{"report_id":"32729411-c07f-44f8-8c2d-81e194c27b0e","version":6,"status":"done","tags":[],"date":"2026-01-27T16:51:24Z","url":{"schema":"http","addr":"test43593543598.lol","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":0,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"test43593543598.lol/captcha?redirect=/p/landing","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"title":"Coinbase Help","dom":{"size":16965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"958a70efa0431b3e48e7ef08676ca279","sha1":"c80ecf200bdafdf6eaf0a21f2cc8647dfb6bc477","sha256":"ec0c85f9c9fe534711e6c0c62600828c92caec47f512f4950383f9123aff5635","sha512":"26a7d5ea4195b9cbfdd4bc0f42729d58cf4057c0764d7c0719c017c277995a0c684e290baccc4db06db27b994a0591a689147d2fedb0f6bdb0df2f25de33814a","ssdeep":"384:YjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/+:YFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+F","tlshash":"a972ff50041744009b835ce223ce7f34fe4e92517142d0b1abfdab6beedbda6926939d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"test43593543598.lol","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":0,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T16:51:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"test43593543598.lol","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":11696,"sent_data":3162,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-25T22:25:49.134356Z","alert_count":0,"request_count":4,"received_data":115476,"sent_data":2543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-25T22:28:03.589555Z","alert_count":0,"request_count":7,"received_data":3600040,"sent_data":3352,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":543,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026bft=0dAFcWeA7MqyY7o_p1eJdZbvg_39piUHIlBLRKYP3e1NBSV1OsZUg7JG5XixLcQ_S9H8lfl3fllFsVNTOtaJRQ0jv0gLpmaI0B7w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-08T19:38:11.475806Z","times_seen":464811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e801b9cd57a77dacbdd07c782eb6a562","sha1":"455904b73385a3809f22ed57aa3e2e36f52a1492","sha256":"72ae2ac8bc5832c67b7215f8070fd6d5b896ce64259d0892d11fb3692b6c8a7e","sha512":"ad7fb3be7497386015521c951ab25bda411ee8245360ad2ca86f4ad7913a3e1f6ac9e8e384027bb36a8e14029090e56b3ab3817544a7761feeeca650e590b401","ssdeep":"","tlshash":"b61102b21604e0350f720de1a2ffcb75e492701cf15889eca515da982e7adcbce15585","size":1017,"data":"","first_seen":"2026-01-15T02:00:50.083803Z","last_seen":"2026-01-29T12:15:11.98464Z","times_seen":5387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a43fbdae72f5754020e0f0d8c065840f","sha1":"abd38ade6294d815865dd53b184c6651e76d7c55","sha256":"e278964f0eebaa4e5de75ebf936eb409d29f3f80ed39a9b02eb78b3e7f839c88","sha512":"3cb480762cf4586910b6f500cf7f0cd29042cd8e62522fc1f92e2fe392dcbe2c5a1bd6421895d3eb822826b2721fd069987a8ee33b6a72c34313850ee7af11b0","ssdeep":"384:fRQkRIiTuu9TUUl1J8Vp+CLgIm9f1zh129XV7naeP7Vl3iAAyrDpIs:fekRtnFdOyhClTaePZlBpIs","tlshash":"ee92b7d9b541b66a8372a0b4413f211ee1bb3d52bc0c261cf254c4e57e38689526ff7e","size":19773,"data":"","first_seen":"2026-01-07T06:37:28.139264Z","last_seen":"2026-02-01T22:47:33.138586Z","times_seen":7794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a52a9933fa7be4bdeb621b21a0c9395b","sha1":"eda09bffe2053e99ebbe0f5c110de5a9a0b4b11e","sha256":"644abf44dee8a91b1664329aa2c9e26188d7094d67d88be821a80bf5aaeaff80","sha512":"57caf3c9fea4d26eca3fc02331763626092740ef6f7914a0ea345467bcd7350286e320091b92b6721cfe07cddae498df383fd20e5196e8dd6a6788d3e589b81b","ssdeep":"","tlshash":"1f70008aac0c2008022a3020808f2a080232080002000e08000000a00c3200a030a88e","size":22,"data":"","first_seen":"2026-01-07T06:37:28.140121Z","last_seen":"2026-02-01T22:47:33.141515Z","times_seen":7796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"33927f6e71a3182e72e01be2c45a1e60","sha1":"923cc2c59af3e13f4c398a618a9ada9997cac2ef","sha256":"3270c1496640065fc412eda3c637acf80c913e7bb6d46cc73e09affb7a391c7c","sha512":"6ae52378d5b36cd2e4059942486e9b3a9f104273d6062fde01eb1062c185e1e0764e97273b4a176d8695f47ff370f29d45d18e1dd35ef3a35a1e5232313696ec","ssdeep":"","tlshash":"2d70000aec083008223a302080cf2a080ab2080002000