{"report_id":"4255d6e5-b525-4d32-b733-e3d024bd129f","version":6,"status":"done","tags":[],"date":"2025-11-27T13:48:40Z","url":{"schema":"http","addr":"kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"title":"kkkeuwwwzycbtrt.com","dom":{"size":15306,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"58617578b6521b7613d8f6cc4b4c2a8b","sha1":"b7aa32abe005c71be8a05fdb153697f47d1d46bc","sha256":"2b05d3931e53ed462e02c4a6f91ae331f4ff858bebd1a7e151c93789f9766362","sha512":"6c70dfe4caf19df7e18f675c3f299c616a1ae2d03b9c7a0a3cabbb0fcf36a2a100af83003f04e3c89859fdba1c0b44ee53fb95e3dafba60a9d36822a80453ec6","ssdeep":"96:n1Sis7t+lvvfcnKvlAX+jKwPolz3xoW4BmsDlZH7cdOJT8sm3dekNXIRGlYR4O1E:ci9kUnjKwPoloCd4TKderReYR42GT7nr","tlshash":"9d62a82158f5263301c391e5baa05b1baee5ea0bca6b560571fc4bc91fe3c83cd8365d","dom_hash":"domhash6d8d664fe7c00fa8be78f04c0b5a870f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-01T13:48:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-23T22:13:43.05661Z","alert_count":0,"request_count":1,"received_data":12155,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kkkeuwwwzycbtrt.com","ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-29","domain_rank":0,"first_seen":"2025-11-27T13:48:40.656912Z","last_seen":"2025-11-27T13:48:40.656912Z","alert_count":0,"request_count":20,"received_data":1023243,"sent_data":24668,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-23T22:13:29.69009Z","alert_count":0,"request_count":3,"received_data":53414,"sent_data":1628,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/app.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcab49fe02eea1a7cd53d263a6cdca10","sha1":"097d10977fd6e4954602ea7baa9111e076dfff54","sha256":"85ba643bb29e7aece2fcf007a845056548209a5ad8d0e968413779f3e2eba198","sha512":"cf39ebddb9bab9baedd67677e93c0126046fe37383cbaa48c79b3b53af05200bbb384c80d32dc2f7306f540db6cc7735cd39a7e916c24599fc9a90dcab43951a","ssdeep":"","tlshash":"4b11d06322b120b104ebb19e869fa7c53a504043620e8527f8be9bdc0f5597a45bbad7","size":939,"data":"","first_seen":"2023-03-09T21:48:44Z","last_seen":"2026-03-20T07:57:35.881565Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/smooth-scroll.polyfills.min.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1c82313d5445de0727e3d2f2acd848f","sha1":"d29f059c549aa47680f7e97dde53eb0a03d1fa72","sha256":"16dbfcd5b60cb93e1c5b4356be1477e727a44a3c0044ec178c6b14375f30fe41","sha512":"2fede575a20f3fd43681a42fa00141606c6fb56f8df518673998ed1a3001b22aa9a3633f85b948d13b14a627df7ede8f44478a541462fe0823327b8245cecfd4","ssdeep":"96:Jhl9Bh7FZY7QaVeWV5Ffq7feTg74tqjpAok+LrrLPBn:J/dY5AsFgeq48jpAULrrLPBn","tlshash":"f7e1b6da641036b28eef5275921f6b177a354032784f2418a16cbcd83675a97c30ffa8","size":6977,"data":"","first_seen":"2023-03-07T14:36:53Z","last_seen":"2026-03-29T07:44:13.25103Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/bootstrap.bundle.min.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10b0454673f11c2258551d73de96e60d","sha1":"878911064e938f9b76b11b4f93b7bae159169b91","sha256":"50efbf3d15899027b0e590bcb99484d94283b571f5682181b134e4507043b05b","sha512":"fa0e7e151d538fa58964456d7f23424178ce93196f768a97bed4a356026934f7180678ec6bf90e6e3bca5b8a0b3bf3221f0e49c5f099b935de5d73462c6e6852","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZr:T36WJr9ixV","tlshash":"5973c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78081,"data":"","first_seen":"2023-03-07T14:16:09Z","last_seen":"2026-04-02T09:16:38.36224Z","times_seen":722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/gumshoe.polyfills.min.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08067166ca4bf4f42c3c535583687d2a","sha1":"b1f89c0e2d9f2b6af9fe35123cdc66a90d0c36b6","sha256":"64cb15ecfaef108f29803451607349cb0e7b2a0015913628e4f258271cbb12bc","sha512":"7abaad0a37bd83ca63e4b331855a0298b7fe5ba601e7e2750e1875445aacb1d78cc9a25c6956e1ff0fdea6c4e4029d3e83793f59f817a2b108c7683c8ee4fdd5","ssdeep":"","tlshash":"9f61559cf95534b607e7e1b8621f124b7237a4b5f44d00e091a2cc982df854a55e3fed","size":3256,"data":"","first_seen":"2023-03-09T21:48:44Z","last_seen":"2026-03-20T07:57:35.880921Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/css/bootstrap.min.css","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Sep 2022 