","tlshash":"2b14193191e5123b7023c4ada37f6a5a21547007ea068e18792db2f05feec65ec776f8","dom_hash":"domhash37d269b6a84aff0f8c7c12e86628a42d","first_seen":"2026-10-08T14:29:36.787601Z","last_seen":"2026-10-08T14:29:36.787601Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kunnibot.com/","fqdn":"kunnibot.com","domain":"kunnibot.com","tld":"com"},"ip":{"addr":"15.197.162.184","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T14:29:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"kunnibot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"kunnibot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":536384,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","ip":{"addr":"3.5.91.113","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":716870,"first_seen":"2022-09-20T12:30:23Z","last_seen":"2026-10-03T17:01:21.705215Z","alert_count":0,"request_count":2,"received_data":158312,"sent_data":1267,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":20560,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kunnibot.com","ip":{"addr":"15.197.162.184","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-09-06","domain_rank":0,"first_seen":"2026-10-08T14:28:25.349308Z","last_seen":"2026-10-08T14:28:25.349308Z","alert_count":2,"request_count":1,"received_data":220,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kumibot.xyz","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2026-10-02","domain_rank":0,"first_seen":"2026-10-08T14:28:25.337388Z","last_seen":"2026-10-08T14:28:25.337388Z","alert_count":0,"request_count":20,"received_data":3246238,"sent_data":9814,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":13,"received_data":405501,"sent_data":7258,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"270c068202ae27824402d25b1bf45667","sha1":"acf18210093f12ef136e6cfdaf9ae8a71d3b7224","sha256":"301d9801d42b0d948908d5593f2c63cd3aee4c23e2c35ac97ca6be1e936d7294","sha512":"37d89d6ad3add3ae502d719eaefe14a3a552596226c8bd4a01f6d1e0b26cad183e926a2e72b0706ca321b66144a4cb21ae9ba4ad0dfbc2bf886d18d13e60459e","ssdeep":"","tlshash":"0ec02b8c320f0c7245eb2f4d0b3fb200b015321194e09931181b33484f30d03d745c14","size":154,"data":"","first_seen":"2026-10-08T14:28:31.455092Z","last_seen":"2026-10-08T14:29:36.821714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d32167a2ebdfb6cbaf569c0b00016982","sha1":"a977b3a8a2b9423e58e520781c0d1f4a1cf93058","sha256":"b393ca7f913e37324d334e2cc63664c1f54c928443425b044db3e6d626db6252","sha512":"26c258435e7829ac9ced77ba87972189185d3112b345de90054a1532e7457d805fed15863f983dadd71dff7d90ebe7addaabc89d867fe16af63e555f82091db5","ssdeep":"","tlshash":"8a11cbfe39a644344dc34939323fa388397aa12f2981d181b93c80690f94f95306d8ea","size":1001,"data":"","first_seen":"2026-10-08T14:28:31.456237Z","last_seen":"2026-10-08T14:29:36.822514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"754f58550710cb80405e7102b1621482","sha1":"58b06ccdaa5fe02139ad322ad9dbf22b61914a43","sha256":"4b74f338819771a8cae3291cc44b56d3b7cae9fcb567112cb1f2617981912d1e","sha512":"640e1b4d6e540b1ddae3239090a083ad5427243d00818eb65ed30db6130f60d2bd8f1be210cf8e8eb85726d4884e1e4a60fc8e8e22d4f36df8dcc5f4b9c70c7c","ssdeep":"","tlshash":"e25183bb34b7017463a7707a874b71081436e0933e82f4793e6c26909fe6a28e1d6fd4","size":2947,"data":"","first_seen":"2026-10-08T14:28:31.457214Z","last_seen":"2026-10-08T14:29:36.823352Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dddff50a1473bc5ee8c142573d427fb","sha1":"9a09f98ad1bd07940eb6125fff16414c8ef345d5","sha256":"6cec262f33d8f1af59c672da1a80faf01c8046c9f4a16e9af0c43971c99a8efc","sha512":"b6f37aa8f2579e19ba28aa75f8823ab23f6fa2c0b5d4510ff1a6c742f2aa6cc1eb4bef4cc04b408218533272545d0cf20049b6a206615bbf5bcf16fe3cad12f5","ssdeep":"192:Natop3IZDCMCqoBYyH/dsFvaefisGdvfaY3ziZ8AMCQA7L0pz:NbyuMCqoBYwAG32qb","tlshash":"a6f1416f71e7383a8463a2bea65fc1282a7a49034586d8107c6cd5515fe0828577bffc","size":7912,"data":"","first_seen":"2026-10-08T14:28:31.458126Z","last_seen":"2026-10-08T14:29:36.824235Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8da22e8d774f41d74d49d04fb171f897","sha1":"b026f305ad7ce6f34a8bbceba28f2c9e14b3f37c","sha256":"c7521af4ec144d595c11ac0c4fba7f7d9e60b40edd10b980c037d404930abf06","sha512":"cbed6b83fa4309cff6a2a3725fd3ab1a9b8eca1b132ef786a62d1e6ff0e4d2ebd9b6683ddbcfc4852bcff203091690a4b19832ce39cb83b6869a4c7af546100c","ssdeep":"","tlshash":"803162ee762f317d1613d079538ba1053d619e238321e6643c5c9299aff1560437bdf8","size":1724,"data":"","first_seen":"2026-10-08T14:28:31.459107Z","last_seen":"2026-10-08T14:29:36.825163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"204d4ac0b9e26ae806401ae6afe697f7","sha1":"b555ff5954236eabc0044b94100a8e05be9c2625","sha256":"10925aef562de13e7d0b191bafc38c82268f02a5899c0e99f2dbf93384989913","sha512":"7c92b42201f258fc58653712443e08d3227c52f244334fe4b5ac88e0898cffe16c461556aaaa56a67be4851dc7790469909bcaf3953f3667ef40e94e70fdd140","ssdeep":"192:2KCfqTv1NDufFBKvac1fe6QWQ6koIxOUYIvlDjxiS1h7lqNy:BzTKFBKvac1WpWQ6VIxlR1xP1hl6y","tlshash":"71f1c76a50f36033142380ea936f1b065da52e033656c591739c67a19fc7e35f0abeec","size":7565,"data":"","first_seen":"2026-09-05T22:45:05.111356Z","last_seen":"2026-10-08T14:29:36.826038Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8610069eebf9d43d85d4d5bcfc4af9e","sha1":"a98b151e84489b8f37db92d47300ea17fec2eed9","sha256":"404783981a75b96d8d92f874a0045ce3ea2950bfb02dce4dfc610e11c7572bc6","sha512":"77c77d6978b213738d40caf01761b0355228cd94536cf17ad14fdc9b837d17c59a936c90dea060033f3e0cf716d67cc82973c6c3f2209d6f0a5641ecf7badf18","ssdeep":"","tlshash":"e9119cabf9732a751cfb21bb97afa38475e2108b1d46e0017d5cd8a49f22c410869ad