{"report_id":"30e028b6-b6f2-49be-b3cd-044b3e01b701","version":0,"status":"done","tags":[],"date":"2026-08-08T01:03:56Z","url":{"schema":"http","addr":"sarangventures.in/747534757","fqdn":"sarangventures.in","domain":"sarangventures.in","tld":"in"},"ip":{"addr":"119.18.54.104","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui?session=ef2a00c598cd47c1e6bf1a5222e64602\u0026captcha_token=6e771e6e52188fe561a45ebf847cc05a\u0026captcha_verified=1","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"title":"Adobe — YKU_Prokect_Rec_pack.zip","dom":{"size":179183,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54959)","md5":"99cb0d2ee3de04099baaab3dfd6620f2","sha1":"3154a93e6db93214581e26b18e240fe1a5a6c41c","sha256":"902730b86dd4aaaf67fdd27fce5e7ff3dd1c90450d8ba68fd321177a4a7e41ff","sha512":"c4fcf569f7d85150d9e551e37a1b6a6946aa3a5d322569835f137888650f7b09f58666c5835a3fa3b1420d605dc7821fe0c1c4a8ec40f6e95402ab3dc8ff7a58","ssdeep":"3072:lxL55zKbwuxxKU0Ng7g56YAPW3n+Xz+E4HU+ZKPMLFWUppYzcIAO1L:Drt+xuNgE5FMW3+aQlsi","tlshash":"6404d07174c744b62e7f018e9ea7e6003db1200bd458c48e799c629c4f636a74ef9bda","dom_hash":"domhashe0f04159187bacaaad22fed47b93f5fc","first_seen":"2026-08-08T01:03:58.358619Z","last_seen":"2026-08-08T01:03:58.358619Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sarangventures.in/747534757","fqdn":"sarangventures.in","domain":"sarangventures.in","tld":"in"},"ip":{"addr":"119.18.54.104","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-12T01:03:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":8415,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-07T20:41:08.154017Z","last_seen":"2026-08-07T20:41:08.154017Z","alert_count":0,"request_count":4,"received_data":204558,"sent_data":2328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":1,"received_data":29581,"sent_data":618,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sarangventures.in","ip":{"addr":"119.18.54.104","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-27T02:21:37.538838Z","last_seen":"2026-08-07T00:26:56.086457Z","alert_count":0,"request_count":2,"received_data":656,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93fe2209c7860426f4fa2abc0dcb2b44","sha1":"12ce690ad9b0d2ec8393006959c4bf6016c896aa","sha256":"a28542a293d84fd312d1ba568da51bf4b5e2555ea87d443793e2fa88237736be","sha512":"b1149882ea42dc579e9fed86aa3c439e56065b616f81b7f5f15066ec50f4b95f329f7c625084c23f13203d0918f626cdeb47059136f6958bf70339a8143af68e","ssdeep":"","tlshash":"8f515d751689a5e9997d03caaf1af24057f400cdcbb8808a9b9d3d3b070bbf73d81499","size":2652,"data":"","first_seen":"2026-07-07T21:42:54.053795Z","last_seen":"2026-08-10T18:23:39.493874Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c8139f10fb6ca0fd1ddad12749cc162","sha1":"e760985bad88dd678c8c36234119ed764194e4ac","sha256":"d012bc73a79fe996b1716e2f708bb3f5417f339687ece274cbcca0ade0c3bf8b","sha512":"98dca25aa025d1283769c463cff0cc50b135b95c1b4c90c14c0128448fd47684d8b7362b48767d9b3e6c2b571b319fa649b7b35f2500622b5f8dc8914b689875","ssdeep":"","tlshash":"2381cfc934e3b0b06077b07d1f6ba60171364883184eea517a4d4725bfb392a87766d6","size":3961,"data":"","first_seen":"2026-06-08T21:55:11.008826Z","last_seen":"2026-08-10T18:23:39