23:52:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wvZu0AfN27Ikn3Wh5wLaLBPr2kwWP0MVdO7QpGLh2%2BPJ1NWQpITaCqi9I7B16r4pWuwKlRgaB0V2ks2aq7UHfyXIH76b0XsS5GrwmZtwkQuxDU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"27ff4-5e88395d9ec00\"\r\ncf-ray: 9a52150a7d2e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163828,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"2477c3d3cb505160881c81efe9ee6018","sha1":"1a43d443b93b52ff29a8fed68d8e4c1c45718ef7","sha256":"3f1c72e824c95f57cb3d13ad549f18e66485221a175a33877f346051a4d302c2","sha512":"164171308bf18c9412ec4a59d170d64669874513df8c95b32d89241c49ad97d0f4047698ffa9457235e1dd81f24c7cc9ecfba3a3d110203e929d7eae62f01400","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fj:4t04/0VUpz600I4fj","tlshash":"73f3b4d7f581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-14T11:01:09Z","last_seen":"2026-04-03T14:40:32.747403Z","times_seen":760,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":537,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/css/pe-icon-7-stroke.css","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /css/pe-icon-7-stroke.css HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 13 Sep 2022 00:02:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BaUmYltGTvD%2FtBvbsno%2BN5fV7XbYFPZHjeQHGpemKxlPdm4TMD94zMLzGtbZ9fYG%2BWSNwzkkn0Q9SPiJMO2KsMJV0vNnByMJLauoWkalEIBwWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"25d4-5e883bace5f00\"\r\ncf-ray: 9a52150a7d30120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9684,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ed466b5afe78306fdf6bf0c9cd069ccd","sha1":"dd1d3b603ad004a988c1cdc5674e5c511319cbc0","sha256":"e3432e8144c51caa4ec4b9ee343ac5d96e747cee95dd548c4cb964f2f18a8984","sha512":"24d5e2297c8562c5051be1b3b9f41d7bee22debe674cce31dfd535ed179f44dc22055314c8b0fc3d8a80c20d627af47f1f1dcc9e645f0c514a791d219d37c652","ssdeep":"96:wjrnzuudOeo9qjwYKoZc3AHdOJz5BJOSTrbI2RLcwR/UGkqmMMO0s+9o/4DmXVVp:aLzCTq18t05xpoCr6vHZ","tlshash":"4712c9a4fd6f38a21791e0d16ac82f552f1de26d9f012c79c81a7e7cb3d321ca5806d8","first_seen":"2023-04-14T11:01:09Z","last_seen":"2026-03-20T07:57:35.909611Z","times_seen":380,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/app.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 13 Sep 2022 00:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pNc9rD1BSmceYfJdd5Xl8GHTIsAUPpbARDO2zK%2Bxnve8w8ys83817dLooAEE88NKIxd9871CgrZMExjtGCDe1UtDhu2m%2FsqynuiKfKczhlWoLI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"3ab-5e8847783b280\"\r\ncf-ray: 9a52150a8d3a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":939,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"dcab49fe02eea1a7cd53d263a6cdca10","sha1":"097d10977fd6e4954602ea7baa9111e076dfff54","sha256":"85ba643bb29e7aece2fcf007a845056548209a5ad8d0e968413779f3e2eba198","sha512":"cf39ebddb9bab9baedd67677e93c0126046fe37383cbaa48c79b3b53af05200bbb384c80d32dc2f7306f540db6cc7735cd39a7e916c24599fc9a90dcab43951a","ssdeep":"","tlshash":"4b11d06322b120b104ebb19e869fa7c53a504043620e8527f8be9bdc0f5597a45bbad7","first_seen":"2023-03-09T21:48:44Z","last_seen":"2026-03-20T07:57:35.881565Z","times_seen":376,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/gumshoe.polyfills.min.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /js/gumshoe.polyfills.min.js HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0bsFn5YA%2BLD%2BE6SBcZ0zUZVVOdo5k6%2FHiSPzB3hZPA8nPS9t0b5TFEv%2FK%2BVRqqchBaaocy0RQMPbGlksTFb%2FTUHtKD2wX4FZcjdx0MN3ga%2FIY8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"cb8-5c292b26c2980\"\r\ncf-ray: 9a52150a8d39120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3152)","md5":"08067166ca4bf4f42c3c535583687d2a","sha1":"b1f89c0e2d9f2b6af9fe35123cdc66a90d0c36b6","sha256":"64cb15ecfaef108f29803451607349cb0e7b2a0015913628e4f258271cbb12bc","sha512":"7abaad0a37bd83ca63e4b331855a0298b7fe5ba601e7e2750e1875445aacb1d78cc9a25c6956e1ff0fdea6c4e4029d3e83793f59f817a2b108c7683c8ee4fdd5","ssdeep":"","tlshash":"9f61559cf95534b607e7e1b8621f124b7237a4b5f44d00e091a2cc982df854a55e3fed","first_seen":"2023-03-09T21:48:44Z","last_seen":"2026-03-20T07:57:35.880921Z","times_seen":384,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/fonts/Pe-icon-7-stroke.woff","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /fonts/Pe-icon-7-stroke.woff HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/css/pe-icon-7-stroke.