9","size":1025,"data":"","first_seen":"2026-10-08T14:28:31.46142Z","last_seen":"2026-10-08T14:29:36.827205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"509ab278826ea660fbb7a9dee356c7b0","sha1":"b375f3196524441f08d529f1a7773206b1db0617","sha256":"9f5b92dde981e2a8431735f25c1af97705b598dce29083746e8ff04504dfdb28","sha512":"a0d83ef59708a8df64a5c4e3cc31d2f14069b3d6d3443f928435a902680c14ee4253717c8e2f14f475e86a9d77946f0e66f55e00f92c76de13b00d5a22d23d08","ssdeep":"768:Ly31gznJifY4qUbdl9fXdWOTcLwXKOve1Zdd1jGHe6XO:C1qnJpiBvevxqHO","tlshash":"4e53943a5aa20376b423893d577f18499214b023ba16fc58781ef2e02ffc429cdb95f5","size":63250,"data":"","first_seen":"2026-10-08T14:28:31.462634Z","last_seen":"2026-10-08T14:29:36.828054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"54640bbf23b6e7406c008a4c29d7a010","sha1":"718b99863e2e5d1ac952336a510d6a73480f0e94","sha256":"f5aa61c0dc9c3502abf157512db0e0461529a1faf6e989b0db9cdc6bc385d495","sha512":"8650e01458fb524e5b8efb913b15f4962a594185fe9e22544e3efe5fe6d0ae9c7ca47b5e1ece4c94a104dac2143ab9bdc2b7619153bfde0fa0efdbc790e47d9d","ssdeep":"","tlshash":"4851347abf7718b555b3422f1b7f9385343a502b012bc804bb6ce2888fa5901275ebf5","size":2903,"data":"","first_seen":"2026-10-08T14:28:31.463638Z","last_seen":"2026-10-08T14:29:36.828983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZX0K7T0PQJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16aa8ae0a7e6e7bb2e230fd04b6a706d","sha1":"4ab9b81a2439878940a13949016493ee2dd20bec","sha256":"a030ce29edf19a95b40833a77b698b516601b322ea8a521a22c4876e0c69c9be","sha512":"da3760f30ea0348998ae69514703a88e951501aa06497af9d5716be69b541f4808a709ba12fca58cf5c5d7bbe25a58b124690b0fc3ba05bff49fb5eeb11e3535","ssdeep":"6144:ncccUrtyDetGl0BqveZNAAycBcNMMb0Er533QN3UrxXNU4m9kpp84A:n4Deq0B6eYnE3UrxXFm9YOb","tlshash":"e8b409ce73c6742293a6f578903f01cb657b29a2b45cc89ab289dce02d3465a5173f7c","size":535780,"data":"","first_seen":"2026-10-08T14:28:31.444412Z","last_seen":"2026-10-08T14:29:36.800206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kumibot.xyz/","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:28:57.789Z","timestamp":1791469737789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"2ba2f-1a11af8d64a\"\r\nlast-modified: Thu, 08 Oct 2026 10:04:37 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:57\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2200cce6b3feca4d460f70f187a8b588\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":178735,"size_decoded":56937,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (419)","md5":"393e815bef0beb1b9bfd2d0295760524","sha1":"d4361b5c1b8c63580bf0dd984134b3b1527af4c2","sha256":"dbaa5c78f9783447c4de6935d49a624b3063e9c512edf1239942d4a5627aa387","sha512":"be267b095f9daa1bf2de8f90eb0321efc85d44d37212ec1b0c6e3f4f4adee19ce2e178697ddbda0cc57a5d773c5b9c23a7afe279dd1827cb96ef2f2a4a269e23","ssdeep":"1536:jcroXjFjZwLaRwUcXIMIIW9iyW7wNJZAqyuRhZCRZkwxzbD4x561v1qnJpiBvevc:AVd89i2VPCRZTox5y1w8k5+SA","tlshash":"f504183552a5123a7023c87d937f69493264b003fa06dd18792cb2e05fee866dd77af8","first_seen":"2026-10-08T14:28:31.433877Z","last_seen":"2026-10-08T14:29:36.791737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":109,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/k2.css","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.480Z","timestamp":1791469738480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /k2.css HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: W/\"5982-1a108c93ad4\"\r\nlast-modified: Sun, 04 Oct 2026 21:19:27 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 151c1e5b7088d204f341ae53d8614f0e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22914,"size_decoded":8176,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (22848)","md5":"d400e32b2d0e9f03a635ff3ccadd0bb7","sha1":"9d8f51734895bf0dd698e1c3f79a32152d8f1030","sha256":"ab26daf502ec9e8eeb5b2b00db2f23687a49a7c8063b35035a3f4ceea7b914d2","sha512":"151d7b64df93c3f42dbcb0120b528484d6c6181c9838c8aa4e14214d5b62e49162decf0db56da0833007e1de23eb5392e004d3edb904e687623d3eaeb03793cc","ssdeep":"384:X69VfCo6oD0qsDwsahle9w4Fn5KgOo3N81f/k:KzPcavgXsYN8u","tlshash":"2da287b2f2c4103db643daeda7e07bbd682de103d6010eb9a9a5b3b593c25fb0472545","first_seen":"2026-10-08T14:28:31.440765Z","last_seen":"2026-10-08T14:29:36.793399Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/howto-poster.jpg?v=1","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.488Z","timestamp":1791469738488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /howto-poster.jpg?v=1 HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68685\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\netag: W/\"10c4d-1a10c418521\"\r\nlast-modified: Mon, 05 Oct 2026 13:29:42 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 319760bc8450883933c61a018f76de3a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":68685,"size_decoded":70134,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1920x1040, components 