.464817Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a37b7fc22a01b9030f5884dba2c896eb","sha1":"bf5191ca482cdbcd949cbd31b48a456426038ffa","sha256":"5a2a1b1baccec4538dc0b829b9f31676be5ffae703276cae888ba6eba5f495b9","sha512":"5df96564e40e901b1e75aaa4642c39b27dd285c4c14f865b5dcd9a43dcf65bbcba09588d75faa1f941f4fe910f2c9cb39a3484802f6033065c2286eb8a2d32fa","ssdeep":"","tlshash":"10515c39158995e9957d03daaf2af24147f000cddbb08099ab9c3c37071bbf73c81898","size":2861,"data":"","first_seen":"2026-08-07T00:26:56.908663Z","last_seen":"2026-08-08T01:03:58.36759Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa02ef75e2c02a2d9092edb86a69d325","sha1":"7d92e4d1ba5fa39e723ff79f08f7f1b2afd33a8a","sha256":"6bd84f4bf834688b3cf1628f7e9a1e9603d0840a38c744bd1c4b9e109d890603","sha512":"dd124b444cc087437769212badf9444a648d360c0ce9350129dc070be2852a60796defa1d0f78aeaa134fe8fb0447d1581a6a47860eed1a769e72bf30c8e2fca","ssdeep":"","tlshash":"15e07d7349d4907cc6000170470bbf054267102b7a00d607bbed000e876a1c17223187","size":317,"data":"","first_seen":"2026-08-08T01:01:13.207818Z","last_seen":"2026-08-08T01:03:58.368139Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"095a8791933a5a9d23832df88ca7fb16","sha1":"36e12af53ea7e9c93643375105afc0d7ab7463ed","sha256":"8656b534558c5dcb05b7cf636979463d64219921a478180b0d78e6a0115bc7c6","sha512":"4aabfbef04a203fc7304dd10f0b52eb9bf20c6fc3b520e4c73f3c5bc51fcf872e7b352116afcdea76ad38f9f5368adcd478e9480c2045498b35bb180d49bc1f2","ssdeep":"384:cCYQtdyxy8yyHAybKeOss9eY8Xs6GNbvlJBkZToZrTgPawxquOOyP7SHfUlGye:qQCYzyP2eOss9eTXWNRJBkZToZrTgTx9","tlshash":"6e82a5ea3cd7457169bb866b65bfd24032710407b889c0847dacd0c46f74f96923aefa","size":17647,"data":"","first_seen":"2026-06-11T15:51:44.893502Z","last_seen":"2026-08-08T01:03:58.368812Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bd7372d9d17650b008fc0579f7b85af9","sha1":"651ce0826bb130c917962040d75cbcf22bd3e4b5","sha256":"4cc370a6f2558ad6d230c01040d80502210ab1660db1a4865dd668b0ae1882a3","sha512":"c5f57e0174921b8099be1c2918a9cc24c9b743d5d90372759b0ec94230dc3667e8de3bf40eaf9b1b52d25e945dbdc4f721f0537d117d41aee3aaad3c01b187d1","ssdeep":"","tlshash":"9de0c2666e6c5cb11bfb148d728b5f81391134a4f0ee28a2a2ddea067326ed31108ccc","size":315,"data":"","first_seen":"2026-08-05T18:07:47.625396Z","last_seen":"2026-08-10T18:23:39.481771Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6af2189c68de305667142fbb6334eddb","sha1":"9ffaab5b76d862c084843b8689b36a5cda26e5d1","sha256":"ce3c662769013e8584a61d5bce078794f85c26b8cd14a35d5326344069e05d60","sha512":"ecf31c728265cfe0c2c3784c2fb8a74869d2adbeb8ba874198fedc5a415127345fc066d11f48c3d6aae3429b3004c20f2fcd9d0423317205c6da750be03249aa","ssdeep":"","tlshash":"a5d02b156e2c4cb107fa044d72cb5f8139113454f0ee24b2b2dda7057325ec30108ccc","size":289,"data":"","first_seen":"2026-08-05T18:07:47.66583Z","last_seen":"2026-08-10T18:23:39.530043Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c80fec8359124ba82c4c8c5ae22a988b","sha1":"d594f59f6a287cee412e9443e71fa8d181c93a31","sha256":"1782b5ebc094162a86e4aeae5ebd98709aea8e28fce7ffdeffce36d056b07594","sha512":"93a39cdb984700aef64611426f683d217c3db3ba45ae364399abfbce2bbd126b7810da94fa71bafb9d82200e62171a191bca05bf11d4aba8c1852