{"report_id":"3d53a6a1-9cc3-4490-a7f3-045fbdf50418","version":6,"status":"done","tags":[],"date":"2025-04-07T07:28:42Z","url":{"schema":"http","addr":"krgpmis.com/LoginPMS","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krgpmis.com/LoginPMS","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"title":"چوونه‌ژوره‌وه‌"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T07:28:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"krgpmis.com","ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-19","domain_rank":0,"first_seen":"2025-04-07T07:28:43.036073Z","last_seen":"2025-04-07T07:28:43.036073Z","alert_count":0,"request_count":9,"received_data":797188,"sent_data":5789,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-04-07T07:28:17Z","timestamp":1744010897,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.24","port":37876,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-04-07T07:28:17.558292+0000\",\"flow_id\":423069272345134,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":37876,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"grupviralterbaru-66.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":478,\"bytes_toclient\":116,\"start\":\"2025-04-07T07:24:33.494126+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-07T07:28:24Z","timestamp":1744010904,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.24","port":37864,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-04-07T07:28:24.296005+0000\",\"flow_id\":849454298051993,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":37864,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"grupviralterbaru-66.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":478,\"bytes_toclient\":116,\"start\":\"2025-04-07T07:24:32.669081+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-07T07:28:38Z","timestamp":1744010918,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.24","port":37890,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-04-07T07:28:38.333351+0000\",\"flow_id\":153839247383480,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":37890,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"grupviralterbaru-66.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":478,\"bytes_toclient\":116,\"start\":\"2025-04-07T07:24:33.744376+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krgpmis.com/LoginPMS","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"246c89f441fb86f42c533cf5aea26496","sha1":"af55e98137fdffd65d0c51cacfed1fba7f0c7257","sha256":"d4b9d39a946ec30a063cd23347464bac2e276d5da191dbd10bb60ff505de5d95","sha512":"8bacf4d0c1c9780117be271ca3957c529c47a47d83490c51157e81cd884a2b551e366270eb1e78204b051499f5af4838fec3caefab2adf296f07039d623de822","ssdeep":"","tlshash":"7c11898a74e34050aa6770bd495f18192028428b4e08ed243f4d96985f14b3dc677b8c","size":1085,"data":"","first_seen":"2025-04-07T07:28:48.17718Z","last_seen":"2025-04-07T07:28:48.17718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/bootstrap/js/popper.js","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8b6d02211dd94c8838114f07ab48846","sha1":"d3932015eb3481209f00b5bb1e5f478c1cde698a","sha256":"cacc6d8f6d9f964cd1ee2b53b14898d38fedd0d3f925a1d0f547ea5cf5e3c061","sha512":"7a15a10765e3a123b738c4076994662775aa02e26e21e7cb913698e4aff7d5e233b2e87aad2e7fa93544f783e25e99605638da77fbd48f4e72c1d1c862569e55","ssdeep":"1536:pP/woCJh5YPeMmiZBXJpJeTch4YLqb9mGiXjFc1Kws:BwoCJh5lMmivkTch4YLqb9bd1i","tlshash":"6083b79a3589b2e209b7936b875ea10df33641761317b05078ecd2a83f70e7451abcf9","size":84118,"data":"","first_seen":"2023-03-07T12:27:38Z","last_seen":"2026-04-03T04:50:18.727744Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/LoginPMS","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca145f072f9887f25e5d5f6f06e67b13","sha1":"b3a8762d4d589df21dcd3ceebe38b1c6f74e2d7b","sha256":"c8a466d935a15e5a8841816c17bf41361dcedea333b31c03a41908a792f14db0","sha512":"026a263728b6bb04c2aff66750c93e4d8421fd40fb2b0207f564a008c9f3cca709c9f88429953b6423b1afe9057de19c7e7a44bc606d1e1cf8c03d77500977cc","ssdeep":"","tlshash":"02d0a77a3ce38050067b71e6212f824438216227054388407d5c15908f10d15623669c","size":252,"data":"","first_seen":"2025-04-07T07:28:48.177978Z","last_seen":"2025-04-07T07:28:48.177978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/bootstrap/js/bootstrap.js","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3f9315fddb9e83d61cb2e4a794ec794","sha1":"b963185cb80f6b14113ea0bf574945178edd3281","sha256":"ccb88f08e16ddbba976fa41e6d026059fbcec80931ff32dd5b925d4cc186c2ce","sha512":"157d28096c40bfa5e104d1138fd8780285a723d7c9cd70e3004be70e3dc75334834ba64371e6601b6dc477bfdccca76004e2389f1e3c681a45a6a8268bcd76dd","ssdeep":"768:NV891XL4e+77wlV06Kq4oXlbs2wPnvLon/KiVfcyP1y3vVTCM5zoSV62Bzn6PpD4:NVG077wEq4oVh0V3vffV7EDBLwX","tlshash":"5fb3124a3e9a2492487bf33acf6b410dfb3515ab460592447caca9d82fb0524539dffc","size":115220,"data":"","first_seen":"2023-07-10T20:27:06Z","last_seen":"2026-01-23T04:22:28.150819Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/jquery/jquery-3.2.1.min.js","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"473957cfb255a781b42cb2af51d54a3b","sha1":"67bdacbd077ee59f411109fd119ee9f58db15a5f","sha256":"75b707d8761e2bfbd25fbd661f290a4f7fd11c48e1bf53a36dc6bd8a0034fa35","sha512":"20da3fe171c075635ef82f8de57644c7a50be45eb1207d96a51b5eadeaac17ee830b5058d87e88501e20ec41ef897f65cec26a0380eaf49698c6eaa5981d8483","ssdeep":"1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQ+:Vxc2yji4j2uC/kcQDU8CuE","tlshash":"6183e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86663,"data":"","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-04-04T06:00:37.633639Z","times_seen":2804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"krgpmis.com/LoginPMS","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-07T07:28:20.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /LoginPMS HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache,no-store\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: Identity.External=; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\n.AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI; HttpOnly; SameSite=Strict; Path=/\n.AspNetCore.Mvc.CookieTempDataProvider=; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\r\ncf-ray: 92c7cec2cc7e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12343,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3767), with CRLF line terminators","md5":"c2193d03180e47626f1c1178631356ce","sha1":"90daa943794a7e8c90c5e48b35984f0ac5cfdf5a","sha256":"563929a0fbb606b4d2d291de895240307f2aa28360d929dfc13be92d36664db0","sha512":"48b9aff6438fd222a82cfe087dcbfa2e02c21d6d56e0c85a10b226ecab59232482e864f179110cbf99182fd2decf740fb30d9839e164e0521d99aa326d4e1280","ssdeep":"192:ycCJ5XXbue9SXr84FVYfDYGd9VVwJW8/9:ycCXP8Ecj9","tlshash":"fa42a837449db9da3235034094a6cb2cee878343a110cc257efe07be1fa6d929d97b56","first_seen":"2025-04-07T07:28:48.16978Z","last_seen":"2025-04-07T07:28:48.16978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":32,"dns":0,"connect":7,"send":0,"wait":71,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/jquery/jquery-3.2.1.min.js","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /Assets/Global/login/vendor/jquery/jquery-3.2.1.min.js HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2504,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"remoteHost\":\"91.90.42.154\",\"deviceMake\":\"\",\"deviceModel\":\"\",\"visitorData\":\"CgszNTlCUWZieGZScyiL_c2_BjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiA0\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0,gzip(gfe)\",\"clientName\":\"WEB\",\"clientVersion\":\"2.20250403.01.00\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"originalUrl\":\"https://www.youtube.com/@Bluedartofficialchannel\",\"platform\":\"DESKTOP\",\"clientFormFactor\":\"UNKNOWN_FORM_FACTOR\",\"configInfo\":{\"appInstallData\":\"CIv9zb8GEI3MsAUQntCwBRCd-c4cEOHssAUQ8OLOHBCnmc4cEMzfrgUQmvTOHBDs3c4cENuvrwUQiafOHBDf3M4cEKPvzhwQpf3OHBC72c4cEIS9zhwQts3OHBCD7s4cEMWBzxwQ5Of_EhCq-M4cEN_YzhwQ8JywBRC36v4SEIeszhwQuOTOHBDT4a8FEM3RsQUQ18GxBRCfy84cEInorgUQy_3OHBCI468FEJPZzhwQvbauBRCZmLEFEIHNzhwQ9quwBRDd_c4cEJ7bzhwQyeawBRDb2s4cEOLUrgUQ4M2xBRC-irAFEIiHsAUQibDOHBCa584cEJ2msAUQmY2xBRCv884cEN68zhwQlP6wBRC5gc8cELSBzxwQ6-j-EhD8ss4cEODg_xIQvZmwBRDJ968FEMvRsQUQ7d7OHBDY_c4cEKaasAUQ44O4IhC52c4cEPirsQUQ7PjOHBDg5M4cEJPwzhwQg_TOHCowQ0FNU0lCVWJvTDJ3RE5Ia0JwU0NFdWZpNWd1UDlBN3Ytd2I1N0FQSjNBV0VNeDBI\"},\"userInterfaceTheme\":\"USER_INTERFACE_THEME_LIGHT\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"acceptHeader\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"deviceExperimentId\":\"ChxOelE1TURRMk9UYzBNalF3TVRNMk1ESTROUT09EIv9zb8GGIv9zb8G\",\"rolloutToken\":\"CJPQr5j-wrm9IxCv9MztssWMAxiv9MztssWMAw%3D%3D\",\"screenWidthPoints\":1280,\"screenHeightPoints\":1024,\"screenPixelDensity\":1,\"screenDensityFloat\":1,\"utcOffsetMinutes\":0,\"mainAppWebInfo\":{\"graftUrl\":\"https://www.youtube.com/@Bluedartofficialchannel\",\"pwaInstallabilityStatus\":\"PWA_INSTALLABILITY_STATUS_UNKNOWN\",\"webDisplayMode\":\"WEB_DISPLAY_MODE_FULLSCREEN\",\"isWebNativeShareAvailable\":false},\"timeZone\":\"UTC\"},\"user\":{\"lockedSafetyMode\":false},\"request\":{\"useSsl\":true,\"internalExperimentFlags\":[],\"consistencyTokenJars\":[]},\"adSignalsInfo\":{\"params\":[{\"key\":\"dt\",\"value\":\"1744010894434\"},{\"key\":\"flash\",\"value\":\"0\"},{\"key\":\"frm\",\"value\":\"0\"},{\"key\":\"u_tz\",\"value\":\"0\"},{\"key\":\"u_his\",\"value\":\"2\"},{\"key\":\"u_h\",\"value\":\"1024\"},{\"key\":\"u_w\",\"value\":\"1280\"},{\"key\":\"u_ah\",\"value\":\"1024\"},{\"key\":\"u_aw\",\"value\":\"1280\"},{\"key\":\"u_cd\",\"value\":\"24\"},{\"key\":\"bc\",\"value\":\"31\"},{\"key\":\"bih\",\"value\":\"1024\"},{\"key\":\"biw\",\"value\":\"1280\"},{\"key\":\"brdim\",\"value\":\"0,0,0,0,1280,0,1280,1024,1280,1024\"},{\"key\":\"vis\",\"value\":\"1\"},{\"key\":\"wgl\",\"value\":\"true\"},{\"key\":\"ca_type\",\"value\":\"image\"}]}},\"fetchLiveState\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 19 Apr 2022 06:16:42 GMT\r\netag: W/\"1d853b509719387\"\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5Va9ixZrHFfDD86QeVuAaeHjxSxVAicsLHVQt4N3kiquUcYtEir42mP8W1pGiug4pXrSnDGEj0871%2Bccp8IZ0%2B9q6sJTaxhTCM1oPeMWvIHMCRiqJDPRP2c3qr7PnQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92c7cec5385656ae-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1043\u0026min_rtt=465\u0026rtt_var=398\u0026sent=21\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=7253\u0026recv_bytes=2022\u0026delivery_rate=6745341\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=7621b5d054c3678b\u0026ts=466\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86663,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058), with CRLF line