3","md5":"d02b392d44989df1aa5a923ea6daecc2","sha1":"07b913a6f0923d7e66f734819420f4a3886b676d","sha256":"f0f87654f0b623d81b6163be61bf20cedaf3ceffc48ebb111bb60c4cbfece32f","sha512":"34d7b8cad30fd7b9f6df4fe515c75f3267fb7eb760517738e7a1ccb72f8826227f60901b39222f425ac54ca2b7a8911ec090900fbda170ec4d1d482bba4c5686","ssdeep":"1536:JUv/aLby9ARBdR/EfKaooMYufzOE+puqimDKFScXgbMX:JUvA+9ARBdZEfooJTE+p9ZcXggX","tlshash":"7f63f153c210f46fe0fc3bf939b20b0a30736c359853975195a684a5af7178e77a269c","first_seen":"2026-10-08T14:28:31.42688Z","last_seen":"2026-10-08T14:29:36.79518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/whales","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.652Z","timestamp":1791469738652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"603-k4/WImtzpH+h2Yo7T6FlbffAgcs\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5e743c33fdf57c82810812768e31ffad\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":1939,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"726fe99c08af13985fc89ac052903c35","sha1":"938fd6226b73a47fa1d98a3b4fa1656df7c081cb","sha256":"b51b166359b1715aa55db8c84595e3decf6a9e494210551fabb443e6ddd7fc71","sha512":"b05f07164cf0fb888d17072efa295d83ba3c77854c0d4cc0a7f93a982c606e431bc25a96702cfd4e86e84bb666ae4541a08396ef594e55ebddb42aa5c313880e","ssdeep":"","tlshash":"54313248550e647d02698b003cc6dafe75db13cf2dcd0884c6dace8056988619f66dca","first_seen":"2026-10-08T14:29:36.796102Z","last_seen":"2026-10-08T14:29:36.796102Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.786Z","timestamp":1791469738786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 23:46:33 GMT\r\nexpires: Fri, 01 Oct 2027 23:46:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 571345\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-11T20:19:44.203029Z","times_seen":61071,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":35,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sharetechmono/v16/J7aHnp1uDWRBEqV98dVQztYldFcLowEF.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.794Z","timestamp":1791469738794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/sharetechmono/v16/J7aHnp1uDWRBEqV98dVQztYldFcLowEF.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:19:53 GMT\r\nexpires: Tue, 05 Oct 2027 16:19:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252545\r\nlast-modified: Mon, 15 Sep 2025 16:38:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13500,"size_decoded":14313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13500, version 1.0","md5":"65d3eea7a186c2ff5f3ed8bf89642ea6","sha1":"ea30f8dd250111e82e53180de8ad09b6f23320c6","sha256":"41e6b9f297f7d9a2df2aaa274092f76d2f72711a15ca455f7f4f4f92caf16b72","sha512":"19ce13e7d94cfd2e9a56e128c29761d853adef646954014f2dea54bf6b8518143ed4404a9cdbd4c25d3fc04fec98520adc42d3bd357840db0b6cb2fa3c031c94","ssdeep":"384:JTOTPyx11kthS/no9Xuf8F+0pxVTS385wlKEC5FU:JTdxHchYo5uf0oM5wYp5FU","tlshash":"8b52c081d7ce258bf9b505dc14a1187c4ab3642864b75fe49881c540b1fbf2da9cec55","first_seen":"2023-05-08T12:42:22Z","last_seen":"2026-10-11T14:17:24.835923Z","times_seen":5019,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.795Z","timestamp":1791469738795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 23:46:33 GMT\r\nexpires: Fri, 01 Oct 2027 23:46:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 571345\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-11T20:19:44.203029Z","times_seen":61071,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":56,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.884Z","timestamp":1791469738884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:03:30 GMT\r\nexpires: Tue, 05 Oct 2027 16:03:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253528\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-11T20:43:43.376513Z","times_seen":35267,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZX0K7T0PQJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.470Z","timestamp":1791469738470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-ZX0K7T0PQJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\nexpires: Thu, 08 Oct 2026 14:28:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178647\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535780,"size_decoded":179251,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"16aa8ae0a7e6e7bb2e230fd04b6a706d","sha1":"4ab9b81a2439878940a13949016493ee2dd20bec","sha256":"a030ce29edf19a95b40833a77b698b516601b322ea8a521a22c4876e0c69c9be","sha512":"da3760f30ea0348998ae69514703a88e951501aa06497af9d5716be69b541f4808a709ba12fca58cf5c5d7bbe25a58b124690b0fc3ba05bff49fb5eeb11e3535","ssdeep":"6144:ncccUrtyDetGl0BqveZNAAycBcNMMb0Er533QN3UrxXNU4m9kpp84A:n4Deq0B6eYnE3UrxXFm9YOb","tlshash":"e8b409ce73c6742293a6f578903f01cb657b29a2b45cc89ab289dce02d3465a5173f7c","first_seen":"2026-10-08T14:28:31.444412Z","last_seen":"2026-10-08T14:29:36.800206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":38,"receive":50,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/tutorial-poster.jpg?v=1","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.491Z","timestamp":1791469738491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /tutorial-poster.jpg?v=1 HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 148832\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\netag: W/\"24560-1a108ce4f43\"\r\nlast-modified: Sun, 04 Oct 2026 21:25:00 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b49001f7b2154b730e059ecae663c578\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":148832,"size_decoded":150282,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1040, components 3","md5":"522ede17ca26b4a4b110b35b666ac938","sha1":"19f84ed056a4b13cb0725b52849ec6685fddab41","sha256":"ac2b98b71e462569b03d75ef804f2bf9b40c998198a6162fdc5c14f2a80c821f","sha512":"d377d316c35bd93e525f1533fab04fdce1f9025937058531dbd887a5b6b2440a3afcfa56444764b62164031abcefa59a8b1222ef194887ae69128a0f435cb4d3","ssdeep":"3072:JgbZB/rt63OeFELwIdTJTBWeShOQw3sLLLLaLyYDgXjGnt6/GEx:JgtBjcOeFELwIdTJVLSysLLLLaLxs+k","tlshash":"65e37c178e0a9bc3991a87e07f270dc96b06276edc957dfe55174edabf402260c8908f","first_seen":"2026-10-08T14:28:31.448016Z","last_seen":"2026-10-08T14:29:36.801084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/politics/next-french-presidential-election","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.643Z","timestamp":1791469738643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/politics/next-french-presidential-election HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"22f72-+GSuLg8XPPEQ4ANPm01hf4zM0DA\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a891fd098e96a505da12f1ebfb8fc005\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":143218,"size_decoded":38660,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91ffdf72581f71b572829071110ef9e8","sha1":"f864ae2e0f173cf110e0034f9b4d617f8cccd030","sha256":"53fe51b6dcc0f86b648abe9e7e3f2bdb87f4f8dae8e047c5ff10e34c535abcd8","sha512":"8d9b581d98d29f16e18e07be978103072fe61c8ea2efe2330e461034a7814a1c8b1a969afe44e34d25b0ed74f9171cfa24a9e081df8f54365588319e284e0044","ssdeep":"1536:qFZbyV3WmS9niUpNA8V8+wBELgaae4xBkcR11oNg:1Zb1D","tlshash":"6ae33fad478807aa3e1e9f0c4ddd56eb96b7a6b235d28dc8c0879cf49000b91b7bc5c5","first_seen":"2026-10-08T14:29:36.80195Z","last_seen":"2026-10-08T14:29:36.80195Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/politics/brazil-presidential-election","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.646Z","timestamp":1791469738646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/politics/brazil-presidential-election HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"1f81c-YDBQQjw+Fa0yFWEjWEX7QyU5KCk\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9e552d0578002f07aa22ede4a89fdb21\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129052,"size_decoded":36446,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9d6def9460ca898ec104fe0e2d11a238","sha1":"81961d8452f8f3e74d0ad2b5b32ada973f110b25","sha256":"60172f21403312bc5bb18aa227efb7f63797e2c1b9d2ebb3b0ba5196014f82c0","sha512":"5d5e576ea0315874ae22d6d2d207d3665f0fe5327c56d044712efb61aa6b18f48a4fd63a3993b3f052372e9cd5ac5eaaad4714e01d442618e5fff17a59fbe6b1","ssdeep":"1536:dJ2Eneti2SjoP8grawkSi3zEe0gFs9ZsijNu+E6QA3P1/h:yEH4p","tlshash":"3fc32cd9078803ea7e2d8f088dda6beba176a5b627c2dcc4d1c39cf4d010ee56779581","first_seen":"2026-10-08T14:29:36.803181Z","last_seen":"2026-10-08T14:29:36.803181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/prices","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.650Z","timestamp":1791469738650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"10a-2D5drnaFH1snznJYBsU8uRSwtQQ\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 93e4145dfb7cb7b3c9c566b0cde3a752\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":266,"size_decoded":1265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17cb7b12c8933f6d1ab4db7fd333b1de","sha1":"d83e5dae76851f5b27ce725806c53cb914b0b504","sha256":"efe398e9cb43c58d2659d7731aeb3c8403ece92f2286cfc50d6307501f35cd9a","sha512":"7e14f6019d6b0f8c6e04fc74a2720b16fe8cb2692ad368ca42e62f75725247a4c09bb52242facca3f50e7b297abc801cb6ca590f2c6f9072abab70d3de1eb630","ssdeep":"","tlshash":"09d05e4b036543ba815563788908b7026837933c416ccb190b5df02d189dcffb0012e2","first_seen":"2026-10-08T14:29:36.804593Z","last_seen":"2026-10-08T14:29:36.804593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.800Z","timestamp":1791469738800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 23:46:33 GMT\r\nexpires: Fri, 01 Oct 2027 23:46:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 571345\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-11T20:19:44.203029Z","times_seen":61071,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":64,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/will-marine-le-pen-win-the-2027-french-presidential-election-8hg67PHSk27M.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"3.5.91.113","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.974Z","timestamp":1791469738974,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 11 Sep 2026 00:00:00 GMT","end":"Sat, 27 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C0:26:7B:E7:87:93:B1:B7:94:06:2F:C6:EC:6F:B4:5E:02:61:3D:A2","sha256":"FF:B5:29:F1:31:70:41:61:90:3C:0E:65:2F:99:55:E6:B3:F3:5A:01:15:0A:A9:B1:2D:33:C6:EC:7B:D9:C1:A1"}}},"request":{"raw":"GET /will-marine-le-pen-win-the-2027-french-presidential-election-8hg67PHSk27M.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J9ZG33V98XK6QF6P\r\nx-amz-id-2: L1s0mzyqWJbWTFd+OPAvlRJzIflDEWz5v6TsdEBfHwqrOuUvHK+GkjlZJSCAbxc2ytuQOU46AI8rlxKfZbeu0S4C5VXXTUpr\r\nContent-Length: 108113\r\nAccept-Ranges: bytes\r\nDate: Thu, 08 Oct 2026 14:28:59 GMT\r\nServer: AmazonS3\r\nLast-Modified: Wed, 12 Nov 2025 20:05:14 GMT\r\nETag: \"296ca3768ff46368d85488d2bd8207e4\"\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: BKHKfHiPn9ZbQZVBhBEblk5UcoIqoJrP\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":108113,"size_decoded":108611,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1280x1280, components 3","md5":"296ca3768ff46368d85488d2bd8207e4","sha1":"803f8fcf9e852da782106c58f4827f1524e92c35","sha256":"c5329df0ee8ee692487f5a3e4db4fbf4d1493844b43fc72ac84ee526a87d0676","sha512":"8b075ca2392da14d4eb26eb9ab037fd73e57d3f68d6772c55db6d5ec392b44e598d05e46124c4cece5339b83802cb845a9699c003f2db8200c47d9aa7a3b8d5f","ssdeep":"1536:82c74urxjUGvCVVe2HAxu92ISvaB525+MMlhn+xxqjC+AqzXvIUaWA9QmuC629zd:27P1RvCVVe5xS2R15rLxqoKlxXmrpzd","tlshash":"5cb312db47c53e67d94f31b941db02f1eb061f31a5194e86460822e82dbf72a14daba8","first_seen":"2026-07-07T15:21:04.141918Z","last_seen":"2026-10-08T14:29:36.807314Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":9,"connect":110,"send":0,"wait":134,"receive":320,"ssl":696},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/will-flvio-bolsonaro-win-the-2026-brazilian-presidential-election-LUNiqIvy01pf.