f1c6a144a91","ssdeep":"96:UXzQVoA4JJvhLJrwTMlbaeasBqGC/uiV3F5CYvNO/QuBKp+wSzS82j:mzQVoZHhLJriMVan/8YvNO/Q4pwSm8K","tlshash":"0da1ba8e68e720365a73b03e9e9f912835378403548bda107dac95106fa267c53bbfcd","size":4737,"data":"","first_seen":"2026-08-05T18:07:47.734978Z","last_seen":"2026-08-10T18:23:39.551811Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db3c6f87506e03816a7318fa18bc9710","sha1":"a0da51f5548b262991eae47679999a167086196e","sha256":"3c3e6b406c204f1b4793d1270ca1e92719163102821f37f009310e1f4930b5eb","sha512":"2faa9c527f48588c23c787619bb2141f298304725df5046b4a1c27da81a79d3292130a615fab685dd30b613402eb1f66be9c1036933484fbc1f352f267c9b2e7","ssdeep":"96:5XzQVoA4JJvhLJrwTMlbaeasBqGC/uiV3F5CYvNO/QuBKp+wSzS82K:9zQVoZHhLJriMVan/8YvNO/Q4pwSm8d","tlshash":"11a1ca8e68e720365a73b03e9e9f912835378403408bda107dac95106fa267c53bbfcd","size":4717,"data":"","first_seen":"2026-08-07T01:05:30.302113Z","last_seen":"2026-08-08T01:03:58.373227Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"014c105d39455943d0ab5de719145c79","sha1":"958d4d4db8b8f06c77259c4032ac07bb3385a44e","sha256":"9b60bccb817a4f72c0e9a367a70a717e3a06073689602cb9ed282622e9ff8d4f","sha512":"61b982a7462a00e03fcfd82fdc644aa123b8633178ad6b928a895a36a53f9ce0cac0e809631a3e55eccd8b5485b0fc2acb17c7cdcecaef5e43a116cc383bd197","ssdeep":"","tlshash":"10516d751689a5e9997d03caaf1af24057f400cdcbb4808a979d3d3b070bbf73d81498","size":2678,"data":"","first_seen":"2026-07-07T21:42:54.080168Z","last_seen":"2026-08-10T18:23:39.479199Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sarangventures.in/747534757/","fqdn":"sarangventures.in","domain":"sarangventures.in","tld":"in"},"ip":{"addr":"119.18.54.104","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T01:03:28.538Z","timestamp":1786151008538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sarangventures.in","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 13:10:18 GMT","end":"Sat, 12 Sep 2026 13:10:17 GMT"},"fingerprint":{"sha1":"B3:D1:14:BA:7B:E2:D4:7C:DF:25:65:D0:95:6E:FC:29:91:6F:0B:A5","sha256":"15:83:D4:AF:2A:E3:C2:D9:F0:F0:89:3A:4B:7A:C8:1E:B3:47:6B:20:7C:96:F8:4D:20:FF:B7:F3:BE:35:B0:78"}}},"request":{"raw":"GET /747534757/ HTTP/1.1\r\nHost: sarangventures.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nlocation: https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui\r\ncache-control: max-age=7200\r\nexpires: Sat, 08 Aug 2026 03:03:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 1213\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 08 Aug 2026 01:03:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T21:57:24.364755Z","times_seen":17825265,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","date":"2026-08-08T01:03:29.774Z","timestamp":1786151009774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 01:03:29 GMT\r\ndate: Sat, 08 Aug 2026 