208000000800c3200a0382e8c","size":22,"data":"","first_seen":"2026-01-07T06:37:28.137208Z","last_seen":"2026-02-01T22:47:33.139089Z","times_seen":7795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e82878db7a6b990225d9a5ab4c66a65","sha1":"d0403f6794c79c7b8bdde7cf8b1a2e4f80b8483f","sha256":"c210c2d74fa19a172134a44363bf86033cf04f29cef1edcd75f6fe81afe42d9d","sha512":"fbc84ed5fe58ec63572a6a14b045951e562f3bd997c6c77be91e06af6663265ce7baefd338f9c1c8296291032309de03e824b1be50bb6b1c5b43f4ebc5bb934f","ssdeep":"384:WRQkRIiTuu9TUUl1J8Vp+CLgIm9f1zt129XV7naeP7Vl3iAAyrDxIo:WekRtnFdOytClTaePZlBxIo","tlshash":"9db2b5d9f541b66a8372a0b4412f211ee1bb3d52ec0c2a1cf254c4e57e38689526ff7e","size":23637,"data":"","first_seen":"2026-01-27T16:51:29.818411Z","last_seen":"2026-01-27T16:51:29.818411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5ebf910b47ac9c42b701257e869fffdf","sha1":"aa9f043ab0fdfaf2424512111af28834ac6721f3","sha256":"bd73efe2cc285ae8e289d9fa42bb6d85eb9cb7c1c005630b3400903a22a817ad","sha512":"1913b1d31bd375f6be9b1ca1217ab22ec53f8aea89cb1750ef26c9925bfc66677d73974cd8ae88a8550794d6ff756d6f7e393576481427338ba93c811ced4813","ssdeep":"","tlshash":"46a0021d598da55e871532115406321c48b9db163d0a55086579c8e8376028d615aa3e","size":64,"data":"","first_seen":"2026-01-07T06:37:28.142181Z","last_seen":"2026-02-01T22:47:33.135965Z","times_seen":7805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026bft=0dAFcWeA7MqyY7o_p1eJdZbvg_39piUHIlBLRKYP3e1NBSV1OsZUg7JG5XixLcQ_S9H8lfl3fllFsVNTOtaJRQ0jv0gLpmaI0B7w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c8735279052ef7360469bc7c088e0a4","sha1":"86b71d69d4953a963034c35078bde9e3e304bab5","sha256":"af0bb42160462f3750016dc377167f9f2241519757d1ee4b6987ce406af27997","sha512":"ec9db65f2a2b722eab271ae875de95c4ac93c5fe6a67f497322c400cfd20db962028a953e2255f9976296c94db88b228d96e5f1bf94830879b42254aa268536b","ssdeep":"","tlshash":"e2d0237312021df64c316c300811009f2c4844239023c3f87ecfbe516f60d007d00578","size":219,"data":"","first_seen":"2026-01-27T15:38:30.599369Z","last_seen":"2026-01-27T16:51:29.821444Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"test43593543598.lol/captcha?redirect=/p/landing","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":80,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d82a1641cdccc1e350a92005b95c4e2c","sha1":"528330d9dd8a16084132e7b1e97ce54eb6fbeab3","sha256":"7e6c0109066a228fdbf0fb5aae99b479d9e7ae70c0b064abae6b096364b30e1a","sha512":"2229daba6b0965f92621c11c3994b7eb45bfb1acc29b28eec78afdced6eb0bb529174a4d3b0b85348af1f3adaf981b9852759d6af4212a187e242a38c973342a","ssdeep":"","tlshash":"2df068af349604409f4bf03c84ebe44931334017980e9c10b84d22916fa867c62b3a48","size":517,"data":"","first_seen":"2026-01-27T15:38:30.597093Z","last_seen":"2026-01-27T16:51:29.823228Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-08T19:38:11.475806Z","times_seen":464811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8e09c04f8e896849a489723d777c0bd","sha1":"b84a9772ca196c869861b9436cb717f131c30608","sha256":"47a2fc46b294260f4f9f90e3c67ee17f8fb21a46035af2819f258c1d851a8f44","sha512":"99fe137440a01e69e5abb5ecf37b84979bb4361cf965839e75235dfbbd62fb11bfec4fae62ffd0d4a43232866055c7c6ebed6d8d49cddaec3469b8171916f907","ssdeep":"1536:3A1PIsxFGO9kzaEE97umghDqqJWriObyWyLwJkPXS1SMwxtG+c1QQ:3ANIDOQaghD1+iObVyUJIS1SMwxk+c1J","tlshash":"ce73c03b924338ebcfba9f5246e566b8537ca04a158309dc327e06c6413edd76a781cc","size":75245,"data":"","first_seen":"2026-01-27T16:51:29.824897Z","last_seen":"2026-01-27T16:51:29.824897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"test43593543598.lol/p/landing","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T16:51:02.243Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /p/landing HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":221,"dns":0,"connect":102,"send":0,"wait":0,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"test43593543598.lol/captcha?redirect=/p/landing","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":80,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T16:51:03.026Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /captcha?redirect=/p/landing HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 