{"report_id":"58d4df9e-9d6f-4b9c-b4b6-60f668f54fa5","version":6,"status":"done","tags":[],"date":"2026-02-19T14:34:20Z","url":{"schema":"https","addr":"cafekessabine.com/","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.158","port":0,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"final":{"url":{"schema":"https","addr":"cafekessabine.com/","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"title":"im冷钱包下载_imtoken官方下载","dom":{"size":13995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9965)","md5":"0457ac3fd217c549a01ccf70b0e78b69","sha1":"3c4bf7b293bd43f40088bf683368968aee2f0fd8","sha256":"6d4bcb973d243a62364128fb2e4c0459c25af72cd2100efa8572a2408377624e","sha512":"f032d895ef9e9eaf8fcd7b75f38379d07282ef18e110fe8401e322e3084b8d836e529b69a16b4bf6db1142ff084cf588df92fe2196afcc26bb10c554d191ea02","ssdeep":"192:FdKClJA/LmQ6CnaDAbmHV5mdk/qap/r3FspPF3tMn9F4T2Qv:TKCm6saPnF8N3tMn9F4T26","tlshash":"a852403294d5653b12536de8f0b16f5de0c3821ec66a2c48b3fd8bc69fd1e989d02987","dom_hash":"domhash67b2a411027d4ae93f3ad9176b4c5159","first_seen":"2025-10-27T04:12:01.319902Z","last_seen":"2026-06-01T02:27:04.84424Z","times_seen":312,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cafekessabine.com/","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.158","port":0,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T14:34:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":5,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T14:33:59Z","timestamp":1771511639,"ip_dst":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"ip_src":{"addr":"Client IP","port":52698,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T14:33:59.768640+0000\",\"flow_id\":523310078611416,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":52698,\"dest_ip\":\"8.212.139.121\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imto1ken.oss-ap-southeast-6.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6402,\"start\":\"2026-02-19T14:33:59.315352+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T14:33:59Z","timestamp":1771511639,"ip_dst":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"ip_src":{"addr":"Client IP","port":52700,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T14:33:59.919265+0000\",\"flow_id\":254238967451789,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":52700,\"dest_ip\":\"8.212.139.121\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imto1ken.oss-ap-southeast-6.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6402,\"start\":\"2026-02-19T14:33:59.315533+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T14:33:59Z","timestamp":1771511639,"ip_dst":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"ip_src":{"addr":"Client IP","port":52716,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T14:33:59.984955+0000\",\"flow_id\":563092213190964,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":52716,\"dest_ip\":\"8.212.139.121\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imto1ken.oss-ap-southeast-6.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6402,\"start\":\"2026-02-19T14:33:59.315700+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T14:33:59Z","timestamp":1771511639,"ip_dst":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"ip_src":{"addr":"Client IP","port":52728,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T14:33:59.997205+0000\",\"flow_id\":1895878547188208,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":52728,\"dest_ip\":\"8.212.139.121\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imto1ken.oss-ap-southeast-6.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":906,\"bytes_toclient\":3148,\"start\":\"2026-02-19T14:33:59.567792+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T14:34:00Z","timestamp":1771511640,"ip_dst":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"ip_src":{"addr":"Client IP","port":52742,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T14:34:00.028298+0000\",\"flow_id\":1584858490448507,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":52742,\"dest_ip\":\"8.212.139.121\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imto1ken.oss-ap-southeast-6.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6402,\"start\":\"2026-02-19T14:33:59.567931+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","ip":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-01-09T10:28:12Z","last_seen":"2026-02-16T19:03:44.073807Z","alert_count":0,"request_count":3,"received_data":6095,"sent_data":1309,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-02-16T03:21:06.298707Z","alert_count":0,"request_count":1,"received_data":353,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cafekessabine.com","ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"domain_registered":"2022-07-27","domain_rank":0,"first_seen":"2026-02-19T14:34:22.331945Z","last_seen":"2026-02-19T14:34:22.331945Z","alert_count":36,"request_count":18,"received_data":1251782,"sent_data":8266,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app1.asia","ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-19T02:56:59.625393Z","last_seen":"2026-02-19T02:56:59.625393Z","alert_count":0,"request_count":35,"received