{"report_id":"472c3d15-2206-4ec0-8b14-720e5e23b4b8","version":6,"status":"done","tags":[],"date":"2023-12-04T04:25:53Z","url":{"schema":"http","addr":"bonnettaking.com/atvfkv5y9t?key=c0a04045d457577795925eedc3a3f551","fqdn":"bonnettaking.com","domain":"bonnettaking.com","tld":"com"},"ip":{"addr":"173.233.139.164","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","fqdn":"3tght76h.com","domain":"3tght76h.com","tld":"com"},"title":"Captcha"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:15:42Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":4,"received_data":73173,"sent_data":2336,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.16.124.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":11693,"first_seen":"2016-01-08 00:26:01","last_seen":"2023-12-03 05:11:25","alert_count":0,"request_count":2,"received_data":48131,"sent_data":840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-12-03 06:51:04","alert_count":0,"request_count":1,"received_data":45898,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2016-07-26 11:37:06","last_seen":"2023-12-03 07:56:40","alert_count":0,"request_count":7,"received_data":819942,"sent_data":3410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-12-03 05:48:43","alert_count":0,"request_count":1,"received_data":16177,"sent_data":523,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bonnettaking.com","ip":{"addr":"173.233.139.164","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-11-03","domain_rank":0,"first_seen":"2022-11-03 02:48:20","last_seen":"2023-11-05 19:58:07","alert_count":2,"request_count":2,"received_data":4210,"sent_data":2362,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gl0a7loeki02do.com","ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-07-28","domain_rank":0,"first_seen":"2023-07-29 11:59:38","last_seen":"2023-12-03 05:48:14","alert_count":0,"request_count":1,"received_data":619,"sent_data":836,"comment":"","tags":null,"fingerprints":null},{"fqdn":"3tght76h.com","ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-15","domain_rank":0,"first_seen":"2023-11-15 14:22:31","last_seen":"2023-12-01 01:02:24","alert_count":0,"request_count":3,"received_data":63610,"sent_data":1691,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"bonnettaking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"bonnettaking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/axios/dist/axios.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.16.124.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a68c57e04fd79331988c16fc3585405d","sha1":"413c97b8c8ba0be18c36a65a5be940239c5956c2","sha256":"550f26d03776c62d33e90b8028c6b4e2e7d1301c6ff769cff94592a93df71c68","sha512":"6fde19eb8df52725d8d788925f0833799bab1c744d90bb7d77a6c01edec1653dfc7aa57e1b29e0222fed5727b88c128f610da505d46cd20970c387e6a6e2d1c0","ssdeep":"768:JCEC6jLwVKlrza6wPQuFM70pLWqlmhBD5xv:B3aDvM0Zhit","tlshash":"1ee2e7c9b7e1b06153a770b5407f250bf23aa926a44d84a0f120ece67cb850e9767f7d","size":33621,"data":"","first_seen":"2023-11-14T21:38:37Z","last_seen":"2026-05-03T15:56:21.971776Z","times_seen":6949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","fqdn":"3tght76h.com","domain":"3tght76h.com","tld":"com"},"ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"751a7bc12948919411322758ee1ca634","sha1":"ad5358fe7aa9204958b91b99abfea769bd6d5f7e","sha256":"c1458f1eaa4f29745983fc1b8a137e81e043762b3c750b8a7c1172a108f9276a","sha512":"458b2fc751a839b15fc9929aadba4a168c55cdb1ed3c49515b35426719ef6ae2a4b5fe4898af649225302fd926dc775fdd6bbaf834f402a345864fe27570b52c","ssdeep":"","tlshash":"bbe0c0d675653cb174dd44f533f2a12470532608b8091823defec914a46898748130dc","size":357,"data":"","first_seen":"2023-04-08T06:53:01Z","last_seen":"2024-08-21T05:31:25.397853Z","times_seen":1214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57e10dcd72dd2953878092014eae522b","sha1":"95ba7e48825c26c5d9395ef2edb73e790bce6fa7","sha256":"c7b54326365940d062bce26ed41579eebcb4946a86ba280790b603926692bd59","sha512":"054f0a47a302f56599d07f6de69ba23c8105e0a543925ec065e5266a25ad98cdd0418ee075abb95da701b1488708873ba6e16e2c8139ff8397f13a9b282273e3","ssdeep":"","tlshash":"3c015eb31920f0742f6226b6d0bbcba4f1506528f01c88e8e002dec82e79cc7ce15506","size":850,"data":"","first_seen":"2023-11-14T09:30:00Z","last_seen":"2025-12-12T01:32:39.629459Z","times_seen":3582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23b9dd721490a4062ba8d01454ef6ba9","sha1":"efdbb7331585411f7d397dacbf51fd3e95f3031d","sha256":"4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7","sha512":"5