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:17 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\netag: \"e4bc-5c292b26c2980\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 58556\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tk8sdOSd%2BKO4NIUyxiowSI3g9syFysmPs3ZXeqrccE9SyovHg%2FiaMQgOZT5x9j7GUma%2BxbwSpDoOT%2FKDjxChp0R1xrPTmpap28Q1sxd0vim1c38%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a5215117e0e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58556,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 58556, version 1.0","md5":"b38ef310874bdd008ac14ef3db939032","sha1":"7e544bb11b7655998db6f324c612f7ffbf0ab66e","sha256":"6fb4217048f333e23e0fd0ba2ab05e05fd7500f86a5a80a7cf04a2f94b257bec","sha512":"2cc9509bdfd9043009ed626a7d0c0d7f0ed1486690b02a482cbe859a0d851ba89843933da62e79eb5c472c55b9f33f2535909d795341e3c9d2b1277bdbc0bc50","ssdeep":"768:DOdt4kAa4qfoTLYTziyxHOtDN3gaP2iol8fpMzFt/L4gv1rn+ZapZzfJLY0uYQ:DO0LYfiV3mflGpMP3oMptJLY0u","tlshash":"36430903270bef0bd013b9f7994461738e93e1116b3396972c8a5d184b196b58e2cbbf","first_seen":"2023-04-07T03:24:12Z","last_seen":"2026-04-04T12:46:31.90446Z","times_seen":6063,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kkkeuwwwzycbtrt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 22 Nov 2025 07:02:38 GMT\r\nexpires: Sun, 22 Nov 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 456339\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-04T14:47:18.953161Z","times_seen":203787,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":60,"dns":25,"connect":8,"send":0,"wait":8,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/favicons/favicon-16x16.png","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:18.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /favicons/favicon-16x16.png HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI2TGhnMTBvd2JZendvVnlnTmpoeHc9PSIsInZhbHVlIjoiM3RCVDVBTmd3TWRlK29JVkJyR250OEVMQ2t1a0llR3FyRTUrU3RXUUlZcW1pUG1Fc0xzL2toOXFqRm1IRXdEb2xMa2s0N1FOVEM4L2drVDBzYkZMYkoya2s2eG1NZUZRU25JaTlEOGRjYkovajJXUUJIeVZDRXdDUnR3RmJUcDgiLCJtYWMiOiJiYjQzM2I4OTA3NjYwNzg2OTI1NDQ3OGVjNmE5YWYxMzE2Y2Q3MzRjMTM4NzkwMDM4OThkNjlmM2YzZDIzMTk0IiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6ImZNa2ZYdUQ3QVpwMWxWcWlwbDNmSUE9PSIsInZhbHVlIjoiT2lSSjY4TXlOYkNTVjE3L3hwMEEzVDdQME9WM3d0aUhLZXZZd0ptSG5BMm1scWQvR0FSb1hsOGxEdVFQN2pzaHVLTE9Jd2lZQ29FQWpyQmFQSmwrRW9rRzE0MVNvZ1JvNVB0N3J1eDB6eWxhRGNNQ1RGL2w4cXVsSENMTDBZODQiLCJtYWMiOiJmMDE0N2ViYmM1OTI5MGQzYWE1YmI5ZmIxNDNiMTU2MjVjMzg0YzMwM2JlM2IzMGZiMzc1NGU0YmIzZmZiM2JlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:18 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 10 Sep 2022 01:20:50 GMT\r\netag: \"196-5e84879110080\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 406\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWVPd%2F2P07IA6ms5v9r0j8rglGt4dRPZVIaYJQI57CD72iSBrsY6U%2BU7UkMBxeGUrMMschE97p3xU7UBc%2Ff83B94W%2BAslN19IJw7mrbFKJ6GV2M%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a5215159e6a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"ec7e9a74411499908fd3f5d86e13a822","sha1":"6817e9fa008288c4b3f396dbceeff53fd2162cdc","sha256":"4c7ab2a69252a1cd2194bb3be69309345782eaa7e4fa6e5a239618f7a9d99102","sha512":"1d55e99fe8f914d5f563fbd61629ae6caa65d09322102802b887a8bd1d652f93739eedd79a9380a1f24008ff7784b0e85c2fee6d07c41f22cdbd366f30423e84","ssdeep":"","tlshash":"52e0f1a5b73bda90c48bc03fa597e080c7e52e4c93460c9d2603b39ab6634b200d3f17","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.88857Z","times_seen":391,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/css/materialdesignicons.min.css","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /css/materialdesignicons.min.css HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 13 Sep 2022 00:04:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcSlAxxd9J%2Bnl3gPxRGX3pBMGVCwuR8g1YFs2%2FXwS7QR5BvDp9gWlNeVyzeSaoqIHk%2FJaLagKFCveCooUCKojrde8rEDcaFf0aFWMymNjsKaPO0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"42e7a-5e883c213f180\"\r\ncf-ray: 