_data":2953314,"sent_data":15386,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app1.asia/","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"70e3a62299dc4b491f76b48a1860d60c","sha1":"2c0f2dd6de2a4f14872f391e9697cc34c966de97","sha256":"40c726d7fd4182e8e8dad2feeea156d5ba3a04a5e50ffea8387a2301cb38221e","sha512":"2903563abeaf662dd162b6aad39542aac32f054709039a41ee9f570d80adcb35932c500a386c10bf3fb2fd556e9b5c8ea97eec6e47fa0ef2eef989134bb634bd","ssdeep":"","tlshash":"e79002200e72848f60072582831001c3a0590340021c4004e687c2604f6a84a60c5133","size":54,"data":"","first_seen":"2024-08-19T21:19:08.351854Z","last_seen":"2026-07-20T18:37:00.667971Z","times_seen":1809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/js/app.845283e8.js","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"708c641dec8bfaf92e52dfff28503b76","sha1":"124e681f9faa72c7b733c2c9da173f11f3fe08d7","sha256":"c6dcdab92506282c75a6061a41eb61964662618e7b0768aca18b5d39f97af4f9","sha512":"0d896692d4e2e47792eba7550aaa3ebdef46b2866766691ca9f2599093a6926f2012545e8bae3598200341a94ae58209435c63da2f7acda4a5be53c4df7c3182","ssdeep":"3072:mupUqvDzVgE0j0etKGsW4+whqIAjFnOelEfxM7xd4dCG+/f28/gnUsq0ACGharNm:FpzLzVr0j0STtMM7zuC/2VUsq0JGUrg","tlshash":"c5546c0ba74a3778080336a522df25dce228d4add22685b5fa7dc4d913e1a7d0373add","size":300990,"data":"","first_seen":"2024-07-11T22:37:16Z","last_seen":"2026-08-04T01:10:51.048297Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/js/chunk-vendors.72f83685.js","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f98c3f2e30ab7e16271e08cdddd6da27","sha1":"bb1d30f4ef4875a81cbd9c93f05de583aac06e0f","sha256":"cd8bb92a826b0ee3c18b95ee744a5768e34753c866a1a6c15e51d8e874481c58","sha512":"abd215263061d554b699b287c11735a9efae0f0dadb5c9c735167d5a3845d88454c92a1f69d6ca1d372e163817114eb06dd659987afc0719f1d2471460799fa2","ssdeep":"12288:0r2fW0/CNOHtCxSdztgX9eTjDkJI7kcPNQmG2hFm/3e:0r2uV20caXAPYUkcPqmG2hFm/O","tlshash":"2e15195cb244a1bc5ab767b8853b1012b36e95ee70948324f36ecce076710dce2a7d9d","size":961375,"data":"","first_seen":"2024-05-25T21:10:48Z","last_seen":"2026-08-04T01:10:51.044223Z","times_seen":1887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-11T18:05:04.113692Z","times_seen":98970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/js/website.f36331df.js","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71dba75388de4741eb9a7585149f32aa","sha1":"19165527037d47e419cc6f2dfa8d277922a3966a","sha256":"245a3b6120f739ccc8b57e40da5fbe1e495238f691ca87abc393af2493db7bca","sha512":"9e5cc907c3133d8318c46f951cf3f45d9599150d9fc5104081dd11075c92d0b55d7330e63f0a9440676f3f3fe495730a16cc5239988640d9d133af615d3b152a","ssdeep":"6144:eTin01pJVY5y1jEEAHN6J9LRAHQqHmrSGHDsXz0FwG37V1LT82dp5Ilv6iy8t7fU:een1mjERW9Dsj0FwG3rZ5oNvqV","tlshash":"40d4025d58b76ee554dfe01281380c29f03561bb522e9c207f1e4a586f3ce3e3a5bb68","size":650360,"data":"","first_seen":"2026-02-12T06:43:40.43703Z","last_seen":"2026-03-02T13:23:10.477136Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/so.js?20240707","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":false,"md5":"11f047e4fd3353cbf9658c4c5c7dbdb7","sha1":"7ed045b1c52c5a8a0a5105e044aefea558f89362","sha256":"f2a6a22292aa9423591c9ae69b54ac320a0d899432659ec43b664d28075f5288","sha512":"ac530543a97f278a9c7907b03ea2c17c380711a17816c3f9852b15857100e26da144f2e62d1d15dbbca68cdc7e4c5f6da4549860fe1e7512d131d11ab052cd95","ssdeep":"","tlshash":"3de0305e6d52ea20515009ede571eaa8e0bdb17afa55ca5c85e948241588fcd0d0ec44","size":421,"data":"","first_seen":"2024-10-25T18:50:30.62217Z","last_seen":"2026-07-06T09:51:41.564706Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/win.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f8dbbd475cb43344b670c2fdacc6b82","sha1":"81f53e6c5bbf81c9f4853f3f04bb028de5637d5b","sha256":"df7c4d1215e1e7dfe91bafa2044a5f4b33958d974a30c3cbc23582824f8ea678","sha512":"45fc0fee6343de678c30e4748076fbb0c8011680f3a9949ba6e94d5f0ae70a50d108e657d53d64291ef5014b5e2b4348c83a7e24498372f26284fa23965bc54c","ssdeep":"","tlshash":"2f516edc77e6e24f7b8c5da3fe05afda01b5857ba0d17243c79cb98d20e920ac668044","size":2981,"data":"","first_seen":"2026-02-19T02:57:10.990158Z","last_seen":"2026-02-19T14:52:12.679804Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4c4098cee4d65d8d0eba25bfca0a5e8e","sha1":"f1d97ff1662402f3e1a34730841f3179fba74da9","sha256":"b6467d5720b951c9b5b3f4997c37113468456d187e75f931aae2b6b71c497b0f","sha512":"903485380be0ceb8f66841edafd08a95c2045449bea5256e9af68affe596e833eb7682ffa27b98806f616b66a2cddaa97520a78421cc9b16af75714ee7878d5b","ssdeep":"","tlshash":"c480000baf08c8b300022c8caab3e32e00b8a8202220ce3802c8000002083cccca2800","size":32,"data":"","first_seen":"2024-10-25T18:50:30.627623Z","last_seen":"2026-06-05T17:04:06.151678Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7003ee2e79ad8feb6bf581f30cfe5031","sha1":"508ad6732e0bebe9bb244a987a1c361cd292cb90","sha256":"1d59fa8b0097de536d13bab5955cb03e898e2e2a7b00d38cc0bd855f66744bbd","sha512":"f08bbd5aec3d9dfffb25f5991fee9dd4a1a3589375c08e4158b44b1033eb8ad1f9c9c45f8891595c6cc17e1d54cf0c40c4cbdca2ec90f0eb70781fd8c674d2f7","ssdeep":"","tlshash":"c2b0124f7d82c01050500ddcc161fa6ce045726b9654cd8cc5e44471654cbcd090e488","size