abfcb96fabd98fb9715b1fbbbf689e78997eac8c9d48a625e4974a51d7b4bbf300561a8243f8352fa691ed9ba6a3fcbec19e07bb34ab644444ce78eb20e88bf","ssdeep":"6144:V9k3ye0azAbxha5VJDpTXDt0PRAW/liZbvPbqw5lr08dw6vSdLL8v+lzUtT:PkmOWYTIQZbvPbpLi6wkGlzUx","tlshash":"61a419d9b55276724322b5f5107b2009a7be4a15e4d8085e7294c8f83fb088e727bfb7","size":476095,"data":"","first_seen":"2023-11-14T09:02:02Z","last_seen":"2025-12-12T01:32:39.613776Z","times_seen":12209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","fqdn":"3tght76h.com","domain":"3tght76h.com","tld":"com"},"ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-04T01:32:59.389287Z","times_seen":14610584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-04T01:31:16.619429Z","times_seen":420836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02b820d4d66403b93d339d11cdb7be6d","sha1":"101d6a8226ab13cce021e6cdab8c43a26a273407","sha256":"a76b611c4a25b9f187b79f1f84222b5207803ad0af32c10f45a971be33e15ca1","sha512":"6dd75b777b432aaed686ce8bc7948226e0776b4688a7ce14e009efa282b680f7f5e32079e828cc2df9d183edf3a86e2125d856ddec3dd2570d547bec491992b8","ssdeep":"1536:Rflt9RO8x+p7ZMsDPPiG/APsvUcmjUEHRZBROz8:Rf94lXeG/jUFjUcRn1","tlshash":"1b33af37e34270ebefbcdb0156e969ee227e6946204248dd25fb0096c579d89b36c0dc","size":53594,"data":"","first_seen":"2024-08-20T16:51:59.310417Z","last_seen":"2024-08-20T16:51:59.310417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-547JG5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18e5c880db3aecda0e46c3087a30383","sha1":"f7f2c475007225a048be74ff663fe73226edf9c9","sha256":"4b88e443b1c8c4520cfe9cd16e8ec5f5d0355a84ab75fce428b05c58a0d9b150","sha512":"2e5229dc45ce96c443b0d09726ba46b80fd37b9224da9e33c17985b14fbb49c35db9c8be827c4be1cbf984d45c8d582e73dcd1dd720a3ba0fa041fb764e6d6fb","ssdeep":"3072:3xJJRMLW7cOhjrO0zOS1fDpC75J/qUNgstDF:PyhuA8DpC75JzeK","tlshash":"ebb3e7d9b7d6b12a93a3b4b8503f010bf17a6d92f84cdc94e182c9c12e786994177f6c","size":117807,"data":"","first_seen":"2023-12-04T05:25:54Z","last_seen":"2023-12-04T05:25:55Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"cf876ca4f502b2fa2671272b6f64b213","sha1":"ab94320e0991ce49c95343610f2d38b5e8c8f28a","sha256":"8d333c3dd690fdf8b52bf7827ca62cf9e923b844bfae8155bf33b5200b376d92","sha512":"ec3d4a10d640ef6ae0f9139100cc96d52b4dd9af06f601ecc1d9809011638a93609833dd6c0987963290ab17405adad10296fe792616e62f4dfbe17a8c49cc72","ssdeep":"","tlshash":"","size":16952,"data":"","first_seen":"2023-11-07T15:55:24Z","last_seen":"2024-08-20T20:32:22.919198Z","times_seen":3188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4b21dca5b9012bd43b82e908cc1098e6","sha1":"bd594615e8644ac0013dd22d8b779b642b5bd405","sha256":"c372d473de05374c906d67b2222f2090e52de3d7acf52810542a24da92e2abf9","sha512":"9a4bb13a82e96da98a227320dd31c22e549ed6ecb2b218c01c9c064da8a2887f80455bd89d53b1863929a101ab1b92687c2d70e5630e5d04d18db7685695223e","ssdeep":"384:kRE/gvuW8jOGJZR1N45NzqHKwBj0IBXLnby08U2k:krWW8iGJZ3N43qH7g87by08xk","tlshash":"d5b2e8d5fa62b22441b3b9f1067f010ed2bb1851fcc8646cb119c9d06e74e8a54aff7a","size":23517,"data":"","first_seen":"2024-08-20T16:51:59.312206Z","last_seen":"2024-08-20T16:51:59.312206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"224ac2edd48a4d27399a35d4a94d8f17","sha1":"33a0fd7fc8561e1cca8737032f7b24d32c47d171","sha256":"bd86e6f419efd867fc86701b061f5cab02b0f38086c64d9a8e8f00b98bbc96cb","sha512":"0eafef8ea9d8e3098fe10aec4f221a590c034afe26744779b58d594f7962b7448da9ad6bc952a39f82ae3b3f582cbc8be0dc5bd8622fecdf433754ee0d28856b","ssdeep":"","tlshash":"","size":22,"data":"","first_seen":"2023-11-07T15:55:24Z","last_seen":"2024-08-20T20:32:22.921751Z","times_seen":3194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8d799e5e3b9450dd4c1aef6e122df0de","sha1":"1c074fc167af588bc86e54b4ceb4017ce0a7791a","sha256":"e69ebca4238490aa2b0c08845343b95b35a04efaca3e62b2732e1ca661bb3374","sha512":"6a9aae52967ea6133b6f0e164b1ecf9b326a3c5d037bb1b3b4da70080d070294d29d7094c78d8f80a9e5559ff7dd3fb887da8c2af639ac77dc9fea1f95831cbe","ssdeep":"","tlshash":"","size":22,"data":"","first_seen":"2023-11-07T15:55:24Z","last_seen":"2024-08-20T20:32:22.919706Z","times_seen":3187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cf1dd8609868435e7eb1006b517c1abb","sha1":"0fb005e6e00be62e448385d3ff0a2513e49f4806","sha256":"a01b7ce49084f117d7034cc7571519fd95e62401da4c9976d4275da0dd08f8e9","sha512":"90e31e7d008bb3961c87ae403662ea250eec4e009e66d6c1e30bdea1bf8ceb3d937a06ea13338ed22e967b5eec9762f6998f048fbe19ea7a3136172f1a2b1b42","ssdeep":"","tlshash":"","size":64,"data":"","first_seen":"2023-11-07T15:55:24Z","last_seen":"2024-08-20T20:32:22.920263Z","times_seen":3193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bonnettaking.com/atvfkv5y9t?key=c0a04045d457577795925eedc3a3f551","fqdn":"bonnettaking.com","domain":"bonnettaking.com","tld":"com"},"ip":{"addr":"173.233.139.164","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T04:25:40.861042109Z","timestamp":1701663940861,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /atvfkv5y9t?key=c0a04045d457577795925eedc3a3f551 