9a52150a7d2f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"079d1037b597a8f14a3d2cd146eee3a1","sha1":"8b8691ea393ec7c7f6d3666177f0556848e526f7","sha256":"12c6b5f006f7aeb58748af41ed46a20fcc308163ba6b8625cb4d7b500fe8ed0b","sha512":"708b7d7d0638bd44ac12bd4261ed6c357cb913fbf2c7fd7c37c87c051edd9b351dd49c91f709dad3b767be2aa49fc5391d7b2e03c72405dd65d207f7e97c2ddf","ssdeep":"3072:RuQjqG8E8r4wecEPZ9MMy0NQ3ZRY52m+42+E0iJZEUZ:RuQW1Swanu3Y5jd2+xw","tlshash":"61442ce5e04d28e3f733c44fd740b798458bf1b2c6690d15f68b660e09cba222597f6a","first_seen":"2023-04-14T11:01:09Z","last_seen":"2026-03-20T07:57:35.884105Z","times_seen":377,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":694,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/css/style.css","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Sep 2022 23:52:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NxW28fny4hhqVJA5g5EcSi%2FJmG%2FsgcVFOkoUlV6S8PaBoCLvL7eZ2BRndcu9FoasHGOruN8XEuFHk5pvggMwLLfRiHncrpHwTGlXEXruQG6EKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"9b50-5e8839766a680\"\r\ncf-ray: 9a52150a7d31120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39760,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"38b346f97575b88d15f1b527be83df10","sha1":"5c67480f7674a73ed4ccc5cf604692cdc7da40fe","sha256":"e336df1066a2663728565636c1519236a0a950d883edc854e582e70fe3779963","sha512":"27e3d9bdbe52eceb0c808cb635cdacdd4d6f524f6a0d53c725c96c94329b204aa5dfe64cbfb4642da5dcb9312a2e393923bcc7685aaaf3b0bb5fbcbe13814f13","ssdeep":"768:wPghvOyqhMYUErfF3FaQd8j3L5h648I+H2zTFRps:wPghNkBaj3LUI+sTTa","tlshash":"62032185b6f17805602bc954a482efd3fbaf21c3641e8ebf77a422f827482dd1631d59","first_seen":"2023-04-14T11:01:09Z","last_seen":"2026-03-20T07:57:35.892677Z","times_seen":377,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/css/blue.css","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /css/blue.css HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Sep 2022 23:59:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZhhM29ZvMtQ11cJGmKETZEmPLU9DAE%2B464nCvWk7urNrqYf76oHdfp1zZNV5rE42l%2FRR2mkGl2dS1aj1ULCV3zfZiP68Yunr3g2OxL2b3gILFk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"51c-5e883afb83c80\"\r\ncf-ray: 9a52150a7d32120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"70acd6542ce3fafba81cad3df89869f5","sha1":"a892a31326ee70ed6f92eae6555cc142d123edcc","sha256":"5342ae015efe92e25847f2d5387a3324e832a9c1abdbb2ff23ba0c11f0dbb3bc","sha512":"bf27d8a2d9d65b3b37d55dfae9658259de5ec6a06438478b9f793cff4a2bd5192ffce19dbc51bcad6923d070b88ba2e5ddd191fd6710203a403da9963fc891df","ssdeep":"","tlshash":"41219eecf175b33101510464e4dc2ae20a9a0fcbc7b86e97f92e42c20bc439a237299d","first_seen":"2023-04-14T11:01:09Z","last_seen":"2026-03-20T07:57:35.908969Z","times_seen":374,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/smooth-scroll.polyfills.min.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /js/smooth-scroll.polyfills.min.js HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRxrbpDhCxLv%2BiEcGuiKm2MAy7JdWdrV18DtG%2FTh0y3NELJSuwPa2YV%2BUGDsBXOVwIkdpLJXCd5WuIRvryvgRCGaQ5KlU2mj%2BOVzffM4JhgSBE4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1b41-5c292b26c2980\"\r\ncf-ray: 9a52150a8d38120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6977,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5837)","md5":"e1c82313d5445de0727e3d2f2acd848f","sha1":"d29f059c549aa47680f7e97dde53eb0a03d1fa72","sha256":"16dbfcd5b60cb93e1c5b4356be1477e727a44a3c0044ec178c6b14375f30fe41","sha512":"2fede575a20f3fd43681a42fa00141606c6fb56f8df518673998ed1a3001b22aa9a3633f85b948d13b14a627df7ede8f44478a541462fe0823327b8245cecfd4","ssdeep":"96:Jhl9Bh7FZY7QaVeWV5Ffq7feTg74tqjpAok+LrrLPBn:J/dY5AsFgeq48jpAULrrLPBn","tlshash":"f7e1b6da641036b28eef5275921f6b177a354032784f2418a16cbcd83675a97c30ffa8","first_seen":"2023-03-07T14:36:53Z","last_seen":"2026-03-29T07:44:13.25103Z","times_seen":426,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kkkeuwwwzycbtrt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Nov 2025 20:59:16 GMT\r\nexpires: Thu, 26 Nov 2026 20:59:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60541\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-04T14:47:18.957166Z","times_seen":192722,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":105,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T13:48:15.