27 Jan 2026 16:51:03 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"2766-SoAReI8mpJf81I6CeD/49pAAQdw\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10086,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2723), with CRLF, LF line terminators","md5":"0a55dafae35a924dd5b32246d84a2e80","sha1":"4a8011788f26a497fcd48e82783ff8f6900041dc","sha256":"0828c8a2470c3071acc50f2f829316fe59de0c04179e21822afc88662590a542","sha512":"6f12d343284e619f9fea93324e266b2d7a0b98cba54650f3bd5174059d1d13513c2d9b541cb87c6e959c573f62d402d23221e90a112cbb2b5d094b80e9547eb4","ssdeep":"192:B7k1QwTTjwu5gYShkVplgBdwHkCVRCHqncJb2PTAiD1:UkbhCgBdwpR+qcJb2PTA0","tlshash":"7b22b6aaeb50107065b2d3b4af714a45f7d79027d30385687aec92888ff3908c9a3fd4","first_seen":"2026-01-27T15:38:30.59082Z","last_seen":"2026-01-27T16:51:29.797224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","date":"2026-01-27T16:51:04.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Tue, 27 Jan 2026 16:51:04 GMT\r\ndate: Tue, 27 Jan 2026 16:51:04 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"dc011820123ba7745da88094e558d501","sha1":"ca9ed775a451ed17f426795f4c926fce035a0f4e","sha256":"f1e9611d7795cd326e7d7976787823be8c1a258d2be43c91cdb43d447c5e4ac7","sha512":"58e9da875323ba2577a7263bf4c19cac84fed1386778f6b7793e821dfab0f2857d0cb0ba2691fa7c98c32a5a2399b7d2767e293618e24f5699e2a335571ac74e","ssdeep":"","tlshash":"bfb012a30611cc280c800a93e927dbb8e4066078ead0d0f5b0291ffc55301b74125400","first_seen":"2026-01-15T01:58:18.123308Z","last_seen":"2026-03-14T22:28:56.501982Z","times_seen":21042,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"test43593543598.lol/p/landing","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":80,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T16:51:02.690Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /p/landing HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 27 Jan 2026 16:51:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 57\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /captcha?redirect=/p/landing\r\nVary: Accept\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"test43593543598.lol/captcha?redirect=/p/landing","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T16:51:02.800Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /captcha?redirect=/p/landing HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":1,"connect":103,"send":0,"wait":0,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://test43593543598.lol/captcha?redirect=/p/landing","date":"2026-01-27T16:51:03.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:09 GMT","end":"Mon, 23 Mar 2026 19:53:08 GMT"},"fingerprint":{"sha1":"48:33:DD:3F:0B:48:93:34:93:FB:CD:86:06:0B:02:0A:26:C8:9D:34","sha256":"51:93:52:C6:2F:18:71:EC:3A:8F:29:E1:74:86:FF:6C:A2:EC:19:58:65:2A:9C:A2:DF:E5:86:6A:E9:6A:73:7E"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://test43593543598.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 27 Jan 2026 16:51:03 GMT\r\ndate: Tue, 27 Jan 2026 16:51:03 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"e801b9cd57a77dacbdd07c782eb6a562","sha1":"455904b73385a3809f22ed57aa3e2e36f52a1492","sha256":"72ae2ac8bc5832c67b7215f8070fd6d5b896ce64259d0892d11fb3692b6c8a7e","sha512":"ad7fb3be7497386015521c951ab25bda411ee8245360ad2ca86f4ad7913a3e1f6ac9e8e384027bb36a8e14029090e56b3ab3817544a7761feeeca650e590b401","ssdeep":"","tlshash":"b61102b21604e0350f720de1a2ffcb75e492701cf15889eca515da982e7adcbce15585","first_seen":"2026-01-15T02:00:50.083803Z","last_seen":"2026-01-29T12:15:11.98464Z","times_seen":5387,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":94,"dns":2,"connect":21,"send":0,"wait":34,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ","date":"2026-01-27T16:51:04.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 11:32:45 GMT\r\nexpires: Wed, 27 Jan 2027 11:32:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 19099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026bft=0dAFcWeA7MqyY7o_p1eJdZbvg_39piUHIlBLRKYP3e1NBSV1OsZUg7JG5XixLcQ_S9H8lfl3fllFsVNTOtaJRQ0jv0gLpmaI0B7w","date":"2026-01-27T16:51:05.