HTTP/1.1\r\nHost: bonnettaking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 04 Dec 2023 04:25:35 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: u_pl=19119789; expires=Tue, 05 Dec 2023 04:25:35 GMT\nain=eyJhbGciOiJIUzI1NiJ9.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.dDL92KE60jB0uuZ0NFHPGnOaxbmPLuLcczcYAZl8pP4; expires=Mon, 04 Dec 2023 04:26:35 GMT\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: ac5eec958f070d7fcf57c9eed5023c47\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1339,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (416)","md5":"620d18290641d31434ac6342c693d3d8","sha1":"e3bd7f20cc83fd7cb86d0a0c966ec5608895f547","sha256":"6574e27ea875ac69df6300451195f8ab5a12fdb14a69c2e568096185b606c398","sha512":"c16af48e27c4abea75b4483ccac7e47cef9fe0f2003371f28b501a61b40a7545f4c534483e09d817ea3a54684df02878e9f1cc957ba4d996263d61bd0ad577d1","ssdeep":"","tlshash":"f961844aacf394b09523603c9fabd7643636e1171604dd683a8c06b02f59e0e8bb5bdd","first_seen":"2023-12-04T05:25:54Z","last_seen":"2023-12-04T05:25:54Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"bonnettaking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonnettaking.com/api/users?token=L2F0dmZrdjV5OXQ_a2V5PWMwYTA0MDQ1ZDQ1NzU3Nzc5NTkyNWVlZGMzYTNmNTUxJnBzdD0xNzAxNjYzOTk1JnJtdGM9dCZzaHU9Nzc3ZGFlNDk5NjYwZDI3MzQ5ZDhhNjllMDhhNGViMWIzY2Y4MTAzYzhkMTNhN2JkNjY4NjAyYmM5ODdjYThhNGQ4M2QzYTA2OWY3OTIwMTZmZjJlZDJhMDUzMTM1ZjllMDUyM2EzOTVmOGY5ZDg1NzgwZGIzN2Y5NTkwNTM2ZmY4M2Y4ZmNkY2E1ZGIxZGU4ZDI1ZGFjMTBiY2IxMjc0YzgxMjk3M2RmOWU5ZjBkNDc5MDA3MGM3MTY1MTM0YTMwNDc%3D\u0026uuid=\u0026pii=\u0026in=false","fqdn":"bonnettaking.com","domain":"bonnettaking.com","tld":"com"},"ip":{"addr":"173.233.139.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T04:25:41.278Z","timestamp":1701663941278,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bonnettaking.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Oct 2023 06:12:56 GMT","end":"Sat, 27 Jan 2024 06:12:55 GMT"},"fingerprint":{"sha1":"20:40:C7:9C:65:7A:B3:AE:03:4A:2C:45:1D:FA:72:62:06:8B:51:D1","sha256":"02:F1:CE:D9:95:E0:C4:19:95:69:53:CA:14:CD:A9:09:A7:CA:26:2B:09:2E:23:B0:E3:88:10:DB:63:1F:B8:FF"}}},"request":{"raw":"GET /api/users?token=L2F0dmZrdjV5OXQ_a2V5PWMwYTA0MDQ1ZDQ1NzU3Nzc5NTkyNWVlZGMzYTNmNTUxJnBzdD0xNzAxNjYzOTk1JnJtdGM9dCZzaHU9Nzc3ZGFlNDk5NjYwZDI3MzQ5ZDhhNjllMDhhNGViMWIzY2Y4MTAzYzhkMTNhN2JkNjY4NjAyYmM5ODdjYThhNGQ4M2QzYTA2OWY3OTIwMTZmZjJlZDJhMDUzMTM1ZjllMDUyM2EzOTVmOGY5ZDg1NzgwZGIzN2Y5NTkwNTM2ZmY4M2Y4ZmNkY2E1ZGIxZGU4ZDI1ZGFjMTBiY2IxMjc0YzgxMjk3M2RmOWU5ZjBkNDc5MDA3MGM3MTY1MTM0YTMwNDc%3D\u0026uuid=\u0026pii=\u0026in=false HTTP/1.1\r\nHost: bonnettaking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonnettaking.com/atvfkv5y9t?key=9ca601a9f47c735df76d5ca46fa26a66\u0026submetric=19119789\r\nCookie: u_pl=19119789; ain=eyJhbGciOiJIUzI1NiJ9.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.dDL92KE60jB0uuZ0NFHPGnOaxbmPLuLcczcYAZl8pP4; cjs=t\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.21.6\r\nDate: Mon, 04 Dec 2023 04:25:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nLocation: https://gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o\u0026SUB_ID_SHORT(action)=301aadfd86816cf265ace39e6c7e1baf\u0026COST_CPA=0.100000\u0026PLACEMENT_ID=19119789\u0026BANNER_ID=2636932\u0026COUNTRY_CODE=NO\u0026IAB_CATEGORY=IAB25-3\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026PUBLISHER_ID=464995\u0026ZONE_ID=1851503\u0026USER_CARRIER=Blix%20Solutions\u0026CATEGORY_ALIAS=Adult%20Social\r\nSet-Cookie: iprc0d2ffb313d581939924e90589f487252=4755748; expires=Tue, 05 Dec 2023 04:25:35 GMT\npdhtkv=true; expires=Tue, 05 Dec 2023 04:25:35 GMT\nuncs=1; expires=Tue, 05 Dec 2023 04:25:35 GMT\npdhtkv28=true; expires=Tue, 05 Dec 2023 04:25:35 GMT\nuncs28=1; expires=Tue, 05 Dec 2023 04:25:35 GMT\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 95ea4d7da0f0cc43212a65b278959ada\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-04T01:32:59.389287Z","times_seen":14610584,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"bonnettaking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o\u0026SUB_ID_SHORT(action)=301aadfd86816cf265ace39e6c7e1baf\u0026COST_CPA=0.100000\u0026PLACEMENT_ID=19119789\u0026BANNER_ID=2636932\u0026COUNTRY_CODE=NO\u0026IAB_CATEGORY=IAB25-3\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026PUBLISHER_ID=464995\u0026ZONE_ID=1851503\u0026USER_CARRIER=Blix%20Solutions\u0026CATEGORY_ALIAS=Adult%20Social","fqdn":"gl0a7loeki02do.com","domain":"gl0a7loeki02do.com","tld":"com"},"ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T04:25:41.539Z","timestamp":1701663941539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gl0a7loeki02do.