01:03:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7731,"size_decoded":1407,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d89c1a68c8d7a7fc7958a4fef78a1375","sha1":"546182bfecd18cff117e5024d27c314d694c1c40","sha256":"2c680fed85fe48a953777e86cf733aa32c579d7f858ea0ec94244b634b940908","sha512":"4ac7f6f23e7e2081aee8c0e3b454a69218a6fe6c52e082ddcf06b0991c16171315a1128671173e50793c21fc301b01f950330230973c4da8d198b1aa171963d8","ssdeep":"192:Qogy/M3JIN+IoqIRM33yN0PoZPiM3QhNbV:vG9UUv2","tlshash":"39f18ca1545b9458ab831cc237cf3e256d9e6011b095c27ddffe288cdceac2a5291b1e","first_seen":"2025-09-25T10:51:29.8999Z","last_seen":"2026-08-09T22:15:59.856101Z","times_seen":248,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":31,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/favicon.ico","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","date":"2026-08-08T01:03:29.884Z","timestamp":1786151009884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusrul38p8fnr4xx197p9z21.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:19:03 GMT","end":"Wed, 30 Sep 2026 19:12:25 GMT"},"fingerprint":{"sha1":"56:E1:BF:38:11:B5:39:77:22:E6:4C:A8:1F:80:DA:72:03:F6:F2:C6","sha256":"CA:4D:49:69:EC:6E:95:4D:C7:BC:A6:45:FB:A2:B2:54:85:6B:C5:66:34:36:0C:BB:FD:DC:0B:11:9C:C3:E9:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 01:03:29 GMT\r\npriority: u=6,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rvilz18dysdIwlNMhwNLSgmTcM0RKdvQsip7Czml4X%2BEndp%2BhTOj06Tyw869wR6HXbaD%2BFnTrMcv%2FnZZZFnm0ThVwr15YNkiSCwJ1qyMI9B4PjoJdJrb0R%2BrXkCAy7JODSKCACYXNppWhRL%2Frihb%2BUxz4uf9wiQaJdn9KZw0BUeCMggDEakUbwOUQpUXFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a27a9a03cc885699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20424,"size_decoded":6663,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"108a011c58485a4f35d33ad61fcdd05d","sha1":"1c499cb55d32e78748aa848b34b9a7450da646e6","sha256":"08f3809591364902782acf7ff8b39debfc70a32b1355b5e2168fc2b87360623a","sha512":"e26488466a125de362a7bf4fdaf0dcc1966d2e1dfdb4f6402c9be4cde25c9d6de8ab992667773859618adb52b1cf17f2b661be8773d46d0e359da88f4bf45e4b","ssdeep":"192:4IGzMsK3JR8Rk1OYEjYl5IqJy3foxjk54iSXDUyvK68yiSL0C+sTwykg0+0oqxyX:4IHJ5lKiIVxDoLgaGic0","tlshash":"cb92748b29e710765563617e9f5f62003636c8072149ee747fac93409f82a6d4b73bdc","first_seen":"2026-08-08T01:03:58.361713Z","last_seen":"2026-08-08T01:03:58.361713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/z/p2mwPw/2BVVzvphPzw","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","date":"2026-08-08T01:03:32.408Z","timestamp":1786151012408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusrul38p8fnr4xx197p9z21.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:19:03 GMT","end":"Wed, 30 Sep 2026 19:12:25 GMT"},"fingerprint":{"sha1":"56:E1:BF:38:11:B5:39:77:22:E6:4C:A8:1F:80:DA:72:03:F6:F2:C6","sha256":"CA:4D:49:69:EC:6E:95:4D:C7:BC:A6:45:FB:A2:B2:54:85:6B:C5:66:34:36:0C:BB:FD:DC:0B:11:9C:C3:E9:24"}}},"request":{"raw":"GET /z/p2mwPw/2BVVzvphPzw HTTP/1.1\r\nHost: rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-accel-buffering: no\r\npriority: u=4,i=?0\r\ndate: Sat, 08 Aug 2026 01:03:32 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a27a9a138ccc5699-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: 0\r\nserver: cloudflare\r\nset-cookie: captcha_session=ef2a00c598cd47c1e6bf1a5222e64602; Path=/; Max-Age=600; SameSite=None; Secure; Partitioned\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M69E7KtrXvi%2B5N89krm3Ltp5eNfCoq9Sh%2F%2BhY%2BjkEPS%2Fr3%2BzoyWZZQtzWcdsiD9jCnX%2F5anHq3RghLanWhb4g7rMvAPLyDsUESZOdB8Uudst4cQeFBZq%2FNkpk4G%2BjjH%2B%2FRvsT2j3rgplM3mEnth2qOxnRlCEVV3Z\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11240,"size_decoded":5054,"mime_type":"application/json","magic":"JSON