":102,"data":"","first_seen":"2024-10-25T18:50:30.631426Z","last_seen":"2026-06-07T07:20:42.693628Z","times_seen":2683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8ea3877ae0db4dd2c39f03c0b95939cb","sha1":"d1c3c9141d0521cc4401c29f81cf3f268065cb32","sha256":"acac378766e6365effed4521f0301e1bda13ab580b2a1fec957b82d4819083c4","sha512":"763be8bac55a4565239c21cf6bf367d2684c1db2bb7e7cb85d05317e6a8a0c19bfd8802afbe95290b1d9aec8b8661d6973caeab46e3c1a81c7adccce3d86af6f","ssdeep":"","tlshash":"00c02b250f313222a470c2f93c56feac0912806087a5890c31ef7836c3a720500210d1","size":133,"data":"","first_seen":"2023-03-08T12:37:01Z","last_seen":"2026-06-07T08:03:11.677408Z","times_seen":3603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d180e5edc020160081c750b37a9650ca","sha1":"5541a8db0b73b588ef8d8096deac227d49d13f83","sha256":"0b985295d52ecb47d69f5559a5c6c83f5ba9ed9d2846fd10b72e213ddf66b120","sha512":"f4e197dcd0828c46e126690e42808159483c5f49701afff670f84f8eb36463c7c670bcf48a00fdc230438a3355721dcc4a3a54835bd97215aa5dacb296614940","ssdeep":"","tlshash":"4eb01271c999e468c125f104e0c48bce26340189b7779f084538aa62508fe942c3c5c0","size":97,"data":"","first_seen":"2023-03-08T12:37:01Z","last_seen":"2026-06-07T08:03:11.678127Z","times_seen":3603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"def719758d6f28dfe17c275fe132f799","sha1":"a9975b46fc41150f7dc4243ae1db38afd5438429","sha256":"3fc58d4a3f03b0765d4bc0e05322a08619f97763e00d2c425e8988d0d588e286","sha512":"99bd72ec63514597ea2ebc37439920a554a8225ea7824c46a534b1147f9c0d8d27eda8385785dd9c24cd8a54d2050aae819a17972714095493d582ff1594d029","ssdeep":"","tlshash":"24c08cb31476604c8930c078703809185102ae99ff07aab1b9f53c62228d2e81ae47e9","size":161,"data":"","first_seen":"2026-02-19T02:57:11.028655Z","last_seen":"2026-02-19T14:52:12.755929Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f8e9ec089869466485725098ee73438e","sha1":"58b6f12e767e397a502771f7dda052a0579e08e6","sha256":"a729d8319ae51adc28cb8c352c50dd88575b7d05a0038d1a29ea56e2672fabda","sha512":"d248e3773a2385eaf906a947bdb018e80b62d190e161f50f073ea7c9954fabbc63690bc9223aa6b6cb1483731a44543d6cb3ba9b919cfe1ae843133679bb8fb4","ssdeep":"","tlshash":"48b0124b7d82c01050500ddcc161f9ace045726ba658cd8cc9f44421654cbcd090e484","size":102,"data":"","first_seen":"2024-10-25T18:50:30.629865Z","last_seen":"2026-06-07T07:20:42.69886Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"78ac2aa5ccc29c90a345c90aab40b442","sha1":"cac604932faa4add2955602b41de8a8bff362ebd","sha256":"53db339b0b80637f13dfc63813d7366c899cebe0db896602886ece619163d82e","sha512":"5c76abfa8f4091277643f4dad57c37d9eb71d33c9691f0e85bc82ac5f303d4e3da4937cbc2354e4d5c5d0022746d7c06f975f209067df2cefa55bd3827d892a7","ssdeep":"","tlshash":"31b01242d0575c0e0170c236ec485418474d4a7d9fa708010dc6ab5c0c99f1405e549c","size":103,"data":"","first_seen":"2023-03-07T01:06:53Z","last_seen":"2026-06-07T08:03:11.676707Z","times_seen":13596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0a3a0b592b9c285e050805307cee87c2","sha1":"125a168e24b2bd38aadb84cbb5f87f316b073c41","sha256":"aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23","sha512":"4097f05a9ce819914160aeba71fa11524f6b291a39b7c948509d756318b600934f1d195980df66bc7731e327979135bfcbe0e9ff3758d779a72481ed623cd3a5","ssdeep":"","tlshash":"a34000000000000000000000003000000000c000000000000000000000c0000cc00000","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-07-16T08:24:57.881334Z","times_seen":242448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6de30a424ddf05d953c938ca433a579b","sha1":"64a0ed447d69e38e42bbff0e63434d1d2b013ee1","sha256":"0b1ce380ba9a9d402c8e42e7b431a2ed73498acf353e4e7fa8b8e0a6c6d3b619","sha512":"cedf50705c8a47fb975096710c4a2d83affa9c7f3de497e1531506b8b407db552082589778f9de50aaa885881d6fb86aaca5f5f9883173ea68c8b23345533ea5","ssdeep":"","tlshash":"a1b0124f7d82c41090500ddcd161f96cd046726be654c98cc5e44410258cfce090e494","size":103,"data":"","first_seen":"2024-10-25T18:50:30.635213Z","last_seen":"2026-06-07T07:20:42.692696Z","times_seen":2514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cafekessabine.com/skin/js/org1480746227.js","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/js/org1480746227.js HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 07 Dec 2017 08:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a28ff98-782e5\"\r\nexpires: Fri, 20 Feb 2026 02:30:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492261,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7a8168e377e9d2f5e10939c3dc724431","sha1":"ccaf4397366ecf06c8a7464c7d583f1c0f39c994","sha256":"1d32420575078908e2df42afbbe65a312ecb738551785d0b98f5ece9ab267a3f","sha512":"9c78f276565349a450f678938c448e12cc9b302a4804ff2aa8321c2f2d68deea4190f5af63d29f46040b668d035afb8ad9a127f9d103b9a9a4990fb9e467187c","ssdeep":"6144:OkmCoIsyFslPfViYorBvGOZeCTIYpM+P8D6r:OkmisyFslXViYorBvGOZeeptP8D6r","tlshash":"caa4bf896ae170159733bb252befed08f4b6051b888d5e06b87e42d15f3210589fdebc","first_seen":"2026-02-19T14:34:29.598258Z","last_seen":"2026-02-19T14:34:29.598258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/fonts/fontawesome-webfont.woff2","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/skin/css/lib.