terminators","md5":"473957cfb255a781b42cb2af51d54a3b","sha1":"67bdacbd077ee59f411109fd119ee9f58db15a5f","sha256":"75b707d8761e2bfbd25fbd661f290a4f7fd11c48e1bf53a36dc6bd8a0034fa35","sha512":"20da3fe171c075635ef82f8de57644c7a50be45eb1207d96a51b5eadeaac17ee830b5058d87e88501e20ec41ef897f65cec26a0380eaf49698c6eaa5981d8483","ssdeep":"1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQ+:Vxc2yji4j2uC/kcQDU8CuE","tlshash":"6183e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-04-04T06:00:37.633639Z","times_seen":2804,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/bootstrap/js/popper.js","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /Assets/Global/login/vendor/bootstrap/js/popper.js HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 19 Apr 2022 06:16:42 GMT\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1d853b509718996\"\r\ncontent-encoding: br\r\ncf-ray: 92c7cec5385b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84118,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (337), with CRLF line terminators","md5":"b8b6d02211dd94c8838114f07ab48846","sha1":"d3932015eb3481209f00b5bb1e5f478c1cde698a","sha256":"cacc6d8f6d9f964cd1ee2b53b14898d38fedd0d3f925a1d0f547ea5cf5e3c061","sha512":"7a15a10765e3a123b738c4076994662775aa02e26e21e7cb913698e4aff7d5e233b2e87aad2e7fa93544f783e25e99605638da77fbd48f4e72c1d1c862569e55","ssdeep":"1536:pP/woCJh5YPeMmiZBXJpJeTch4YLqb9mGiXjFc1Kws:BwoCJh5lMmivkTch4YLqb9bd1i","tlshash":"6083b79a3589b2e209b7936b875ea10df33641761317b05078ecd2a83f70e7451abcf9","first_seen":"2023-03-07T12:27:38Z","last_seen":"2026-04-03T04:50:18.727744Z","times_seen":79,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/LoginPMS?returnUrl=/favicon.ico","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /LoginPMS?returnUrl=/favicon.ico HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krgpmis.com/LoginPMS\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i0x%2BjkqrhTse9t1x6rqPHTmxW9baAZvrHsGx2ZSV0YztqnzQhWBKSN5EUMq6EEmILHBauLvrUjYotDkjORa0uy8cBWa6a70SfzbDh57v0WOCSa%2FtH8nebbPa%2B6b5PQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: no-cache,no-store\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: Identity.External=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; samesite=lax; httponly\n.AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; samesite=lax; httponly\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 92c7cec76c901c0e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=11240\u0026min_rtt=641\u0026rtt_var=7349\u0026sent=129\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=10112\u0026recv_bytes=12168\u0026delivery_rate=1923\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2aad8370411725e9\u0026ts=694\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12343,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3767), with CRLF line terminators","md5":"f801c349f633e9b107b9d20e2a4dbf35","sha1":"949c5d9a869e7106fd7bf70c8d2998b72703c1ad","sha256":"ac018f3fbcc92d7addc3a232bfeadbe831c59df020e5224a1ee7b5bdc4ff4c9f","sha512":"264bacaa21157140452722b9542335377878f69533d63f55de3b13c4950b97e661888a98095e477d39323f01122be83196acb4bc9e11e9505d04dbb656bb7504","ssdeep":"192:ycCJ5XXbue9SXr84XVYfDYGd9VVwJW8/9:ycCXPiEcj9","tlshash":"7a42a83744adb9da3235034094a6cb2cee878343a110cc257efe07be1fa6d925d97b56","first_seen":"2025-04-07T07:28:48.172102Z","last_seen":"2025-04-07T07:28:48.172102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/css/login.css?v=hB3E0Y5OVDN6KKfV3ZfF55mnAcO9luyBiV7WFR-FwuA","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /Assets/Global/login/css/login.css?v=hB3E0Y5OVDN6KKfV3ZfF55mnAcO9luyBiV7WFR-FwuA HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Apr 2022 06:16:42 GMT\r\netag: W/\"1d853b509717dc8\"\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xukAbvyw1QJQpJg5Ls%2BjQha6Fr6EbgWPL2wWJV9QF%2Bo3nS3NBzmrgO4h%2BTSJsXLS0EHXT2u6gIyr%2BhA6YohIWUzGdOYK2Pc5jUYqIM%2FaeLdxzYQB2uP8hRGpCb25Dw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92c7cec5384f56ae-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=823\u0026min_rtt=418\u0026rtt_var=158\u0026sent=131\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=147800\u0026recv_bytes=2022\u0026delivery_rate=27320754\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=7621b5d054c3678b\u0026ts=507\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113864,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a8007d3b7c267319eda7e3a484d4afae","sha1":"e2ec10050349186f5a759835a0b4ed9493318a2c","sha256":"c048e78ca42fdf34bcca62cb50455409d530f42acf21a1a789cf3ed24f03e963","sha512":"34be47737bd705f18345285a6adc99f271dc68381bf5ac871036384fb45e5bc15bcb1b0ba22bb8ad2d810e0bc47cdb8aa2ed0f6c1e66fea1bd2f9f7e0bc56522","ssdeep":"1536:K3yqQWsCyL6+eQIewvNLEx3iFeschimQ0BtXlV:KiqDXyL6+eQIewvNLEViFescsmQ0BtX/","tlshash":"5bb3df459e13300a937b4fb797f6a961fa802c63499551f2bdc0289dcff9eb88192d0d","first_seen":"2025-04-07T07:28:48.172955Z","last_seen":"2025-04-07T07:28:48.172955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/bootstrap/js/bootstrap.js","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /Assets/Global/login/vendor/bootstrap/js/bootstrap.js HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Apr 2022 06:16:42 GMT\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1d853b509710314\"\r\ncontent-encoding: br\r\ncf-ray: 92c7cec5485e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115220,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564), with CRLF line terminators","md5":"d3f9315fddb9e83d61cb2e4a794ec794","sha1":"b963185cb80f6b14113ea0bf574945178edd3281","sha256":"ccb88f08e16ddbba976fa41e6d026059fbcec80931ff32dd5b925d4cc186c2ce","sha512":"157d28096c40bfa5e104d1138fd8780285a723d7c9cd70e3004be70e3dc75334834ba64371e6601b6dc477bfdccca76004e2389f1e3c681a45a6a8268bcd76dd","ssdeep":"768:NV891XL4e+77wlV06Kq4oXlbs2wPnvLon/KiVfcyP1y3vVTCM5zoSV62Bzn6PpD4:NVG077wEq4oVh0V3vffV7EDBLwX","tlshash":"5fb3124a3e9a2492487bf33acf6b410dfb3515ab460592447caca9d82fb0524539dffc","first_seen":"2023-07-10T20:27:06Z","last_seen":"2026-01-23T04:22:28.150819Z","times_seen":14,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/images/krg-logo.png","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /Assets/Global/images/krg-logo.png HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 188648\r\nlast-modified: Tue, 19 Apr 2022 06:16:40 GMT\r\netag: \"1d853b5083d74e8\"\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b%2Fo0Q6Y1%2Bt4IY%2Bs3kYUwwf%2F70GofvykpVweGBSHSzdN9Xm1uGL8Bw2ARTZDzx9jkQlVbxjV0HWO4b7zhZaVkOOzpn105DSBcBUnJYjrw%2Bk1%2Bh3Z6QusLipzFekykoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92c7cec5385456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1615\u0026min_rtt=437\u0026rtt_var=1798\u0026sent=47\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=37002\u0026recv_bytes=2022\u0026delivery_rate=19495716\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=7621b5d054c3678b\u0026ts=495\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":188648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 515 x 499, 8-bit/color RGBA, non-interlaced","md5":"2b23e12da6834e1bbb7ddf9cd1148e99","sha1":"7e221987dd365391237741668dc7831ee4e3f7fc","sha256":"a7339e56e83cbeb14aee13dbff41362520bf9ed7a510a462fed226e2e05e8b46","sha512":"7f94ed1c7c7db4594f946b9115c551f7dab02cdda941123b62f000ab45eab39a5661f441d3d6c82fd806a5971f3c1fff01fa2a6afc55f7b3271119190606e979","ssdeep":"3072:W37KJGMe9usDf3Bki78Idqbxlws82iYFipQrTDbJVF5lvulqACo9ZTAKHCbVQGkN:WLKMp9usDJWIdOD9iYFGWLJXTultCAT5","tlshash":"9704130d0802b347c334973a93df74647f633aab8094a563bfd50615ab6ac2ddda02e2","first_seen":"2025-04-07T07:28:48.175017Z","last_seen":"2025-04-07T07:28:48.175017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/Assets/Global/login/vendor/bootstrap/css/bootstrap.css","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /Assets/Global/login/vendor/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Apr 