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"3.5.91.113","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.976Z","timestamp":1791469738976,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 11 Sep 2026 00:00:00 GMT","end":"Sat, 27 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C0:26:7B:E7:87:93:B1:B7:94:06:2F:C6:EC:6F:B4:5E:02:61:3D:A2","sha256":"FF:B5:29:F1:31:70:41:61:90:3C:0E:65:2F:99:55:E6:B3:F3:5A:01:15:0A:A9:B1:2D:33:C6:EC:7B:D9:C1:A1"}}},"request":{"raw":"GET /will-flvio-bolsonaro-win-the-2026-brazilian-presidential-election-LUNiqIvy01pf.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J9ZW6REXM5YX0SRP\r\nx-amz-id-2: 4usJgFhTD05bW/qo/JpXZt71k2QotJlGkbPakB9ToUbIg45lVw5bvquOAkpnBpgK+GAKKERjSuxHQQmvcyWaKBNyI1AdVla5\r\nContent-Length: 49204\r\nAccept-Ranges: bytes\r\nDate: Thu, 08 Oct 2026 14:28:59 GMT\r\nServer: AmazonS3\r\nLast-Modified: Tue, 18 Nov 2025 16:43:34 GMT\r\nETag: \"25db9021ab2a42dbcbd12b1aed207e61\"\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: .qvEfcxWXNBV1zphEHeRskQeNNEBbvPG\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":49204,"size_decoded":49701,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 805x599, components 3","md5":"25db9021ab2a42dbcbd12b1aed207e61","sha1":"b67ba78831b2c79bece493243e6265e2d1ec362e","sha256":"b42e72e31e3a2569f3d332fba103d68a87ea45200e097447cce63db9c839b283","sha512":"72dfa4000499e62278492555983784fa1ad197d635545c347c38d58cd62b97c6f208ae080235182cc2c3d4b235cb64517551813d109c45439af553967f0a534f","ssdeep":"768:LeCfzf70BtqbB3x4Egx41pmgwVfFcWzNwEAO+N/oHl9/NyZ/yPFryo9:iCfv0/qb5xXI9Fc09fHlexy","tlshash":"e323f1d56f2c0975ec3e967211b2714a13c6c20feeb894415c2341ab6dadfb4ee884da","first_seen":"2026-10-08T14:28:31.437098Z","last_seen":"2026-10-08T14:29:36.808008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":7,"connect":108,"send":0,"wait":127,"receive":212,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.797Z","timestamp":1791469738797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253695\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-11T20:04:18.438861Z","times_seen":1348,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":42,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/favicon.svg","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:59.459Z","timestamp":1791469739459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_ZX0K7T0PQJ=GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0; _ga=GA1.1.1530298916.1791469739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ZX0K7T0PQJ","value":"GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1530298916.1791469739"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: W/\"2f6-1a108c93ad4\"\r\nlast-modified: Sun, 04 Oct 2026 21:19:27 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 66115f1c73896bf9d12e7a149571fbe8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":758,"size_decoded":1817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27d70023ab58dc4e511a59f7297dffc5","sha1":"eca3608a4325e705f6e245037a9df1e4926fe011","sha256":"553bcd3798271564bddd03c3013a36812d1a675393839e1dea38bb986d5f505d","sha512":"b3a43e22fd755b7f7204107e632b41420ad35fa40a77838efe35b31f2faa2343adc0015a1cd05e56cdb47d163fe094f43bc3be59c8e4cf61f53a1150b6395b6a","ssdeep":"","tlshash":"a10128a5b19ca81cda50020c9b2e70b43077e1db534e4145b8602c77765529bbd772f8","first_seen":"2026-09-05T22:45:05.100717Z","last_seen":"2026-10-08T14:29:36.809618Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/whales","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:29:14.642Z","timestamp":1791469754642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_ZX0K7T0PQJ=GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0; _ga=GA1.1.1530298916.1791469739\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ZX0K7T0PQJ","value":"GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1530298916.1791469739"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:29:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"575-oLy4Zv4mZVbrjOEwqzNOpyC334o\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:29:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3fb737dec4298082af1b74e7e0fac8d8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1397,"size_decoded":1849,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7180cef0ad3c68d3654fae8253f79972","sha1":"a0bcb866fe266556eb8ce130ab334ea720b7df8a","sha256":"5cc73bf32c837fdb7ed54f12248517969ae6c29d5a2ab5da0b8cf31c6eaf41ae","sha512":"c4af243b40c7ac93790baf0962b1c82d1866ae6935a0a8d1f706ea63b10dee62fc270569d7a51a99e59f89c9338cfc581f63acd6bdd413ec7c7a219c0a38d3c0","ssdeep":"","tlshash":"ca212654525faabd14188f153e0194beb18b438f2dce4cc4d49bcf88ad808248e33dc6","first_seen":"2026-10-08T14:29:36.810405Z","last_seen":"2026-10-08T14:29:36.810405Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fredoka:wght@400;500;600;700\u0026family=Nunito:wght@400;600;700;800;900\u0026family=Space+Grotesk:wght@400;500;600;700\u0026family=Share+Tech+Mono\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.475Z","timestamp":1791469738475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Fredoka:wght@400;500;600;700\u0026family=Nunito:wght@400;600;700;800;900\u0026family=Space+Grotesk:wght@400;500;600;700\u0026family=Share+Tech+Mono\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Oct 2026 14:28:58 