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 56780\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 06 Dec 2017 03:57:58 GMT\r\netag: \"5a276ac6-ddcc\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-08-11T20:21:26.589144Z","times_seen":30666,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-zcash.e0621e3f.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-zcash.e0621e3f.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177c-1315\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4885,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0621e3f132f88ac5d4fe5dc005cf561","sha1":"0747109ee5cf812557b6af0b8832b5672f7a4460","sha256":"aa7c92f1c6cec8e53faf4e069e61f6d267078e4b464f71c3a040109d3e22e2d2","sha512":"273ff59a8975038eb4539488546afe2a421592eeec75ae8a3b3e23c28481ed29facf205ddc01d2cf83daf154a6a9be03634d766647284de5e1d8666af896c45a","ssdeep":"96:f8wbk3jtS576Zv3O8aMtDHbFO5SpF84BiJWeaK7O1FgogY8h33V:f8iR0v+8/tjbFO5YK4UpRcgogY8h33V","tlshash":"f8a198dc3f364cf9bc4093bedb1204e83441a9aa7d821a95d3741e0f34864649e98dd7","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.984376Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/images/defaultpic.gif","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /images/defaultpic.gif HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Fri, 15 Sep 2023 12:50:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650452f8-5690\"\r\nexpires: Sat, 14 Mar 2026 21:00:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22160,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 368 x 248","md5":"e9ca3b2b646796115711cf22c2a12ba4","sha1":"6a34cc8641a22fe4ed106ec3d51ee56fb56f83b5","sha256":"adbea86f340cd71472f2fe970788e628164a0992752d5a4842c48d48b8d24824","sha512":"b837f45bca6db85e9b3b39319df7e432bf91452c9d29e55230677dee197986c1c8f51f7d8af8a6c9b07cab301415d4db0128168b374b98cf9c2bc76ffc0d5e13","ssdeep":"384:6UTOc8W9cHmGXLtmIuFOxbZMuloCg2F9shDdbkD/ue8XveCnnK1:6U/8WMm4mIm6bZjgo9shB4D/ue8U1","tlshash":"95a2e0b900a1ad58f574203356081ae7de9d391810c1e9f3ebc577561cf297ec86bcd2","first_seen":"2024-02-28T06:42:56Z","last_seen":"2026-07-22T06:09:46.331131Z","times_seen":316,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/ajax.js","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /ajax.js HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 96\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 11 Sep 2024 14:01:58 GMT\r\netag: \"66e1a2d6-60\"\r\nexpires: Fri, 20 Feb 2026 02:30:20 GMT\r\ncache-control: max-age=43200\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with no line terminators","md5":"ae1625f00bcb78bf9e9c27ebedfe26d7","sha1":"9f0ee94e3bd3b2fb569441621e2dac7dd21d66fd","sha256":"09decd657ef4c873beb6ecc86f403132e47c126f870cbea1903d1ea7128964d4","sha512":"afc08f97d0908069e23ed2e17147bc922a452cdc90a00792d9e80f5294fa4269241ac071712c8ed241e1cc5cfaa0df8fc4f05ce050eb8b529123131e1cdd7fc7","ssdeep":"","tlshash":"48b012161c42fd9040280c9ac135c86460fc9114d110d94613fd041c1794fdc0c06c45","first_seen":"2025-01-23T11:49:05.260358Z","last_seen":"2026-08-11T05:45:44.522643Z","times_seen":2080,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/favicon.ico","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:01.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 28 Aug 2024 06:47:02 GMT\r\netag: \"66cec7e6-10be\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"7d10f8b2cff7a03cba6f516d3d6f9aef","sha1":"2bdbc5f465c8a551c4aa74187ebe7620741a9f9c","sha256":"5de760bb4cb68536a0bad4f5956624119dd77cdbed380aadcdc1030efec84512","sha512":"578dc4e479cf7926d6d2e3a25a47bf02e364f9e4943b67b604591b1a10bbceb7bcfe37b9f77b81e49a50bb17d237d956e30729a1b2f10ad456ce3984d63b8906","ssdeep":"96:nKS537Rs3otPRc3eX7piaSLkXPeJTjFT7T8HxoVot8tzeeerm9Dm9kL9nL9xeGar:nKS537Rs3otP23K7p6CP0TjFT7Tago6k","tlshash":"4f91d0ef52a682dff45406b867253658b1f6bfea61dc06d653c83c082a769001c678bf","first_seen":"2023-05-27T05:41:27Z","last_seen":"2026-07-06T09:51:41.575166Z","times_seen":259,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/medium.dab934d6.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/medium.dab934d6.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 227\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:35 GMT\r\netag: \"65fd177b-e3\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dab934d6af4d966a47477f800d8cc13e","sha1":"d8e041ee599292a34c6bd228d3f78a48d98d5d12","sha256":"8798af34123bdd67eddb715847aa2130aa145a36c256df060a27a08f6bd9a95f","sha512":"dafb31da6c22197d4531bb04a21db8a36377654233bb369284143cec4c08e56c5557e1ada45dcb93e20286c2a07cb8d2e5cd0a4125c3adecd08903fbe1cf8140","ssdeep":"","tlshash":"e4d097e888480c048f68c699df2e3d6a112661d3479c441fa0813202f846aa13448438","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.962221Z","times_seen":1794,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/images/1505115294665.png","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/images/1505115294665.png HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 06 Dec 2017 03:57:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a276ac2-172a\"\r\nexpires: Mon, 16 Mar 2026 07:22:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 40, 8-bit/color