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 11:32:45 GMT\r\nexpires: Wed, 27 Jan 2027 11:32:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 19100\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"test43593543598.lol/","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":80,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T16:51:02.030Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 27 Jan 2026 16:51:02 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nLocation: http://test43593543598.lol/p/landing\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":104,"dns":1,"connect":104,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"test43593543598.lol/assets/coinbase/landing/favicon.ico","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"92.118.112.142","port":80,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://test43593543598.lol/captcha?redirect=/p/landing","date":"2026-01-27T16:51:03.361Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/coinbase/landing/favicon.ico HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://test43593543598.lol/captcha?redirect=/p/landing\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 27 Jan 2026 16:51:03 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 557\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Sat, 24 Jan 2026 11:50:24 GMT\r\nETag: W/\"22d-19befd75000\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":557,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"52bad1d125e93b0235a76b87996a82d0","sha1":"b2a650a251ddb79c24160958c649de3209ee2f1c","sha256":"b90cdcbe9e842bf371d9c5e7dd13359fde26879a4642ad6f752e86a65fab4fb5","sha512":"2dff26e6083fc1fa70283e407e205201d5694de361a925f4e64360cce56d2f94b690bcb075ca6f02b9b380b7e9e1f2c2d0da6f606e6a4380fc981f4ec55ef0f0","ssdeep":"","tlshash":"9df020d74e609b5c5c5e6b3e53ae882482510d9c1c14694fc442781a3c3429d05f6316","first_seen":"2023-05-01T23:35:47Z","last_seen":"2026-06-08T16:54:29.985716Z","times_seen":684,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://test43593543598.lol/captcha?redirect=/p/landing","date":"2026-01-27T16:51:03.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://test43593543598.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 27 Jan 2026 16:51:03 GMT\r\ncontent-security-policy: script-src 'nonce-iITmKzuzF5R484TgO8enwA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93655,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47148)","md5":"efbbba824e09355899b63eb42a68b6c6","sha1":"8db8b180d3c1ae4523fee4b3d06bf2f2ffd9a618","sha256":"a47cf1b581eec4946883bde8b2dde5d34e4e6a56cffe48fd26158f66eb41fa53","sha512":"344c3b020fca799fbdd9453aa8767f61659333d2b6654fa409e86e32abf0c3b5b8d7bafa7eb12c874bc7079c97ad76fd88be851a4e12607f8742c5f1efa0ef5d","ssdeep":"1536:y+kDzxA1PIsxFGO9kzaEE97umghDqqJWriObyWyLwJkPXS1SMwxtG+c1Qf:y+kDVANIDOQaghD1+iObVyUJIS1SMwxV","tlshash":"ce93ae224503289acfa79de213da7b74e62e9115214204f833fe0b979dabdd7527838c","first_seen":"2026-01-27T16:51:29.807066Z","last_seen":"2026-01-27T16:51:29.807066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","date":"2026-01-27T16:51:04.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42553\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 11:32:44 GMT\r\nexpires: Wed, 27 Jan 2027 11:32:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 19100\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e6fd8b6da2dcf5ca36317d505430750","sha1":"4909b6a1aa64d81acf66992af2f963a2ad82600d","sha256":"08003ec505dd59b8ccc0207938aa40d0ee43099fbaff76d2301cfe614b997e9f","sha512":"10b39a632b56defdca12f351df51b32d94ffc82939997fe087601f1016fc441788c0dc8559e8090c9bff30890587aabd0c59a2e7171ae7b6f63096acc2e43bab","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOiLX1","tlshash":"b5838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2026-01-15T01:58:18.135687Z","last_seen":"2026-05-06T01:17:01.463408Z","times_seen":21669,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","date":"2026-01-27T16:51:04.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 11:32:45 GMT\r\nexpires: Wed, 27 Jan 2027 11:32:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 19099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","date":"2026-01-27T16:51:04.