text data","md5":"71dc5196b5a711bb981b228c3bb0eedb","sha1":"566b7669114969f4c8449ee396fffb689c1c8f87","sha256":"62ded2a87b4e9b12e2d5e9499930836de8d51c87d5ab77496f6ad60393735b9b","sha512":"26f2d4272388b3e362ed810adf8cd19ce3dee2c013c08024b357e06e9b81a2d5bf34931ff7ed531099869272c6fe4e1899cd71b2685b901d40a40ef0ec7ffd2c","ssdeep":"192:qZddGuGTs/XFEIYqH+/2qVVdSsLrPY9R5g/yAWery:EauGTsdE3PHH6AWB","tlshash":"c932a73f3884d0f299af5f5eaff6ed142035715582b78120798ce817c3935fa5626a8c","first_seen":"2026-08-08T01:03:58.363437Z","last_seen":"2026-08-08T01:03:58.363437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T01:03:28.722Z","timestamp":1786151008722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusrul38p8fnr4xx197p9z21.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:19:03 GMT","end":"Wed, 30 Sep 2026 19:12:25 GMT"},"fingerprint":{"sha1":"56:E1:BF:38:11:B5:39:77:22:E6:4C:A8:1F:80:DA:72:03:F6:F2:C6","sha256":"CA:4D:49:69:EC:6E:95:4D:C7:BC:A6:45:FB:A2:B2:54:85:6B:C5:66:34:36:0C:BB:FD:DC:0B:11:9C:C3:E9:24"}}},"request":{"raw":"GET /pl/oxehrGGDui HTTP/1.1\r\nHost: rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\npriority: u=0,i\r\ndate: Sat, 08 Aug 2026 01:03:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a27a99fcac785699-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cr%2FGzHzhsGpjxCZGKRvHCmy84agG%2BdCZo5lAhb8KNBMNPxA3%2BT2QHg5M%2Fz%2FCyH5o4gQIukGOjMw%2BH2OaKjbpkx4mvb5j5hrWMyS9rpRqzcaseHLJhuI%2BnQKSNIxRnLCWrw7XKiNRusr1GYI%2Fc4s%2FtSsRgm4Z%2FIId\"}]}\r\nx-accel-buffering: no\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169540,"size_decoded":101056,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54948)","md5":"ccb54458a3d157da509a2276735516d4","sha1":"c83f13f9a2077441882c297d8d33ebb918de2d84","sha256":"a6bfa1b9f26806f0ce9a1c3ca43b73206a482a682f27efb9cc882fcd3af7c803","sha512":"bd5a36f45f1a29ef927f8141e0bfa2db5bb8585b116c40f7e2e1f0377fd881c45144446090023a152a1fe45972dd42e7a7f647828a4ca9a6034067196c10fadc","ssdeep":"3072:zxm55zKbwuxxKU0Ng7g56YAPW3n+Xz+E4HU+ZKPMLIpKYzcIAO1P:grt+xuNgE5FMW3+aQlXD","tlshash":"8ef3d07174d784762f6f014b9ea7aa403cb1240bd454c48e789c52cc4f636978ef9bab","first_seen":"2026-08-08T01:01:13.204219Z","last_seen":"2026-08-08T01:03:58.364901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":0,"dns":5,"connect":16,"send":0,"wait":544,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","date":"2026-08-08T01:03:29.910Z","timestamp":1786151009910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 10:46:28 GMT\r\nexpires: Fri, 06 Aug 2027 10:46:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137821\r\nlast-modified: Thu, 04 Sep 2025 17:09:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28768,"size_decoded":29581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28768, version 