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1 HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fMsZ7tlmlh8ld3pszc8FAsX0bj1SYJrTIz%2Bi8WamoveEcNDhBGh8enqMyy79ZD3HTmYGi61usfFEUmX0gxp5xy%2BXA5gMKumq%2F9rF%2FvfEwUx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=7200; Expires=Thu, 27 Nov 2025 15:48:16 GMT\napp_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Thu, 27 Nov 2025 15:48:16 GMT\r\ncf-ray: 9a5215079dc5b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":15539,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"40d0aa8b503e1e266a4e90be31d2945a","sha1":"805895b0a568d768adc5e32e3e586da69931b904","sha256":"44fefe8682e70c0a17c0c5963958e9bcb1272070830389b9a054f4324c7847b7","sha512":"4b91cb925df6e157ad1ad8c674d9c162133f6df65fd75e2397059ce06d58f5f7f3890f6e870895c02ead1281213834f01f63578b88b6f83784ff4a27115e21d9","ssdeep":"96:CShbpt+lvvZDnKvlAX+jKwPoiz3xoW4BmsDlZH7cdOJT8sm3dd0nXYRGlYR4O17d:Vh4lUnjKwPoioCd4TKddvReYR42GM7nv","tlshash":"3b62a72158f5263301c391e5baa05b1baee5ea0bca6b560571fc4bc91fe3c83cd8365d","first_seen":"2025-11-27T13:48:44.04633Z","last_seen":"2025-11-27T13:48:44.04633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":276,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/bg-pattern.png","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/bg-pattern.png HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\netag: \"1f64-5c292b26c2980\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 8036\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXmMMs%2BaKiuPd0PMddswa6seOWvKf472h3xX7%2BHHXB17iwdljF0PYP0bC80wJEWOrZxVBBil0q24STuidsiT9Mkc7EsvouzY%2F2hDN6By84wYdgc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a52150a7d34120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8036,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 40, 8-bit/color RGBA, non-interlaced","md5":"f0458cffc2dbd34c53e75b5737e4cb53","sha1":"68e7265c37e0dc9f90d823035f1a4b28c1b8ef25","sha256":"b16bdcee1f1fcb6cc3bec6ee8f41d993474e5084e0db5ddec0e27f16d3577c79","sha512":"5c50a9e06bdb2a2851413374b29d5edd1676eca44d63f28325bec429f13e5d0f0c0eb33ed5492ba0752bdc7894916afa20c1571d5af80fa7d64930d24a5b0bbc","ssdeep":"192:t3xp+9rUz1SwmE8ETNwqY045yhsh4/GpHu1NNcZm:t369rU1St7uN9dgKsCC4","tlshash":"91f18e94e6521c80e096aa789cb006353ba7b135efd19034506da2fdb9347d2bf4ccea","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.885297Z","times_seen":379,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/payment.png","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/payment.png HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\netag: \"58a9-5c292b26c2980\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 22697\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6j0a%2FMCOLRWQZR7yvK%2BjmCCxELwTFP6DX%2BCwpNWHPEc0ozx35zkYdoqPgP0QK%2FOe8LiEBFfrA64ByAtncd6NbhdQe9ABgk2Hw3ceuNgJ%2FCwDxzw%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a52150a7d36120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22697,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 128, 8-bit/color RGBA, non-interlaced","md5":"9051d86e0464be01ecc394729a3ec1ca","sha1":"8265242625c4a01dfe2106bb96e31eca68a9420c","sha256":"81a2646051e66aa79feaa274ddf8aa9235f599c41c08b31f3f1d827bd3b22bb4","sha512":"75dc9dbd55c0df6cd9cc6f224ccdadce91870cad718363554587ed1b7b4fc773211fd7716811aa9455124ec3bd87e8bc9278c49014d4517037f7714406d32dc6","ssdeep":"384:P/aO6DDE7u8RaTy2eug6ubh/zLT2++kPqtb8XMFlDR4hobErfbsp:naOxu8gTy56mLTp+kPqtb0eDRi4ErfbE","tlshash":"f1a2d17cb535d69c3fb56fcdbd047a8929b98351efbf210302c50010e91aa17ca7e659","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.8909Z","times_seen":378,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/js/bootstrap.bundle.min.js","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Sep 2022 23:42:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GffxZHdJvJZTPZBA3Wf6f741i0IUQ%2F5FYGsZ1XrKIURFH24lohqqhgYALINcDyNvz%2BiKoqXY0qFdvBNgQZB035Nkr%2BVG%2Bjqpss13uGki0AyJqRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"13101-5e8837347d300\"\r\ncf-ray: 9a52150a8d37120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78081,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"10b0454673f11c2258551d73de96e60d","sha1":"878911064e938f9b76b11b4f93b7bae159169b91","sha256":"50efbf3d15899027b0e590bcb99484d94283b571f5682181b134e4507043b05b","sha512":"fa0e7e151d538fa58964456d7f23424178ce93196f768a97bed4a356026934f7180678ec6bf90e6e3bca5b8a0b3bf3221f0e49c5f099b935de5d73462c6e6852","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZr:T36WJr9ixV","tlshash":"5973c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T14:16:09Z","last_seen":"2026-04-02T09:16:38.36224Z","times_seen":722,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/bg-home.jpg","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/bg-home.jpg HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:17 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\netag: \"423ed-5c292b26c2980\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 271341\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HzgpAGOLNJsj0tXgD%2F9ahz3J77hwAXU1v%2BT7%2FJs17T4xIlD3o2Ds2DKiVsIk9K%2BaMmF%2FRHNF43XmBfAp%2FiwvrE7uevnpy82qPrGJMIpGboSg2o%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a5215115e09120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1333, components 3","md5":"3248c723883e7ba8c9b4b6d983c4b50b","sha1":"b1dba0f853caa9758fe339d694077632200e03ad","sha256":"5fc07ea7f650e6fd56e9cf8027387484baba4ed86396623bc4ca34670cff45d7","sha512":"5a3ef3e7f4d8a1912500860580aeee23da21d44e283c772c99c663558a93d30c40f341f863b32df73ab0446257b7def7ca59a0e83dd6db439b49a1e115db6ef7","ssdeep":"6144:8X3oOX4YY2FcQH4MXMEyE2mvd4/Z/0lvnoUiGu3hgTw:8X3oo4YcQH4XlMd4/ZcOUiZ3n","tlshash":"b844236cee369d41d2c7673e70c4aee5a05c8cb49def2f8b701b6962303e471ab12419","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.905655Z","times_seen":375,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":759,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/img-1.jpg","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/img-1.jpg HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:17 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGs0YE7D4eaBPWbmTI3Ue6EKJPx7FupK%2FNHomfsFuT0hvHoQR8rEhlQI1o4hHMINbTVlMb7RT%2FW97Sd0NUxDz0cBxu8Hf3V8PwuipxrlNtw%2BDQs%3D\"}]}\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkI2TGhnMTBvd2JZendvVnlnTmpoeHc9PSIsInZhbHVlIjoiM3RCVDVBTmd3TWRlK29JVkJyR250OEVMQ2t1a0llR3FyRTUrU3RXUUlZcW1pUG1Fc0xzL2toOXFqRm1IRXdEb2xMa2s0N1FOVEM4L2drVDBzYkZMYkoya2s2eG1NZUZRU25JaTlEOGRjYkovajJXUUJIeVZDRXdDUnR3RmJUcDgiLCJtYWMiOiJiYjQzM2I4OTA3NjYwNzg2OTI1NDQ3OGVjNmE5YWYxMzE2Y2Q3MzRjMTM4NzkwMDM4OThkNjlmM2YzZDIzMTk0IiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=7200; Expires=Thu, 27 Nov 2025 15:48:17 GMT\napp_red_session=eyJpdiI6ImZNa2ZYdUQ3QVpwMWxWcWlwbDNmSUE9PSIsInZhbHVlIjoiT2lSSjY4TXlOYkNTVjE3L3hwMEEzVDdQME9WM3d0aUhLZXZZd0ptSG5BMm1scWQvR0FSb1hsOGxEdVFQN2pzaHVLTE9Jd2lZQ29FQWpyQmFQSmwrRW9rRzE0MVNvZ1JvNVB0N3J1eDB6eWxhRGNNQ1RGL2w4cXVsSENMTDBZODQiLCJtYWMiOiJmMDE0N2ViYmM1OTI5MGQzYWE1YmI5ZmIxNDNiMTU2MjVjMzg0YzMwM2JlM2IzMGZiMzc1NGU0YmIzZmZiM2JlIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Thu, 27 Nov 2025 15:48:17 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a5215115e0b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13327,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"50f3f45adcd26850ed15ebc9aa0edb0a","sha1":"4d8e2da0666195565fccb33e7421138cebcf306d","sha256":"7dbb8c80496f5ca8ff7897d09d94897e669b3e40be690d07235c9f56ec649d12","sha512":"195d81bc2a74d379a6fb8253329922a7d007f9b0937982ac545a29be29b7c8fb3e10a8385bf3de60cb6ccfa58ce32bcda628b71a62ebb59bb110051d39228c04","ssdeep":"96:CShbpt+lvvZDnKvlAX+jKwPoiz3xoW4BmsDlZH7cdOJT8sm3dd0nXn:Vh4lUnjKwPoioCd4TKdds","tlshash":"d052a92154f5663301c391e5baa01b1baee1ea0bca6f560575fc4bc91fe3c83ce83659","first_seen":"2025-11-27T13:48:44.04938Z","last_seen":"2025-11-27T13:48:44.04938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/img-2.jpg","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/img-2.jpg HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:17 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTknQ%2BvgAd3xrFwhReODEUMjN%2B5ZpsAfBSWaEzePNGTdqQlCC3u2bb3g1e9wMMFcOyOrT%2FCRR4u1jLVK8Epgp0N8Etpb47PjPQ93BrRDAemcOJ8%3D\"}]}\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkM3MGR5RFcwU1NGRGxwSFVBNlVtUHc9PSIsInZhbHVlIjoiQnRvcEFaeDdmM0lPdEVOZTVUaGFzVEVoclZJZG5hRlQ4V3N4dkVDeG5FRGVrUlZOZ2FML1M5bUErcFZTZitIMmQrd1hTVHRJSzl5OTdlNytQU2tXemRpS0JIQkkyeE5XUHBWTzFnM0orZVplNVMzdXcvVHFvWC9rLzRpc3liT2kiLCJtYWMiOiJmZmYxNzdjYzE4NjRmNzJiZTQ4YzVlOTZmMWFhMmQwNTI5YmY1NTMyZWY5NzViM2Q4ODRlY2QyOWE2OTlmNGYzIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=7200; Expires=Thu, 