GMT\r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19725,"size_decoded":1881,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8a7b5bd77284b3ddb348c02c5275dd17","sha1":"dd7f6c6c4e62ddc76fa6089f58fd1177abd9e01e","sha256":"82991dfb615767e13f76cad1b468ffff33d899cb437eecbf6c15a92fac32266b","sha512":"69db6f4720c85bc007166890ac9de88604831bdff97769ed4287bea73e6e01c5cd7d06eb324d6ac5b4f19a45c197b97c65a6fc0bb5b957b068968a90c1a39fe0","ssdeep":"192:ZbYbI/b+b3bIAbvbGbI1bwbtbIObyH+yptkIkH0yXLkyLHbywkkhiHyy1Rk0RHhI:FgUGLfzeCoR1ulGDDeph/c0HkVR","tlshash":"0392dc91042bd100eb836cc267cf7e36ee4ea1517454c97aaffd5898ecabd221325b1d","first_seen":"2026-10-08T14:28:31.445232Z","last_seen":"2026-10-08T14:29:36.811698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":39,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.791Z","timestamp":1791469738791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 23:46:33 GMT\r\nexpires: Fri, 01 Oct 2027 23:46:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 571345\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-11T20:19:44.203029Z","times_seen":61071,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":53,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.798Z","timestamp":1791469738798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 23:46:33 GMT\r\nexpires: Fri, 01 Oct 2027 23:46:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 571345\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-11T20:19:44.203029Z","times_seen":61071,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":60,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.890Z","timestamp":1791469738890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:03:30 GMT\r\nexpires: Tue, 05 Oct 2027 16:03:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253528\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-11T20:43:43.376513Z","times_seen":35267,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/prices","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:29:13.651Z","timestamp":1791469753651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_ZX0K7T0PQJ=GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0; _ga=GA1.1.1530298916.1791469739\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ZX0K7T0PQJ","value":"GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1530298916.1791469739"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:29:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"10a-zIU7cQIFSCj57kTUI9ZnyqI00aw\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:29:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d7198f36523b7517395554924421329e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":1267,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e5a134cbdfb12e535b684e5e4e0ffbd6","sha1":"cc853b7102054828f9ee44d423d667caa234d1ac","sha256":"c76022ba6b493e4238df19dd16ea67ca93cc4e13164778b933d5971b82088e16","sha512":"5128f70d84405a5f6a5dc4259914c9111e30636027ade578acbb332e91477f7497246a7fd1dd61f2a3fc996313a45eb77530f97c9da905c00431b5b88478848a","ssdeep":"","tlshash":"52d05e47072452ba800823b8491877b1893b9b39419ccf0b0b4df02d28dddffb1052e1","first_seen":"2026-10-08T14:29:36.812601Z","last_seen":"2026-10-08T14:29:36.812601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.886Z","timestamp":1791469738886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:03:30 GMT\r\nexpires: Tue, 05 Oct 2027 16:03:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253528\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-11T20:43:43.376513Z","times_seen":35267,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/k2-pages.css","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.482Z","timestamp":1791469738482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /k2-pages.css HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: W/\"ebe4-1a108c93add\"\r\nlast-modified: Sun, 04 Oct 2026 21:19:27 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 07b7e396c756ca4cd1477b8781a05739\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60388,"size_decoded":12874,"mime_type":"text/css; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"dbbbb72c5debaafecfecfd79ddd1b028","sha1":"cdb31710a452c95dfff50f120bb260d00f566ea3","sha256":"1015b5c8fd18fdba612cd539f1596b3cc2cb82428ce6bf5f64a859b39575cdc3","sha512":"93236bb29b5f0f78afad3a079400ee11cb7e9067ba43e3ae0ce46c3c8370ec25bca04dd276c80584e1693a2c6beb38f709932c0b39324a10dba9feac3f6b22a0","ssdeep":"384:OR79Ns9M90pcgAAg4o6hncTq5eRlPGJ392qZE5dUd+VFnX1v:ORHsAgy4o/qKdGJIqu3R","tlshash":"1843a9b1f28082243412dfad5a31be7e2b6cb101e6144a78b57631f49ffaad6dc10db5","first_seen":"2026-10-08T14:28:31.44653Z","last_seen":"2026-10-08T14:29:36.814754Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/favicon.svg","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:59.457Z","timestamp":1791469739457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_ZX0K7T0PQJ=GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0; _ga=GA1.1.1530298916.1791469739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ZX0K7T0PQJ","value":"GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1530298916.1791469739"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: W/\"2f6-1a108c93ad4\"\r\nlast-modified: Sun, 04 Oct 2026 21:19:27 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 