1.0","md5":"d0557afb3f0c7a3864f0e3f412bcd8ed","sha1":"b358d67d067e4cd71a3a6e51245fef72cb063c95","sha256":"4ac9b88dc5104c7450eb73bfd416a63dbe4bf6b6acac44b8c953e3567dc4a663","sha512":"596b009234f0f4df076f8f251485b06f7cdb3f0e7458ecb141229f2b3723873c68536d24a5123d55836cc458599da5e0057ce81542400eaede3efdefea4f1bac","ssdeep":"768:kFFnSMWY1gDAuZ0LqnutgJ6keQtlIXoj/fajyA:gnSXqgDARLqb6XQtqXojE","tlshash":"fdd2f2e40b2176e5fbc68c747331715edc714a38c3ef956b125e1ae4202a800b77be84","first_seen":"2025-03-11T05:38:45.137969Z","last_seen":"2026-08-10T18:39:52.207859Z","times_seen":8160,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":2,"connect":29,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/css/captcha-browser-scheme.css","fqdn":"rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev","domain":"nusrul38p8fnr4xx197p9z21.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.216.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui","date":"2026-08-08T01:03:32.743Z","timestamp":1786151012743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusrul38p8fnr4xx197p9z21.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:19:03 GMT","end":"Wed, 30 Sep 2026 19:12:25 GMT"},"fingerprint":{"sha1":"56:E1:BF:38:11:B5:39:77:22:E6:4C:A8:1F:80:DA:72:03:F6:F2:C6","sha256":"CA:4D:49:69:EC:6E:95:4D:C7:BC:A6:45:FB:A2:B2:54:85:6B:C5:66:34:36:0C:BB:FD:DC:0B:11:9C:C3:E9:24"}}},"request":{"raw":"GET /css/captcha-browser-scheme.css HTTP/1.1\r\nHost: rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rl5atqbufytf2v53ayvi6s.nusrul38p8fnr4xx197p9z21.workers.dev/pl/oxehrGGDui\r\nCookie: captcha_session=ef2a00c598cd47c1e6bf1a5222e64602\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ndate: Sat, 08 Aug 2026 01:03:33 GMT\r\ncontent-type: text/plain\r\npriority: u=2,i=?0\r\ncf-ray: a27a9a15accf5699-OSL\r\ncf-cache-status: BYPASS\r\ncache-control: no-store\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yB5cb4uOUBenAWzB3qN9Q%2BCCNXVECaOcTclsyiffYxfwsqCQwvb6d4E8rn0oYm8qZLM%2F3wmbr84GgqyBf3KOmw3lIXZ0gOMuxczcw249IR6Hu%2F%2FiaV0qAw%2F4s1rtbRciNNgXUwcbhZN4zvfFoi16cDTW6Wx5DeCd\"}]}\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T21:57:24.364755Z","times_seen":17825265,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sarangventures.in/747534757","fqdn":"sarangventures.in","domain":"sarangventures.in","tld":"in"},"ip":{"addr":"119.18.54.104","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T01:03:28.080Z","timestamp":1786151008080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sarangventures.in","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 13:10:18 GMT","end":"Sat, 12 Sep 2026 13:10:17 GMT"},"fingerprint":{"sha1":"B3:D1:14:BA:7B:E2:D4:7C:DF:25:65:D0:95:6E:FC:29:91:6F:0B:A5","sha256":"15:83:D4:AF:2A:E3:C2:D9:F0:F0:89:3A:4B:7A:C8:1E:B3:47:6B:20:7C:96:F8:4D:20:FF:B7:F3:BE:35:B0:78"}}},"request":{"raw":"GET /747534757 HTTP/1.1\r\nHost: sarangventures.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nlocation: https://sarangventures.in/747534757/\r\ncache-control: max-age=7200\r\nexpires: Sat, 08 Aug 2026 03:03:28 GMT\r\ncontent-length: 284\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 08 Aug 2026 01:03:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T21:57:24.364755Z","times_seen":17825265,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":3,"connect":145,"send":0,"wait":149,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}