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Dec 2023 16:50:17 GMT","end":"Thu, 29 Feb 2024 16:50:16 GMT"},"fingerprint":{"sha1":"63:1A:B9:58:A8:30:FD:6E:5D:65:70:EC:3B:31:59:71:62:75:F2:55","sha256":"FC:C8:A4:A9:CA:C4:A2:D6:92:DD:1F:28:68:09:A0:C6:0D:F1:CD:96:59:72:2E:7D:4F:64:87:9E:FD:43:13:76"}}},"request":{"raw":"GET /news.php?key=ra60tm42lesurp8cpy3o\u0026SUB_ID_SHORT(action)=301aadfd86816cf265ace39e6c7e1baf\u0026COST_CPA=0.100000\u0026PLACEMENT_ID=19119789\u0026BANNER_ID=2636932\u0026COUNTRY_CODE=NO\u0026IAB_CATEGORY=IAB25-3\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026PUBLISHER_ID=464995\u0026ZONE_ID=1851503\u0026USER_CARRIER=Blix%20Solutions\u0026CATEGORY_ALIAS=Adult%20Social HTTP/1.1\r\nHost: gl0a7loeki02do.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonnettaking.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.22.0\r\nDate: Mon, 04 Dec 2023 04:25:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: uclick=4ka3tw520; expires=Tue, 05-Dec-2023 04:25:36 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b; expires=Tue, 05-Dec-2023 04:25:36 GMT; Max-Age=86400; path=/; secure; SameSite=none\r\nLocation: https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b\r\nStrict-Transport-Security: max-age=31536000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-04T01:32:59.389287Z","times_seen":14610584,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":152,"dns":17,"connect":43,"send":0,"wait":342,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","fqdn":"3tght76h.com","domain":"3tght76h.com","tld":"com"},"ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T04:25:42.039Z","timestamp":1701663942039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3tght76h.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Nov 2023 12:22:03 GMT","end":"Tue, 13 Feb 2024 12:22:02 GMT"},"fingerprint":{"sha1":"69:86:04:06:BA:1E:8D:32:8D:DC:3C:8A:58:4B:75:CE:E7:C1:2B:45","sha256":"BD:12:5B:4F:DB:FE:12:A6:19:56:F5:29:28:43:0A:8E:FB:62:71:5D:38:C3:3E:BB:83:F2:7C:FE:AF:C5:E0:C2"}}},"request":{"raw":"GET /1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b HTTP/1.1\r\nHost: 3tght76h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonnettaking.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.0\r\nDate: Mon, 04 Dec 2023 04:25:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1429,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"26bc2b889534aead062fab4a41c790fe","sha1":"c17fc01dc4cb6a7cb7fc24a73bad25b8e8115242","sha256":"16e5a8b96ca3feecf8acdc49f84fba4486ff5a1bc7cd77bb1c88f3caf8d4fd82","sha512":"7ea40bf240967015fca31c10830ee217393de8fc611e9f2274917116982ffbd940fd9d89d3e47df5ba02c4b77769b326316e3ad8ff99086c362da95d7e2643f4","ssdeep":"","tlshash":"5151726fbd4a84191ab242b28bb3b11cf812611bd241c6627ddc1b7b1fb47958d53dcc","first_seen":"2023-04-08T06:53:01Z","last_seen":"2024-08-21T05:31:25.380967Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":137,"dns":1,"connect":43,"send":0,"wait":44,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.394Z","timestamp":1701663942394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 04 Dec 2023 04:25:37 GMT\r\ndate: Mon, 04 Dec 2023 04:25:37 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1027,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data\\012- data","md5":"b94db23d11b7e8bf32047205feec5824","sha1":"cc0eaaa3d4254c5a8f44ef87877caa20bf41c9d7","sha256":"73b5a801abdc52fdddb9dbf84fc7b4c3948b2b9deda76cd87075fb6a15104021","sha512":"e75225fbac3542369f205d064ee1819b79353c37336c810b4318dd7b18de72ce02d0a4c0e2f65485b2038cd81c8cb7c2e8c0632b58b88dd47f6241042263c808","ssdeep":"","tlshash":"4811080a0fab322fce1c05a892f4d0f43c40a9f81370cb56412fb1d983b49c9e200a1e","first_seen":"2023-12-04T01:55:54Z","last_seen":"2023-12-04T23:56:11Z","times_seen":20,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":141,"dns":3,"connect":7,"send":0,"wait":22,"receive":5,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/axios/dist/axios.