00fe9fcc902fc204ce3aeab7a9bb574b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":758,"size_decoded":1817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27d70023ab58dc4e511a59f7297dffc5","sha1":"eca3608a4325e705f6e245037a9df1e4926fe011","sha256":"553bcd3798271564bddd03c3013a36812d1a675393839e1dea38bb986d5f505d","sha512":"b3a43e22fd755b7f7204107e632b41420ad35fa40a77838efe35b31f2faa2343adc0015a1cd05e56cdb47d163fe094f43bc3be59c8e4cf61f53a1150b6395b6a","ssdeep":"","tlshash":"a10128a5b19ca81cda50020c9b2e70b43077e1db534e4145b8602c77765529bbd772f8","first_seen":"2026-09-05T22:45:05.100717Z","last_seen":"2026-10-08T14:29:36.809618Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/whales","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:29:06.644Z","timestamp":1791469746644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_ZX0K7T0PQJ=GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0; _ga=GA1.1.1530298916.1791469739\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ZX0K7T0PQJ","value":"GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1530298916.1791469739"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:29:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"603-k4/WImtzpH+h2Yo7T6FlbffAgcs\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:29:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c3588f1d1dbceeea356d534fb6bf924a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":1940,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"726fe99c08af13985fc89ac052903c35","sha1":"938fd6226b73a47fa1d98a3b4fa1656df7c081cb","sha256":"b51b166359b1715aa55db8c84595e3decf6a9e494210551fabb443e6ddd7fc71","sha512":"b05f07164cf0fb888d17072efa295d83ba3c77854c0d4cc0a7f93a982c606e431bc25a96702cfd4e86e84bb666ae4541a08396ef594e55ebddb42aa5c313880e","ssdeep":"","tlshash":"54313248550e647d02698b003cc6dafe75db13cf2dcd0884c6dace8056988619f66dca","first_seen":"2026-10-08T14:29:36.796102Z","last_seen":"2026-10-08T14:29:36.796102Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kunnibot.com/","fqdn":"kunnibot.com","domain":"kunnibot.com","tld":"com"},"ip":{"addr":"15.197.162.184","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:28:57.695Z","timestamp":1791469737695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kunnibot.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 14:30:31 GMT","end":"Thu, 10 Dec 2026 14:30:30 GMT"},"fingerprint":{"sha1":"01:84:BF:B6:9F:E4:84:4C:BC:37:B2:BD:34:0C:A0:D6:D4:52:3A:38","sha256":"FD:8A:A6:43:BF:C6:D4:D8:A9:DE:5E:E2:68:96:B9:70:09:43:B1:8A:88:70:72:CA:D7:26:F6:9C:EE:F5:4C:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kunnibot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Thu, 08 Oct 2026 14:28:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nz-urlredirect-redirected-for: 193479688\r\nLocation: https://kumibot.xyz\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":24,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"kunnibot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"kunnibot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/how-to-use-kumibot.mp4?v=1","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.972Z","timestamp":1791469738972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /how-to-use-kumibot.mp4?v=1 HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://kumibot.xyz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:59 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 9960738\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\netag: W/\"97fd22-1a10c41850b\"\r\nlast-modified: Mon, 05 Oct 2026 13:29:42 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5e0177b6c64b3c70a03f977ea25d2845\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2423517,"size_decoded":2424968,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"166c1b3bbcc56be9735718dfabdc998a","sha1":"5ea3eac76140a4f17b2f92550f7c971670e08992","sha256":"d7bf38b77d5b61da2a271efad45f78e903eec97eb4b060c95174252595f14183","sha512":"241b235f8e07cffa8ff4c3094fa3b317ac0efb0504682b1fd6516a5815413bd5e7091b0b5da6781b99f73a97722816c8ab088cf36863e16b34faf269abfde1f0","ssdeep":"24576:LiFcSVgGDVvXaGPkOeS3oPxd2SjBCOGXNfZ1CN:Li2SVnZXaGPkOtoP72S1k5Z1CN","tlshash":"7525de0aabd1a846cd799330dcf607283372e9f84a8b07df451d27bc5dda3a02e919d5","first_seen":"2026-10-08T14:28:31.451842Z","last_seen":"2026-10-08T14:29:36.816212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/politics-featured.css?v=1","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.476Z","timestamp":1791469738476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /politics-featured.css?v=1 HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: W/\"15b6-1a108c93ad7\"\r\nlast-modified: Sun, 04 Oct 2026 21:19:27 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 27e054f1f289754fa1f94f30bb7a7c09\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5558,"size_decoded":3701,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"90c108ed15c68907ccfa73e4216e26c7","sha1":"53cfcd17c7a0c89b17193f2940d577afb34b36c2","sha256":"b8223e652f23e861d3bf5fb6ddb856906fc0ddaac9357dbcc5deb36ab2383ec5","sha512":"6bf0eea228e4ca60bda7b8e865fc301e4ae2b896d7ecc07e2cd8ca8239fbf9bb307fa64088422870d2ad7e3906553d26f256e4b5d39b6202403101c6300435db","ssdeep":"48:g5DF8a6maWyBxumltVR+1zEG1M49Ogbd9Icg+mMy/1z1exoK3vDW:g5DF1oWbNEaMWlb7Rmz6xokDW","tlshash":"cfb195b275522239b827dd3552bc8e9e609c9603d9130ad8dc50a1d5cdfb1efef62384","first_seen":"2026-10-08T14:28:31.4238Z","last_seen":"2026-10-08T14:29:36.817463Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/politics","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.648Z","timestamp":1791469738648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/politics HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"7163-sq8D3RDtP+cJSEbzbAJ58kIcyd8\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4822a5d1c9370680265cf3988594314f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":29027,"size_decoded":11104,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9ce745bbd13a27bedc1e3cc2ea9bde9f","sha1":"fe8fddffa2228e6ba37ac694cfc0acbff7bd66c5","sha256":"fb3c12907c3b99b7c1861eb01920a1e5abb716649840c82b3e162c095987239c","sha512":"93a9ee9a338900de7b15e12a459b879293c6efe3aff57670f26b90441149beaf0b5d9d0b5d92a81c58ef3da87bd0e9605fbf78084ecf4b3c5be449dac8d89c45","ssdeep":"384:Pe2RLjQOahp5RWX+kEtvFDmqG+5FRPsz/s0K1PZNuSln:tejl9tvNRFRPsz/i1LuSln","tlshash":"d2d2d6174aaccb7b4ab612cf64cf7bd9a864142557e80a59f4fcef49608043e243f9d8","first_seen":"2026-10-08T14:29:36.818349Z","last_seen":"2026-10-08T14:29:36.818349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/replay/rounds?limit=1","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.649Z","timestamp":1791469738649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/replay/rounds?limit=1 HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"183-qyu/YY4jCUgpYREI0MWpOYmX/TE\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4db1aeaa86a1c4fed0c64daf4d48ce2d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":387,"size_decoded":1387,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b80081d704080263aed7bdc295f4c140","sha1":"ab2bbf618e23094829611108d0c5a9398997fd31","sha256":"2ed96f4798cd02f140bc4bf1e3cd67a6a22ee6f355547332e471a09a38edd20a","sha512":"211ea9b1149b8f59ff425521df21b3aafd80c62ae35ce1b87306106d591be76a0d325fc4e5ef356e5598ae18fd7b7b7a99ad755e6802f04a4508e5dfd95d7228","ssdeep":"","tlshash":"bae06815350909be0b817b22916fae930f9a203664bcc8a544fd8538b31226e90632a6","first_seen":"2026-10-08T14:28:31.452987Z","last_seen":"2026-10-08T14:29:36.819686Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.801Z","timestamp":1791469738801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253695\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-11T20:04:18.438861Z","times_seen":1348,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":49,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.888Z","timestamp":1791469738888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253695\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-11T20:04:18.438861Z","times_seen":1348,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/api/whales","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:29:22.643Z","timestamp":1791469762643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_ZX0K7T0PQJ=GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0; _ga=GA1.1.1530298916.1791469739\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ZX0K7T0PQJ","value":"GS2.1.s1791469739$o1$g0$t1791469739$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1530298916.1791469739"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:29:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\netag: W/\"575-oLy4Zv4mZVbrjOEwqzNOpyC334o\"\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:29:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 743392cb2c26f654d9609b5573c42cfe\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1397,"size_decoded":1849,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7180cef0ad3c68d3654fae8253f79972","sha1":"a0bcb866fe266556eb8ce130ab334ea720b7df8a","sha256":"5cc73bf32c837fdb7ed54f12248517969ae6c29d5a2ab5da0b8cf31c6eaf41ae","sha512":"c4af243b40c7ac93790baf0962b1c82d1866ae6935a0a8d1f706ea63b10dee62fc270569d7a51a99e59f89c9338cfc581f63acd6bdd413ec7c7a219c0a38d3c0","ssdeep":"","tlshash":"ca212654525faabd14188f153e0194beb18b438f2dce4cc4d49bcf88ad808248e33dc6","first_seen":"2026-10-08T14:29:36.810405Z","last_seen":"2026-10-08T14:29:36.810405Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kumibot.xyz/tools-teaser.css?v=1","fqdn":"kumibot.xyz","domain":"kumibot.xyz","tld":"xyz"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.478Z","timestamp":1791469738478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kumibot.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 20:30:48 GMT","end":"Sat, 02 Jan 2027 20:30:47 GMT"},"fingerprint":{"sha1":"D7:CF:85:62:D3:75:57:A2:FF:B8:A0:A3:B1:E1:A5:9B:94:61:A8:C0","sha256":"20:04:EB:BF:1D:81:A7:AF:0D:C4:88:BF:27:DE:F2:1A:AC:A2:6A:37:F2:38:51:FC:CC:01:04:28:CA:F6:69:C7"}}},"request":{"raw":"GET /tools-teaser.css?v=1 HTTP/1.1\r\nHost: kumibot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kumibot.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 14:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6741006\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: W/\"a38-1a108c93adf\"\r\nlast-modified: Sun, 04 Oct 2026 21:19:27 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 14:28:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 155e73f7152b536ac0817049b9ce6946\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2616,"size_decoded":2603,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"88c85c620ced6b9085deb0b5e2365884","sha1":"6c1d1982ae270c6f054bb01ebf5e47f75e4bb795","sha256":"314789334e668ac9a5869ee71f82ae71133509c393fd6c6d5a3e29ac17a11107","sha512":"16e089d4f3026eff21f7691393179947dc51ca17deeedc22512e094465c36d692d586629be73261a7007f414c18a52c406e02dda2cebc92b7283f66518bdebe9","ssdeep":"","tlshash":"0d5120f1a591b13ab81b9c656338ad9c70042616cd1602e0dea661c4cefaaa7ff2061d","first_seen":"2026-10-08T14:28:31.450734Z","last_seen":"2026-10-08T14:29:36.82091Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kumibot.xyz/","date":"2026-10-08T14:28:58.789Z","timestamp":1791469738789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kumibot.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253695\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-11T20:04:18.438861Z","times_seen":1348,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":28,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}