27 Nov 2025 15:48:17 GMT\napp_red_session=eyJpdiI6IjBKWkh6bmhnZ3RDTXQ1MVZRYjlxSVE9PSIsInZhbHVlIjoiUi9hZDYzWVV0WUN5L2YrNFhiNFhFZWphNk14VHNac0ExNWxvZ3VFVE1LREQvVlhVWWY1UkwxOTFjV08yS1d2N0VmUVlPNDROY3Y5UEtnQ08xY1Y3YXM5OWpFSEhlL1l4aVJ0MVJLaVF6NVBkc0dKUG5NQ1JRNVUwK2h2TVhBWGkiLCJtYWMiOiJhMGZiZDAzNWFjZGYyNjFhMTFlZTNmMDhlNWVlMjdiZGU0NzJiMGUyNGQ0MmRjMDQ4OTlmYjk1ODFmODk4MTcxIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Thu, 27 Nov 2025 15:48:17 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a5215115e0c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":13327,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"50f3f45adcd26850ed15ebc9aa0edb0a","sha1":"4d8e2da0666195565fccb33e7421138cebcf306d","sha256":"7dbb8c80496f5ca8ff7897d09d94897e669b3e40be690d07235c9f56ec649d12","sha512":"195d81bc2a74d379a6fb8253329922a7d007f9b0937982ac545a29be29b7c8fb3e10a8385bf3de60cb6ccfa58ce32bcda628b71a62ebb59bb110051d39228c04","ssdeep":"96:CShbpt+lvvZDnKvlAX+jKwPoiz3xoW4BmsDlZH7cdOJT8sm3dd0nXn:Vh4lUnjKwPoioCd4TKdds","tlshash":"d052a92154f5663301c391e5baa01b1baee1ea0bca6f560575fc4bc91fe3c83ce83659","first_seen":"2025-11-27T13:48:44.04938Z","last_seen":"2025-11-27T13:48:44.04938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/online-world.svg","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/online-world.svg HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64NRWntj14uI9YR%2BZEUfrYqxEBB3J5lfQMMJt9FykD%2BjYnifCQsU67FSsBuKw2Yk9a780pNKmRfWrJ4w4BmM%2BijIGPxk%2F145ogM6RgL2%2Brl4Xu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2d35-5c292b26c2980\"\r\ncf-ray: 9a52150a7d33120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba029cf8887f4299446296263ab79b61","sha1":"d14d77d0d4b9bdd2ba0a6aa03a27070cfa7e8fb5","sha256":"937578c3c88ea8239e3ec1b71f2a3eed0bff1e64987a3d9d67bceec692c97d66","sha512":"722667e563891f6638eada620c8884f35847f4e73031fa5400db8ed3fe0318e49baf44c734a7a9eac2c75ab55cc08c579c900072bcc3cbe2000763618b9b7507","ssdeep":"192:g4TRoSq+VVvGf9wdztqlx9wGKQ2n9ZuJeZQJfW7G:fVoSd/Gf9cz45wN9ZB6lW7G","tlshash":"ae32b6f2a714667ee5424b48c2d898a1306c958bb3b680dceb175783ed355fb00fce69","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.890346Z","times_seen":377,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/images/bg-pattern-light.png","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /images/bg-pattern-light.png HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxlakhkVjlmU3J2anA0RHFuVHZsNFE9PSIsInZhbHVlIjoiUHY2MW1hOEc4dlBUcmFIVldMdG5xOWs1Y3dlRFdKODZzbkJQOTRGWmFDbjRKYXpKRWFOMnpIZ3UyaDEwR2Z6R1JYdHRHcU9ZeDgwUWdhZzRIOVkzek1XOEkwdGRGcVlhdTU1aGV3RnBvZUNhZ0diai9yblZTZjRIZzkvMTM2NG4iLCJtYWMiOiJkZTFmYTkyNWY3NmQ0MDEzMDI2NTkwMTc4OTgyZTMzODkwNjdhZjVlNzUzMWU0NmEyZTM5NzRmYzc0MDE2MmYwIiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6IlJXVFRkYTd4VlI4SHhRUG9UeFA1ZFE9PSIsInZhbHVlIjoiU3BTU3Q1OHYzQWx3N1VjNVFIbnNUTjM2a0dUdWVqR0VHK3A1QlRWckNodXRmVURMTGdzeHU3b1FHOFNmY012Ym1sdEdYMmM0RTV3czM3ekpBMlZHTTBka1VXbjRxQzhlS245Kys3M1djcGlWbnFoZG95YmJhNzRReGcrQ1RPVkYiLCJtYWMiOiJmZWIxOTBkMzhkYTUwM2EzN2E3ZWJhYzI2OTUzYmY4YzYzMjhjYzE0OTU3NTk1MzE0NzgzZjE5NDRiODU5MTA4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:16 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 May 2021 03:56:38 GMT\r\netag: \"1bdf-5c292b26c2980\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 7135\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OroFoHpM9tiO4XxHRCa3L9B0k2dNhiqX2EzLsOOMqsvMH6C0chQHC8Dr8E8jiK6StVol53mpmelYe9FNNTfmGMQ9WU5zhld8npM%2FXl0CXT%2Baw6g%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a52150a7d35120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 40, 8-bit/color RGBA, non-interlaced","md5":"d04cd40f388eca1cfb95e609fad0a593","sha1":"e3544429af84b2734c154cea96007fbbfd9c4dfe","sha256":"a55813d75bf1141c41ca3a5d2e96abb728f9f18c3f5292c2f9390dba96bacf49","sha512":"9d793f30b8dd342f2c6315a75c5be9cd52018e8b476f940cacaac3b972a1edfe67f33218eb8388db5fc3cd3b1b65de245a4e294afa4cd08f48a181afe287a2cb","ssdeep":"192:rAnH6byDS9GFmMoK801fWeNK/3P39hWp5UZa:rAHPm0Fmw8019E/3P3bWpj","tlshash":"33e1af48bca35c83e585773089b1171e14d2a66325d2db1afabeb11d33fa5d4414f8c7","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.878827Z","times_seen":378,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;700\u0026family=Rubik:wght@300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:16.