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.16.124.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.388Z","timestamp":1701663942388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 02 May 2023 00:00:00 GMT","end":"Wed, 01 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"F7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F","sha256":"F0:94:D5:99:1F:D0:98:0A:4C:88:C9:72:18:9E:63:5E:FA:57:E3:E0:63:57:17:96:69:3A:93:0C:4D:4E:34:E2"}}},"request":{"raw":"GET /axios/dist/axios.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 04 Dec 2023 04:25:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=600, max-age=60\r\nlocation: /axios@1.6.2/dist/axios.min.js\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 fly.io\r\nfly-request-id: 01HGSH1GE3Q94S72A6V8DBN9YT-arn\r\ncf-cache-status: HIT\r\nage: 151\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 83014955bb22b52d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":13396,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"74de43264b9cee6d73336688f5de0e24","sha1":"7fb6a065d52043cd177ebe347c9a67e10980366f","sha256":"811d1a23e1bd01ad42e34a12d68ac66572a2e2a2bc2aceeab93d6f03d0f49465","sha512":"03eed93a083b8b7241ca3895fc1b41285091bb2bddf6acb05b083b9f25ea1afa13571671699788c823b9bcd40af74b088438ca53fbc42266032f5321333b5090","ssdeep":"384:/ZXId3F+EWCOd8qn8CQ4cHJ+gd30WlnnvusmaNiYHD:BXIdTcOu8C1+lvwMTj","tlshash":"e252c08d1c131aedb650caff66a833859660247c1c1327c57f699efa2ce45c2e0be1c9","first_seen":"2023-12-04T05:25:55Z","last_seen":"2023-12-04T05:25:55Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-547JG5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.617Z","timestamp":1701663942617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtm.js?id=GTM-547JG5H HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 04 Dec 2023 04:25:37 GMT\r\nexpires: Mon, 04 Dec 2023 04:25:37 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 04 Dec 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 45251\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45251,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2213)","md5":"f18e5c880db3aecda0e46c3087a30383","sha1":"f7f2c475007225a048be74ff663fe73226edf9c9","sha256":"4b88e443b1c8c4520cfe9cd16e8ec5f5d0355a84ab75fce428b05c58a0d9b150","sha512":"2e5229dc45ce96c443b0d09726ba46b80fd37b9224da9e33c17985b14fbb49c35db9c8be827c4be1cbf984d45c8d582e73dcd1dd720a3ba0fa041fb764e6d6fb","ssdeep":"3072:3xJJRMLW7cOhjrO0zOS1fDpC75J/qUNgstDF:PyhuA8DpC75JzeK","tlshash":"ebb3e7d9b7d6b12a93a3b4b8503f010bf17a6d92f84cdc94e182c9c12e786994177f6c","first_seen":"2023-12-04T05:25:54Z","last_seen":"2023-12-04T05:25:55Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":54,"dns":4,"connect":8,"send":0,"wait":24,"receive":11,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tght76h.com/1/bg.png","fqdn":"3tght76h.com","domain":"3tght76h.com","tld":"com"},"ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.605Z","timestamp":1701663942605,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3tght76h.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Nov 2023 12:22:03 GMT","end":"Tue, 13 Feb 2024 12:22:02 GMT"},"fingerprint":{"sha1":"69:86:04:06:BA:1E:8D:32:8D:DC:3C:8A:58:4B:75:CE:E7:C1:2B:45","sha256":"BD:12:5B:4F:DB:FE:12:A6:19:56:F5:29:28:43:0A:8E:FB:62:71:5D:38:C3:3E:BB:83:F2:7C:FE:AF:C5:E0:C2"}}},"request":{"raw":"GET /1/bg.png HTTP/1.1\r\nHost: 3tght76h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.0\r\nDate: Mon, 04 Dec 2023 04:25:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 61362\r\nLast-Modified: Wed, 15 Nov 2023 13:23:49 GMT\r\nConnection: keep-alive\r\nETag: \"6554c665-efb2\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 299, 8-bit grayscale, non-interlaced\\012- data","md5":"d7096ad35844972e015e865729d13235","sha1":"42c79d98b50275dcc447bd61d845ee2ed52ae45e","sha256":"8bccdb408e67a3b44e0f5d417486c8d251f2e4acbae8542465aad3c7052341dd","sha512":"749d204e5c0cb98fcbe07192af1da77146dd9a8cfa13d7bb71d2106b8e11bb2a766c0e2f2d4c980525f398618c48e9127d98626f307a8acbff91c6b3453d48f8","ssdeep":"768:74aeZAOIs1YZaT4WphGM+Q+inrwoMxt2TghlVvp6PMuaMMgEH15QbNGdUAzzVb30:sjTIu7aNY0xrx6PMVXQbNGdfzVzVhvw","tlshash":"4b53027d161f83ca012e4cdaa0c5e7a7d33f981b4ca6f7425ecce6a421116e9b2dd127","first_seen":"2023-05-02T16:00:57Z","last_seen":"2025-09-26T06:02:51.604972Z","times_seen":1215,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tght76h.com/favicon.png","fqdn":"3tght76h.com","domain":"3tght76h.com","tld":"com"},"ip":{"addr":"78.46.92.