2022 06:16:42 GMT\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1d853b5097245cc\"\r\ncontent-encoding: br\r\ncf-ray: 92c7cec5385056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":165068,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"13eb49e07ecdb81385715104aca8ad8a","sha1":"542d8f6a9e53ee4c9af2e9fdee18ac6a634181cd","sha256":"ead2da1375b6f1916a26263cba18a6dabdeaa31f30615f1f345f737a14d612b9","sha512":"f78abe9cf7c3e06b6d2f4dc4ebfda53f170a2c99d0b6e4e23efd0d7de53aa0d123109d1e20ac2ee18844925af1e93376b29aa007c15c59b97e6f22041728569b","ssdeep":"1536:Nx8ptf3e10RZRjERO95R5tKT+IC+8JK8KGtJKMzNdSelgGYlHGWgUdpiF/gi8/9U:Ny/f/jAM3D0SUY0xYm0n","tlshash":"f6f375a9f981100b11738b7c93d367baff790067c60217ba7dea72549b986d18d22dcc","first_seen":"2023-12-07T03:32:26Z","last_seen":"2026-01-23T04:22:28.156001Z","times_seen":10,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krgpmis.com/favicon.ico","fqdn":"krgpmis.com","domain":"krgpmis.com","tld":"com"},"ip":{"addr":"172.67.165.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krgpmis.com/LoginPMS","date":"2025-04-07T07:28:21.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krgpmis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Mar 2025 00:07:13 GMT","end":"Thu, 19 Jun 2025 01:05:43 GMT"},"fingerprint":{"sha1":"31:64:26:02:A3:36:94:39:5E:EF:6C:FA:51:24:D7:10:3E:4D:AA:BD","sha256":"0B:71:6F:39:74:45:08:E2:8D:0B:72:E9:00:00:A4:26:3B:29:1D:43:20:2D:C9:84:79:F6:A8:F7:87:6B:31:A5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krgpmis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krgpmis.com/LoginPMS\r\nCookie: .AspNetCore.Antiforgery.k2mmBe4OU3k=CfDJ8LsF01xRVnJMrdwYVEeXcgYficBTUBypXxR06wq3SLMX7jvEXWHED4kNJFUtQa0DWpbLsSpBpaOIJak5gA2VsKQ4JxQKF4ljUA3AzCgDjCkrJPrW01BCOLMGOZlrdRBIvVkFchnBj6kYb6fJd_j7izI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":523,"data":"{\"messages\":[{\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"platform\":\"viewer\",\"msid\":\"21f31a60-5484-44a5-b96c-c9b953cc241e\",\"sessionId\":\"979c276f-f649-47d2-8d12-82e57a466c51\",\"sessionTime\":231,\"logLevel\":\"INFO\",\"message\":\"PANORAMA_COMPONENT_LOAD START\",\"transactionName\":\"PANORAMA_COMPONENT_LOAD\",\"transactionAction\":\"START\",\"isSsr\":false,\"dataCenter\":\"84\",\"isCached\":false,\"isRollout\":true,\"isHeadless\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isCompanyNetwork\":false}]}"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 07 Apr 2025 07:28:21 GMT\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h7EQDiTOCAJXV%2FuLteDgZOA1eJ4OYqOOKPTDuBD6XEiYmM4mUjvjVWXwnExab3FXRQVBhZTqX19GYIOftJ4cV2BKDkduYfCS21a6L7Rh18dkOdidk70QiOw%2F%2BgAfpQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: /LoginPMS?returnUrl=/favicon.ico\r\nx-powered-by: ASP.NET\r\ncf-cache-status: BYPASS\r\ncf-ray: 92c7cec6dc8f1c0e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=11240\u0026min_rtt=641\u0026rtt_var=7349\u0026sent=129\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=10112\u0026recv_bytes=12168\u0026delivery_rate=1923\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2aad8370411725e9\u0026ts=619\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":12343,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}