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;700\u0026family=Rubik:wght@300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 27 Nov 2025 13:48:17 GMT\r\ndate: Thu, 27 Nov 2025 13:48:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11469,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"71db79ed26b7acc18d970ce7d0838b1e","sha1":"97600de2348de92289115ec3f764ba63b4aafa06","sha256":"65ac7849ca5f6dc775ea1ba0468c56535771f811df5b0dd5f182f484cd317d71","sha512":"b732909aefc709c95510f33787b712c749ad9f08e8fb11b962f1c28f7e0b88031de79939b61f551ddd08e33a0008f994f4137b775c9174d88301a2611ffe4844","ssdeep":"192:lgKQcXr3GRzJihClRsprgAHThCl8s0KtAuMhClDsb5uAtp:AlSOlHRlg7","tlshash":"5c32dfe1482b9044bf472cc263ce6d37ee0e62553490d5799ffd0e99acabc21236179e","first_seen":"2025-09-19T21:50:41.422223Z","last_seen":"2026-03-20T07:57:35.882203Z","times_seen":315,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":226,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:17.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kkkeuwwwzycbtrt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Nov 2025 00:12:26 GMT\r\nexpires: Thu, 26 Nov 2026 00:12:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135351\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-04-04T14:56:09.834603Z","times_seen":22481,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":195,"dns":0,"connect":10,"send":0,"wait":11,"receive":5,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkkeuwwwzycbtrt.com/favicons/apple-touch-icon.png","fqdn":"kkkeuwwwzycbtrt.com","domain":"kkkeuwwwzycbtrt.com","tld":"com"},"ip":{"addr":"172.67.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1","date":"2025-11-27T13:48:18.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkeuwwwzycbtrt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 17:35:19 GMT","end":"Thu, 08 Jan 2026 18:33:01 GMT"},"fingerprint":{"sha1":"59:C6:E5:81:75:3A:31:94:E3:C8:00:A3:77:9B:C4:FD:20:FD:55:5C","sha256":"84:83:1E:F2:D0:06:8E:4B:8A:75:04:08:9E:FB:B6:FB:12:94:49:45:6F:6D:73:17:C3:3A:07:E8:AD:14:5E:1C"}}},"request":{"raw":"GET /favicons/apple-touch-icon.png HTTP/1.1\r\nHost: kkkeuwwwzycbtrt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkkeuwwwzycbtrt.com/bdgsue097kundu1ni05ndq2my0xntazmtq2os1klteymtmtnjqtms0xltetmc0wlteynju1lvbkqmzkuxvjal8wymy1mdjmni0yyje3mdqzyq?t=1\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI2TGhnMTBvd2JZendvVnlnTmpoeHc9PSIsInZhbHVlIjoiM3RCVDVBTmd3TWRlK29JVkJyR250OEVMQ2t1a0llR3FyRTUrU3RXUUlZcW1pUG1Fc0xzL2toOXFqRm1IRXdEb2xMa2s0N1FOVEM4L2drVDBzYkZMYkoya2s2eG1NZUZRU25JaTlEOGRjYkovajJXUUJIeVZDRXdDUnR3RmJUcDgiLCJtYWMiOiJiYjQzM2I4OTA3NjYwNzg2OTI1NDQ3OGVjNmE5YWYxMzE2Y2Q3MzRjMTM4NzkwMDM4OThkNjlmM2YzZDIzMTk0IiwidGFnIjoiIn0%3D; app_red_session=eyJpdiI6ImZNa2ZYdUQ3QVpwMWxWcWlwbDNmSUE9PSIsInZhbHVlIjoiT2lSSjY4TXlOYkNTVjE3L3hwMEEzVDdQME9WM3d0aUhLZXZZd0ptSG5BMm1scWQvR0FSb1hsOGxEdVFQN2pzaHVLTE9Jd2lZQ29FQWpyQmFQSmwrRW9rRzE0MVNvZ1JvNVB0N3J1eDB6eWxhRGNNQ1RGL2w4cXVsSENMTDBZODQiLCJtYWMiOiJmMDE0N2ViYmM1OTI5MGQzYWE1YmI5ZmIxNDNiMTU2MjVjMzg0YzMwM2JlM2IzMGZiMzc1NGU0YmIzZmZiM2JlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 13:48:18 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 10 Sep 2022 01:20:50 GMT\r\netag: \"1bea-5e84879110080\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 7146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7PKlu%2Bndzp2E73nMvgOsxBSl118L%2BXblwQDeYdRVhdYKqgzE%2F57pSUy%2FAZ3LwrYcVb0Epm7NBi7Ay4U6mo%2FQ%2FiOv1Im4gRVlJjp7TPiyAIlRtI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a5215159e69120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"8c2b901c810c641c2e5e8fc888e194e1","sha1":"ff852a51052964a645c8b4e538108b229fc0dfdc","sha256":"2b7a07bc977a856ab03eae29d4edf8a5de1b9c8d7849d319a0773f5bed4a0cfe","sha512":"c9c21a4ccda9bd9ded6049b93ba5c8b721394625f281bd8bbc7cf929f74e9ad59dfa33174b81978283ac06d2ca46333cfeb783dee17c3a53309013c2bf80a371","ssdeep":"192:6NECTSUFa8d0hKSxB0WfHBkfA0zrPXBFh+07uRZrxD5Ciyek7:1nUQZK2B0uBkJvxv+07unxDEiyr","tlshash":"84e18edb62bdaf6ff9941208d11c4e700cbd0f991b65eee00fa582752635288809e6d9","first_seen":"2023-06-02T01:27:24Z","last_seen":"2026-03-20T07:57:35.887694Z","times_seen":391,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}