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.748Z","timestamp":1701663942748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3tght76h.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Nov 2023 12:22:03 GMT","end":"Tue, 13 Feb 2024 12:22:02 GMT"},"fingerprint":{"sha1":"69:86:04:06:BA:1E:8D:32:8D:DC:3C:8A:58:4B:75:CE:E7:C1:2B:45","sha256":"BD:12:5B:4F:DB:FE:12:A6:19:56:F5:29:28:43:0A:8E:FB:62:71:5D:38:C3:3E:BB:83:F2:7C:FE:AF:C5:E0:C2"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: 3tght76h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.22.0\r\nDate: Mon, 04 Dec 2023 04:25:37 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":114,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with CRLF line terminators","md5":"ac5ea41aae137cead073d37a7bb732bc","sha1":"85bde4b57e1f38bd7ff0e6cf4b6ac5f626a5fbae","sha256":"fcdc802dabd14bed15efb9235ee0decac4adb6908dca03eeba74e2bf8f4eb5a7","sha512":"e18fb7137b18f12275eb2e93230b6eaf9260180b9c65cd68850aacda5db89dfd4ec360fab6ea1ed1766077b3e916e89c12be958dd1e9c904f81a01978e9651ba","ssdeep":"","tlshash":"a4c02b2d3513bc4cc563317832c37080c0c6833768bb41128440800331cf2a98ac7397","first_seen":"2023-04-07T11:57:07Z","last_seen":"2026-05-03T21:01:20.903592Z","times_seen":2220,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","date":"2023-12-04T04:25:44.046Z","timestamp":1701663944046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://3tght76h.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 190682\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Dec 2023 11:52:30 GMT\r\nexpires: Mon, 02 Dec 2024 11:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Nov 2023 05:42:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 59587\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190682,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (563)","md5":"23b9dd721490a4062ba8d01454ef6ba9","sha1":"efdbb7331585411f7d397dacbf51fd3e95f3031d","sha256":"4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7","sha512":"5abfcb96fabd98fb9715b1fbbbf689e78997eac8c9d48a625e4974a51d7b4bbf300561a8243f8352fa691ed9ba6a3fcbec19e07bb34ab644444ce78eb20e88bf","ssdeep":"6144:V9k3ye0azAbxha5VJDpTXDt0PRAW/liZbvPbqw5lr08dw6vSdLL8v+lzUtT:PkmOWYTIQZbvPbpLi6wkGlzUx","tlshash":"61a419d9b55276724322b5f5107b2009a7be4a15e4d8085e7294c8f83fb088e727bfb7","first_seen":"2023-11-14T09:02:02Z","last_seen":"2025-12-12T01:32:39.613776Z","times_seen":12209,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","date":"2023-12-04T04:25:44.032Z","timestamp":1701663944032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 24606\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Dec 2023 19:06:15 GMT\r\nexpires: Mon, 02 Dec 2024 19:06:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Nov 2023 05:42:11 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 33562\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24606,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56398), with no line terminators","md5":"eb4bc511f79f7a1573b45f5775b3a99b","sha1":"d910fb51ad7316aa54f055079374574698e74b35","sha256":"7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050","sha512":"ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0","ssdeep":"768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2","tlshash":"d2434c7338403a2afc37976170967ddcf12cd523ea111bbaf656792086cb0b69163b47","first_seen":"2023-08-25T14:13:12Z","last_seen":"2026-04-13T09:21:56.629211Z","times_seen":64721,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","date":"2023-12-04T04:25:44.046Z","timestamp":1701663944046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 190682\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Dec 2023 11:52:30 GMT\r\nexpires: Mon, 02 Dec 2024 11:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Nov 2023 05:42:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 59587\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190682,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (563)","md5":"23b9dd721490a4062ba8d01454ef6ba9","sha1":"efdbb7331585411f7d397dacbf51fd3e95f3031d","sha256":"4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7","sha512":"5abfcb96fabd98fb9715b1fbbbf689e78997eac8c9d48a625e4974a51d7b4bbf300561a8243f8352fa691ed9ba6a3fcbec19e07bb34ab644444ce78eb20e88bf","ssdeep":"6144:V9k3ye0azAbxha5VJDpTXDt0PRAW/liZbvPbqw5lr08dw6vSdLL8v+lzUtT:PkmOWYTIQZbvPbpLi6wkGlzUx","tlshash":"61a419d9b55276724322b5f5107b2009a7be4a15e4d8085e7294c8f83fb088e727bfb7","first_seen":"2023-11-14T09:02:02Z","last_seen":"2025-12-12T01:32:39.613776Z","times_seen":12209,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656","date":"2023-12-04T04:25:43.569Z","timestamp":1701663943569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Nov 