RGBA, non-interlaced","md5":"611e0f351e0926723ea3a8511c43d3d2","sha1":"1407b5ed59b5f33836a1f50c21961dd7119901f5","sha256":"c8ad340c70bad416bad380fc0d660b9c450a809a636c41c563c10313c7d6a395","sha512":"3ceab36676140addcb7c54f2e924fbc68a248842095cea5ff70733499bbd8f5b29ca7b6f3e24d33162748743ef940d0623890e8b8e3924776a152a6d30e38a23","ssdeep":"96:pY2ajWkPE7E3mTkcGxILQsKKKDJ7GJYus9NivQHT+IVl68dYzz6Fb9a3oIFaaA2+:pyjWkR3mtGxILHaGSuQNivQH1/KzG9Fd","tlshash":"e9c19e68bd04ce03f11572c557823e5b65f1a40086b6f07ca9cdeb394c2a0b9e721fe1","first_seen":"2026-02-19T14:34:29.602758Z","last_seen":"2026-02-19T14:34:29.602758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/images/jiantou.png","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/images/jiantou.png HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/skin/css/4100.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:00 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 06 Dec 2017 03:57:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a276ac5-a79\"\r\nexpires: Mon, 16 Mar 2026 07:22:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"e7b8ff94e7139b5e90ba2c0ca095e57e","sha1":"2f01386aa7f06ffa4514f9e34ae19032731b7c31","sha256":"627a0aa0c05cadc85ab31608ab434e1f3c7092b0b45d35e1b94a582896df3e3b","sha512":"d401fbcb74ae5eae0f95b208e63e23ef79a9652c60fa9adf1c15e816ba1c4d24de1f3a2864326a34d0af2717e484eeccc110475395da0a5a0be296a1f2f741a6","ssdeep":"","tlshash":"5951520f7a0cd4576405b831a89e80b5b9995940c9f2e58bf7c188930fed21ff47aae7","first_seen":"2026-02-19T14:34:29.603754Z","last_seen":"2026-02-19T14:34:29.603754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/css/fonts/GOTHAM-BLACK.OTF","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/css/fonts/GOTHAM-BLACK.OTF HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/skin/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding\r\netag: W/\"66cec8bc-7cc\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"bf48b709b5d209d66eb568a2a50af3c5","sha1":"cee51d7c195cfc71c39c039c9b323acc76dfcaa7","sha256":"bc9a8ee5b72979a66bbc5246941bb6340d3135e0b86c779741a087dabbfa6a91","sha512":"6cd797fb72dcef1ce2d97e652461dc35ae3b5a27e8f634a112e7a861818cd6010df75a10187366b8b8c6a4bd566ee855ac048205ea55be94b2154bc32f4d8d56","ssdeep":"","tlshash":"1a41942683901313b07bd94279f2ebd67a2145cbb6420a7cb97129f7dacd06643223dd","first_seen":"2024-12-09T12:26:21.702956Z","last_seen":"2026-08-11T05:45:44.523706Z","times_seen":1522,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/alarm.a0de5c93.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/alarm.a0de5c93.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 537\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:32 GMT\r\netag: \"65fd1778-219\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":537,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0de5c93f3b0606b03fbed44264a1773","sha1":"1b251f8f3aaf8e4118cd6aca1205f88bdf76a9d5","sha256":"53dd292857091700369fceb24f1aed8bf0ca87556e9cd3466cc3a4e7d0f15263","sha512":"4eaf9a604f29b55106caba0f8833e2844f24be44c57b8b6edd8e9221f239abdd0c4f3434d38b531bea1cffc55cc7df53a558967698659692cccf439dfd3c8cc5","ssdeep":"","tlshash":"a7f05094578c9e7cb7224f24db1032b6207b31373b5d9258d863643b216411d683f9fc","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.969552Z","times_seen":1792,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/css/fonts/HELVETICANEUELTPRO-THEX.OTF","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/css/fonts/HELVETICANEUELTPRO-THEX.OTF HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/skin/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding\r\netag: W/\"66cec8bc-7cc\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"bf48b709b5d209d66eb568a2a50af3c5","sha1":"cee51d7c195cfc71c39c039c9b323acc76dfcaa7","sha256":"bc9a8ee5b72979a66bbc5246941bb6340d3135e0b86c779741a087dabbfa6a91","sha512":"6cd797fb72dcef1ce2d97e652461dc35ae3b5a27e8f634a112e7a861818cd6010df75a10187366b8b8c6a4bd566ee855ac048205ea55be94b2154bc32f4d8d56","ssdeep":"","tlshash":"1a41942683901313b07bd94279f2ebd67a2145cbb6420a7cb97129f7dacd06643223dd","first_seen":"2024-12-09T12:26:21.702956Z","last_seen":"2026-08-11T05:45:44.523706Z","times_seen":1522,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-etherscan.11435bbf.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-etherscan.11435bbf.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177c-2c12\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11435bbf6371a8947396816c6a233a10","sha1":"46bee002fdc5ddffc54404b1f8a19f35cb64b4d9","sha256":"cc0f2d9608f1856adcf276174bef44b2a2b76276dd547068ba1cb9014405721b","sha512":"f072c969248bf3c3361aa77d6a36dcac9bc0bf78b30856e47b15c6fc80a69dd64c36c8463945c38082a032513f8bb1819323e862563587685ca08549b35d63cb","ssdeep":"192:f8WNPeQpXC/8tv3Y74wBx5IZoIwVqcC8wGPWwBjaQCVgixp05n7oB:EemQpXCRZD5L3kujaQAp47oB","tlshash":"8f32a4cc6b3a4af8bc85f5fec70544b67802aeae78414958c3b42d5d284442c9dbddeb","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.967728Z","times_seen":1872,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/css/style.css","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/css/style.css HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 