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 22 Jan 2026 20:26:41 GMT\r\nexpires: Thu, 29 Jan 2026 20:26:41 GMT\r\ncache-control: public, max-age=604800\r\nage: 419063\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-08T19:36:28.258033Z","times_seen":649024,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"test43593543598.lol/","fqdn":"test43593543598.lol","domain":"test43593543598.lol","tld":"lol"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T16:51:01.800Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: test43593543598.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":1,"connect":104,"send":0,"wait":0,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://test43593543598.lol/captcha?redirect=/p/landing","date":"2026-01-27T16:51:03.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://test43593543598.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://test43593543598.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 11:32:45 GMT\r\nexpires: Wed, 27 Jan 2027 11:32:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 19098\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":83,"dns":1,"connect":20,"send":0,"wait":24,"receive":90,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026co=aHR0cDovL3Rlc3Q0MzU5MzU0MzU5OC5sb2w6ODA.\u0026hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=4xoko7r1vb0h","date":"2026-01-27T16:51:04.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 21:35:41 GMT\r\nexpires: Thu, 21 Jan 2027 21:35:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501323\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-08T19:35:37.488322Z","times_seen":873852,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":61,"dns":1,"connect":20,"send":0,"wait":23,"receive":26,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026bft=0dAFcWeA7MqyY7o_p1eJdZbvg_39piUHIlBLRKYP3e1NBSV1OsZUg7JG5XixLcQ_S9H8lfl3fllFsVNTOtaJRQ0jv0gLpmaI0B7w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://test43593543598.lol/captcha?redirect=/p/landing","date":"2026-01-27T16:51:05.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026bft=0dAFcWeA7MqyY7o_p1eJdZbvg_39piUHIlBLRKYP3e1NBSV1OsZUg7JG5XixLcQ_S9H8lfl3fllFsVNTOtaJRQ0jv0gLpmaI0B7w HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://test43593543598.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 27 Jan 2026 16:51:05 GMT\r\ncontent-security-policy: script-src 'nonce-gCKklGIU5V2wBMUKwCLkfA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"00a373444346b7e3e414d2b184afde0f","sha1":"6bc3d9d94a52274c9a63e681ed74d7efefeeb4c5","sha256":"f63f461fca872b6235a0816e349bc62bee4a507eb6b5524a74b6134cc53b52e0","sha512":"6908c4a59f22d3dd9b832f9ed3ad960dfb2f72ad2e4f9b7918f0e0346fac60576cb5d115a28ed2126fc706e8645a7ccee1f85bb7aad4894f6efefa62e692e527","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/F:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+E","tlshash":"af721050041744009b835ce223ce7f30fe4e92517142d0b1abfd9b6beedbda6926939d","first_seen":"2026-01-27T16:51:29.812433Z","last_seen":"2026-01-27T16:51:29.812433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6Lems1csAAAAAEvrdGeNak-U6YgIogIC5TvLa8Zv\u0026bft=0dAFcWeA7MqyY7o_p1eJdZbvg_39piUHIlBLRKYP3e1NBSV1OsZUg7JG5XixLcQ_S9H8lfl3fllFsVNTOtaJRQ0jv0gLpmaI0B7w","date":"2026-01-27T16:51:05.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42553\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 11:32:44 GMT\r\nexpires: Wed, 27 Jan 2027 11:32:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 19101\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e6fd8b6da2dcf5ca36317d505430750","sha1":"4909b6a1aa64d81acf66992af2f963a2ad82600d","sha256":"08003ec505dd59b8ccc0207938aa40d0ee43099fbaff76d2301cfe614b997e9f","sha512":"10b39a632b56defdca12f351df51b32d94ffc82939997fe087601f1016fc441788c0dc8559e8090c9bff30890587aabd0c59a2e7171ae7b6f63096acc2e43bab","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOiLX1","tlshash":"b5838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2026-01-15T01:58:18.135687Z","last_seen":"2026-05-06T01:17:01.463408Z","times_seen":21669,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