2023 10:04:07 GMT\r\nexpires: Fri, 29 Nov 2024 10:04:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 325291\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\\012- data","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-04T01:10:42.541104Z","times_seen":539172,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":42,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","date":"2023-12-04T04:25:44.046Z","timestamp":1701663944046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 190682\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Dec 2023 11:52:30 GMT\r\nexpires: Mon, 02 Dec 2024 11:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Nov 2023 05:42:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 59588\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190682,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (563)","md5":"23b9dd721490a4062ba8d01454ef6ba9","sha1":"efdbb7331585411f7d397dacbf51fd3e95f3031d","sha256":"4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7","sha512":"5abfcb96fabd98fb9715b1fbbbf689e78997eac8c9d48a625e4974a51d7b4bbf300561a8243f8352fa691ed9ba6a3fcbec19e07bb34ab644444ce78eb20e88bf","ssdeep":"6144:V9k3ye0azAbxha5VJDpTXDt0PRAW/liZbvPbqw5lr08dw6vSdLL8v+lzUtT:PkmOWYTIQZbvPbpLi6wkGlzUx","tlshash":"61a419d9b55276724322b5f5107b2009a7be4a15e4d8085e7294c8f83fb088e727bfb7","first_seen":"2023-11-14T09:02:02Z","last_seen":"2025-12-12T01:32:39.613776Z","times_seen":12209,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656","date":"2023-12-04T04:25:43.662Z","timestamp":1701663943662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Nov 2023 21:37:43 GMT\r\nexpires: Wed, 06 Dec 2023 21:37:43 GMT\r\ncache-control: public, max-age=604800\r\nage: 370075\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\\012- data","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-05-04T01:32:31.635348Z","times_seen":587419,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","date":"2023-12-04T04:25:44.032Z","timestamp":1701663944032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 24606\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Dec 2023 19:06:15 GMT\r\nexpires: Mon, 02 Dec 2024 19:06:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Nov 2023 05:42:11 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 33563\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24606,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56398), with no line terminators","md5":"eb4bc511f79f7a1573b45f5775b3a99b","sha1":"d910fb51ad7316aa54f055079374574698e74b35","sha256":"7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050","sha512":"ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0","ssdeep":"768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2","tlshash":"d2434c7338403a2afc37976170967ddcf12cd523ea111bbaf656792086cb0b69163b47","first_seen":"2023-08-25T14:13:12Z","last_seen":"2026-04-13T09:21:56.629211Z","times_seen":64721,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","date":"2023-12-04T04:25:44.046Z","timestamp":1701663944046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 190682\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Dec 2023 11:52:30 GMT\r\nexpires: Mon, 02 Dec 2024 11:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Nov 2023 05:42:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 59588\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190682,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (563)","md5":"23b9dd721490a4062ba8d01454ef6ba9","sha1":"efdbb7331585411f7d397dacbf51fd3e95f3031d","sha256":"4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7","sha512":"5abfcb96fabd98fb9715b1fbbbf689e78997eac8c9d48a625e4974a51d7b4bbf300561a8243f8352fa691ed9ba6a3fcbec19e07bb34ab644444ce78eb20e88bf","ssdeep":"6144:V9k3ye0azAbxha5VJDpTXDt0PRAW/liZbvPbqw5lr08dw6vSdLL8v+lzUtT:PkmOWYTIQZbvPbpLi6wkGlzUx","tlshash":"61a419d9b55276724322b5f5107b2009a7be4a15e4d8085e7294c8f83fb088e727bfb7","first_seen":"2023-11-14T09:02:02Z","last_seen":"2025-12-12T01:32:39.613776Z","times_seen":12209,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/axios@1.6.2/dist/axios.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.16.124.