03 Jan 2018 01:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a4c35e5-a369\"\r\nexpires: Fri, 20 Feb 2026 02:33:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41833,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (340), with CRLF line terminators","md5":"6a19df2eb74b5824f3396a17cd5af6f6","sha1":"113b4a6c8c76964d63cb38d1d69975b7a1da723b","sha256":"c8af3dfc42adf82ddea49d73a987f538dab888d097d1dee1bf8c32fafdd7a733","sha512":"10acde22cca2c632be4e3b580930724bc3b34a7454ce94f93f9db5b00616a05c0306c4b8927ba192de0308aaddf880cfff910f9e51b0a68d38295fd98928beac","ssdeep":"768:4szni/QqOlrxAo39fLWR3Eyeej/5g6JmATAPwoQTG5AkSrZq0WzNThWdWsU6+bRW:4szni/YWR1eq/5g6AlpDVuuSqKgRxU7/","tlshash":"1b132169c550708ef303bbbe7bb89f11ee6544b1ae4b217db2b1a65cd38591827231c3","first_seen":"2026-02-19T14:34:29.606284Z","last_seen":"2026-02-19T14:34:29.606284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sat, 04 Jan 2025 06:56:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6778dbae-756\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1878,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1574)","md5":"f469c7c3cd4f5929fab6ba58735ac883","sha1":"f89ef948257a783046250b8535b8e2c5e8162423","sha256":"a8d494f50353fdf2652b85215f83274c73f582ec0357ef4bf87d7e4d99d7de68","sha512":"b354c494ad025d3c8579b89c3221a5e6f7c7ad3408a42ee3b932840a486d6125d1cc40d0c07f4dc182275a730f5624333b51e2e702976a4daf67ad3461ceec92","ssdeep":"","tlshash":"af4110729c10958d6931af75bfb8b28dc4dddb29d5749c40a0e282ad8eb8fc84a53d13","first_seen":"2024-07-11T22:37:17Z","last_seen":"2026-08-04T01:10:51.017109Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":1963,"timings":{"blocked":828,"dns":575,"connect":141,"send":0,"wait":306,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/images/1504076585336.jpg","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/images/1504076585336.jpg HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:00 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 06 Dec 2017 03:57:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a276ac5-19ee4\"\r\nexpires: Mon, 16 Mar 2026 07:22:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106212,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"57208efaa53b7cf181f6015d1f70a3ee","sha1":"2a1e1336c42b65e923504d8a8165a7ecd3b3dac4","sha256":"654734a4118ff35f027a023c66e2009dc705f0073d86112fcd1b1d280142c04d","sha512":"679424acd7978d5d22dce6aacf8c865e0e86348d74eb7fedea593a3eb6e8fe7f9442febd845dc4b88f589d1a1c2f017745f2ea709db392554cf0ec889bc5c50c","ssdeep":"3072:5x3JLQi4IJ6CoYc0Hbx5bcKQNQ8af69zBfFyHORg:5rv4wH5wKV8aS9zBfFXg","tlshash":"e9a3122685c3b746d8c8177bd22beb063d293ecd6c81928add92cc77f49c352ba54463","first_seen":"2026-02-19T14:34:29.607784Z","last_seen":"2026-02-19T14:34:29.607784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/js/chunk-vendors.72f83685.js","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:01.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /js/chunk-vendors.72f83685.js HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177f-eab5f\"\r\nexpires: Thu, 19 Feb 2026 23:15:24 GMT\r\ncache-control: max-age=43200\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":961375,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37062)","md5":"f98c3f2e30ab7e16271e08cdddd6da27","sha1":"bb1d30f4ef4875a81cbd9c93f05de583aac06e0f","sha256":"cd8bb92a826b0ee3c18b95ee744a5768e34753c866a1a6c15e51d8e874481c58","sha512":"abd215263061d554b699b287c11735a9efae0f0dadb5c9c735167d5a3845d88454c92a1f69d6ca1d372e163817114eb06dd659987afc0719f1d2471460799fa2","ssdeep":"12288:0r2fW0/CNOHtCxSdztgX9eTjDkJI7kcPNQmG2hFm/3e:0r2uV20caXAPYUkcPqmG2hFm/O","tlshash":"2e15195cb244a1bc5ab767b8853b1012b36e95ee70948324f36ecce076710dce2a7d9d","first_seen":"2024-05-25T21:10:48Z","last_seen":"2026-08-04T01:10:51.044223Z","times_seen":1887,"resource_available":true,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/twitter.f6e27d44.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/twitter.f6e27d44.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 602\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:37 GMT\r\netag: \"65fd177d-25a\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":602,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6e27d442f561af8836f3287fb52a1dd","sha1":"ca0199c3511b03e31788de4f95356c2fc4c75635","sha256":"c41461eb9d060dce45b8a6770858e8f3f015dec9406978a896f98b60977da549","sha512":"0fa733c1b18324271946cede4bcd7c74661ea22c07f9c9395df93dee2248974ad519aa2bc04f9b402eb23ee7f8b315477aa7da5da754ed4f0c43b857ddc361fd","ssdeep":"","tlshash":"38f0e1594e9e2ed4871fdfdad63721b6701b78f11bb6c2ce81a1b25264a4cfc581cd20","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.957467Z","times_seen":1792,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/defi.756b4476.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/defi.756b4476.