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.426Z","timestamp":1701663942426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 02 May 2023 00:00:00 GMT","end":"Wed, 01 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"F7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F","sha256":"F0:94:D5:99:1F:D0:98:0A:4C:88:C9:72:18:9E:63:5E:FA:57:E3:E0:63:57:17:96:69:3A:93:0C:4D:4E:34:E2"}}},"request":{"raw":"GET /axios@1.6.2/dist/axios.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://3tght76h.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 04:25:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\netag: W/\"8355-QTyXuMi6C+GMNqZaW+lAI5xZVsI\"\r\nvia: 1.1 fly.io\r\nfly-request-id: 01HGCN3VFCPPSGV0YWPCZJNHHR-arn\r\ncf-cache-status: HIT\r\nage: 432087\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 83014955cb2ab52d-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33621,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (33582)","md5":"a68c57e04fd79331988c16fc3585405d","sha1":"413c97b8c8ba0be18c36a65a5be940239c5956c2","sha256":"550f26d03776c62d33e90b8028c6b4e2e7d1301c6ff769cff94592a93df71c68","sha512":"6fde19eb8df52725d8d788925f0833799bab1c744d90bb7d77a6c01edec1653dfc7aa57e1b29e0222fed5727b88c128f610da505d46cd20970c387e6a6e2d1c0","ssdeep":"768:JCEC6jLwVKlrza6wPQuFM70pLWqlmhBD5xv:B3aDvM0Zhit","tlshash":"1ee2e7c9b7e1b06153a770b5407f250bf23aa926a44d84a0f120ece67cb850e9767f7d","first_seen":"2023-11-14T21:38:37Z","last_seen":"2026-05-03T15:56:21.971776Z","times_seen":6949,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656","date":"2023-12-04T04:25:43.579Z","timestamp":1701663943579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\nexpires: Mon, 04 Dec 2023 04:25:38 GMT\r\ndate: Mon, 04 Dec 2023 04:25:38 GMT\r\ncache-control: private, max-age=300\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b581f6e6ac7eb4d572233bdd384918f8","sha1":"12a90cd14cfea2286982801538560f638670eaff","sha256":"b62f36160407c81030404ab242125afd42fa0da6626ef11e5f406dda12acf144","sha512":"232fb6b94ad5708a7c1631050a42eb6a3ac1e383d916a09eeff1e070ea110c7dbedf69efa692467c5242ad41c90e9c5505e1c9fe0defa794ef49c2d8523d15ac","ssdeep":"","tlshash":"f8b012330aa1c42c1d044212c83797ace0214125e66580f4c1a50fe431500b34410500","first_seen":"2023-11-14T09:02:03Z","last_seen":"2024-08-20T19:39:13.633122Z","times_seen":4747,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:42.990Z","timestamp":1701663942990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui\u0026co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz\u0026hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026size=normal\u0026cb=adlstrbay656 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 04:25:37 GMT\r\ncontent-security-policy: script-src 'nonce-Knj0Spe4VAm7C2oG38D9mA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62113,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (53588)","md5":"19a0cda50f91bec3b4017a4a67322958","sha1":"ce40495c29f56015c0f4b9ecfd593cfa56d3c813","sha256":"b3e62757c74d2f12c3088d381da48dc1f39d30911153ebf70ac4364775bf8c0b","sha512":"9beb7b90b952ea59804c90fcaa4ab5607eb6f1127578aed34cae9fe38ec8d76220f8a6321e449a4d1e036f64275f74130015a8ccfaf623ada9c243af05fa2a4f","ssdeep":"1536:C7fflt9RO8x+p7ZMsDPPiG/APsvUcmjUEHRZBROzL:C7f94lXeG/jUFjUcRnc","tlshash":"5253a0229503b055efbe8d8163de3d79626f65063042c8d967ff00e8dd79d5aa36838c","first_seen":"2023-12-04T05:25:55Z","last_seen":"2023-12-04T05:25:55Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://3tght76h.com/1/?lpkey=172601cc66c9427036\u0026uclick=4ka3tw520\u0026uclickhash=4ka3tw520-4ka3tw520-17dz-166o-ir8n-bza7-oc1n-28178b","date":"2023-12-04T04:25:43.983Z","timestamp":1701663943983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=-QbJqHfGOUB8nuVRLvzFLVed\u0026k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3tght76h.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 04:25:38 GMT\r\ncontent-security-policy: script-src 'nonce-lBVBuYjgcIN7Curfnys-5Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7256,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (7487), with no line terminators","md5":"1e42a938e67310998e05a44b77d0e21d","sha1":"44e092484e1caa6a7772938abc07fcf23c41f91d","sha256":"9f0aab13ce5a6cb03e82455ff0794526a2da5526a46c1af70a629f0dd42c1984","sha512":"f4a9d0f2ff0e4e0d14bfb2d411ecaac48178f04d0a315747fb5b8c1274bf79f9ff54bfe9fc9cbb830498b64c9df777a08bac105a1fda04507fb1ac020a63ee66","ssdeep":"192:TYnfyvXaI09Ic0ubq17hUEI/6iTA/aBoU5S:MnfyvXaIW10ubq17hHI/6iTA/amUS","tlshash":"bbf1dd81180b9400a6934ed673df3a35fd4f3a2160628132abfe99bd9ed7c23935874d","first_seen":"2023-12-04T05:25:55Z","last_seen":"2023-12-04T05:25:55Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}