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 230\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:33 GMT\r\netag: \"65fd1779-e6\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756b447638a2d0e0015f74e793f4e52b","sha1":"56217b9dff3fc5358fd781af5548fef6c7a8c3c7","sha256":"578ac20769134d28e954937ff908a499218650f34fa7699eb60991bd2c1c8619","sha512":"939294f043dd1243eb022fdfc9d0789855672a65f09c01573792d0cdc2c87cfbdc2a7c170524f45e9f300d78d23203ad0f856c84c929a8fd28c8e7ae7ccba484","ssdeep":"","tlshash":"7fd0a7bc696c4d058550c068a12b79b7a1de11c5c3860291f0c02a0776559b730013a8","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-04T01:10:51.041578Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-0x.75c21f2b.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-0x.75c21f2b.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177b-17bd\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6077,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75c21f2b7b83b30a26e07efa9995c741","sha1":"59d18dbb3548d4f3f4badcbc14ac33d67d83aa23","sha256":"5046c5408029db86fa360fbec102839d16e920ddaa52f578b3cc250316506119","sha512":"80574688c969adce0ca257d18499b9279f2aad57aa23f801c4267426e07bc49ba7fec1ac14816e283c474680402fd1b1fe85af1ec270982ba7d0f151df49126b","ssdeep":"96:EyivL0LNnuG/X9SWPO1tzSnWmqhG3q1H+E5eUkankRhl3zz9D60:EyizG/tv0+nWmqa2+yfkjRhln9D60","tlshash":"5bc196dc2b748df8b841a7fadb2a08e63147e4fb60824730c394ad09795546dcd99ee3","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.950271Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/tokenfans.77b4ad2b.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/tokenfans.77b4ad2b.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177d-6e8\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77b4ad2b85f6f4a96c42993646c55088","sha1":"865d2cd44e47bf24c1e1506c154594080a8a17e0","sha256":"a4016ef09c6ff041f9391ed051d0d931f7ed4410538e953b068d8937ef9b1025","sha512":"17c182bc93a0bf5c8201184357a5c367b2854368374b6c356ed6a1600297477b2c6f2c0794f12886e9accf65597a19aa1a3f28d42c09eb0cae4a93296bfd1f0c","ssdeep":"","tlshash":"76316584d3ecfac9a200a3f44774eeb0766f15e63515c04587993d5bac0295c2cba8fe","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-04T01:10:51.009385Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-ethereum.eccb8895.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-ethereum.eccb8895.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177c-25dc\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9692,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eccb8895c4c4a30c4dc7cf760ed716dc","sha1":"c372a5e54aad04520dc33d54fb620d0f2832a1dd","sha256":"c1152187cb44ce6c94f077fc12eeb6a5e9f4ac6a0de37d3daa152ba1a85955cf","sha512":"a69f12180ca4219003bb696e3782be885554b122cc2235b2f59852a329de73feb1ee073e42c58a059ac5459d625191bd5c26985f015fa7e2921bd66792608940","ssdeep":"192:jF5f0Jy+wEq+/EvYE1SUOdiCOahHBggiUNGpeyZLSdqHXFm:7CwEvcvYEQwCOjgUpeEPHX4","tlshash":"ac12b6dc6f3389fcb8c5e1fedb1554e836549cee780686a9d3782d056c42928dd0a8e3","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.983669Z","times_seen":1784,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/css/chunk-vendors.09af4a6b.css","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:01.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /css/chunk-vendors.09af4a6b.css HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd1781-7290d\"\r\nexpires: Thu, 19 Feb 2026 23:14:26 GMT\r\ncache-control: max-age=43200\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":469261,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65422)","md5":"7501f5604906aede27f9621259b31ed5","sha1":"4c494f472616ea88a4ab2ddcf30e77c909e21b2c","sha256":"57f23552c346bdbd11b2b0cf10a60b7fc4537fada692118fdb6358072778cfa1","sha512":"a4b320d3fbcb6ec992e25632edb281178cab786e2ed66a502fe940988b1c66ef8c64e0b840372669c1cf79e4e35cab25cea8e141f865569773372acf354f7753","ssdeep":"6144:ZZcxcZldl801XxjNg5p61Btd7jcpAitAGQxwT:ZXh7jcaOQxwT","tlshash":"66a497686b41203de5ebc736e4d1bc595931ce13952f9dbff3a07e184b85a8a01e3e06","first_seen":"2024-05-25T21:10:48Z","last_seen":"2026-08-04T01:10:51.013248Z","times_seen":1802,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/tj.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-6.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:15 GMT","end":"Sat, 02 Jan 2027 02:51:06 GMT"},"fingerprint":{"sha1":"71:AA:B2:AB:13:43:B4:24:14:D4:17:18:6C:6D:8C:8A:EF:6C:D2:1C","sha256":"9D:B8:09:0A:5D:43:59:9A:AE:6C:F3:99:ED:13:80:FA:DF:21:7D:65:AE:F9:B0:47:DA:3F:24:41:84:58:15:5A"}}},"request":{"raw":"GET /tj.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 14:34:00 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 69971F589A0F833731BD3A43\r\nLast-Modified: Mon, 12 Aug 2024 07:31:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12654278826270211217\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 6NSO1PhJ06U34CJdMjAgjw==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (554)","md5":"e8d48ed4f849d3a537e0225d3230208f","sha1":"4f8646de1709593d2b4ab56c6caf7c0fd1177fbc","sha256":"98ebdd779e3e1bbdff110cdb3f1b64499478553b072ae12233727b0e7ab2cbb9","sha512":"a18fc25e80f3e39a682cea479fe81c20f6f8b0ebae9ce2e84d9af08d5186bc1cf9e89e14c52580ba0d962291ae291cbd8ba74d42894f157f6024b44af8c5bf58","ssdeep":"","tlshash":"4211c09e7c05e25467973c7a23b7ddace9ae0032100dd80665ebc0ed6d29ff90126b4c","first_seen":"2024-12-07T07:30:44.931892Z","last_seen":"2026-08-09T07:04:41.546511Z","times_seen":2026,"resource_available":true,"data":null}},"time_used":2450,"timings":{"blocked":1052,"dns":53,"connect":332,"send":0,"wait":336,"receive":1,"ssl":673},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/arrow-down.7a838bb8.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/arrow-down.7a838bb8.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 207\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 06:02:33 GMT\r\netag: \"65fd1ef9-cf\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"120e5756289bdf45cd9f51442b1224c9","sha1":"a53737a735a6502ace15f6fcaa404f7c42abd483","sha256":"f22a34371e6b2d446921f8542f85b81a4673d4ea2aa5f6bb759037b36037632f","sha512":"f49b1fd7502f0934e972ad635159cb5c487611f75db00c246e9d70895f815204fa699e4890b274f641d560501b19a8657374712b519bc37a3a2ac1512e57877a","ssdeep":"","tlshash":"bed0223bb32ccc1cb5124528e3ba367150f3109308cd2654d8332131ae054afbb2bae8","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-08-10T16:24:43.919653Z","times_seen":2787,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/banner.ad9792ea.png","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/banner.ad9792ea.png HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 20 Jun 2024 04:24:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6673aee4-228eb\"\r\nexpires: Fri, 20 Mar 2026 19:55:03 GMT\r\ncache-control: max-age=2592000\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"31b2b7726829be089d61a1b3238892f8","sha1":"419ba2f64dd5f7bd35c7f440fe993c6d16f764ee","sha256":"44a360e3f1753981cd79609f2a238f58648d2c132b958647f9bda8922d1c507d","sha512":"7dfd577d2ef15783b23e42442d4c8eeccab8a36ae37ff9aadddc404acb70bd1993369f8c028a845b9e699dcfa2b9c10512fd8c8db42285f0aa3740f487e02eb5","ssdeep":"3072:Bwm2VYh1sYAjd/J9EYPfMb8eM07+TyKwSl7mKLBpWcr2oYXE7nmWJAc:BFf1s5xCbBGwsHLBzr2oZ7mWJz","tlshash":"f9d3019939aba65edc1f147ab5b02edd0fc209a086761efd7433609adf4922cb410f1d","first_seen":"2024-04-19T06:46:35Z","last_seen":"2026-08-10T16:24:43.892914Z","times_seen":2224,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":683,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/css/website.0b83b754.css","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /css/website.0b83b754.css HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd1781-2128c\"\r\nexpires: Thu, 19 Feb 2026 23:14:26 GMT\r\ncache-control: max-age=43200\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135820,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"03936f49600d8cf124513b3a6fc4f667","sha1":"f670eeb3d8aaca15cade67fbb8e258c2ac3d1e28","sha256":"0a70832e5397898dee0bf00d6a7266704d707a3fd7098d83452e3efdc3abc651","sha512":"6490d274d162cf5beaa932eb997849a8bb576922854c99ab36bfb54fe0b124743547d3b24c23ac008c1c6265a746261f85e3da9a72000df83e9d87fe5a1a3fac","ssdeep":"768:GzOFI2zL40xJfTd5LzG5J0VHHCw4zX74iMgmDyafXf+F7LKmjMWVDSV+Pc32Uj1x:PFI2zYMy2HFXXqYld8bCirjaZ","tlshash":"d7d38621796c7838607fc17ab881388e76207763d36751f5a9a1261ecefb283772634d","first_seen":"2024-05-25T21:10:48Z","last_seen":"2026-08-04T01:10:51.002501Z","times_seen":1791,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/github.d15ef125.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/github.d15ef125.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 699\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:34 GMT\r\netag: \"65fd177a-2bb\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d15ef1255f17b1c47e4dfc3649cb66e0","sha1":"6deb5c0f4906414d811170228fba940d338861a7","sha256":"69b686110472d3bfaf623d6119a759446e860cf926fd1c8ac960bae27b70876e","sha512":"2b9897742e662cc475a84414574c5afbd9eb38a79584aaa41c70d9f9d6f4bce7249f40f5157e2f9ac998b70945901260d65ec56f42189190cdb39dc25e4b4897","ssdeep":"","tlshash":"1701cbac67e033606d82d36cc0a838f0f28334b32faac5a4e045e843a1018de68d8810","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.959648Z","times_seen":1793,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/imkey.18b86155.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/imkey.18b86155.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177a-3460\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13408,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18b861559ab8aa3148ce43dc01d11573","sha1":"d395292dc3e18fdb6461a66ab7be0cc9ab1bedb9","sha256":"373387ef06b85e40af255434c28f44d75382bf7e6e2a4a0feaa1e31b17eefe03","sha512":"dd6bf0aa9fd248efebaa4ae19cfa7d24cd5b4327dd08e265ce8bb82997d111e508b663f7b314ea2b530b7a1ddf42b076f04fcad231605050c775edd7a6a17dbc","ssdeep":"192:MCm3sy/n3XzoTytnS5Qbjz9/Jnp+ujAAb8er1AjuotjcoFJBn:Wc0ZtS5QbruA4e5AjuotjcoB","tlshash":"1d5277dc1f186ae895c093eeab2590fdac2bd0de9688d514c2043b1e748747dbc775ca","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.97297Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-kyber.b4835e5c.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-kyber.b4835e5c.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177c-4eb7\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4835e5c97b6a09992afdcd239855528","sha1":"2e395c382b28709831349f4b4edb15bf4aa27093","sha256":"188be37a0357a83116eb0d45a49351cdc0634e9bb22d9c68b13c1dfe8ea213e4","sha512":"3ede3e52bd783a2efd4c24111ff9fb5a30d8259681341ec961fae7133dc3091b550928d86efd052e7c748fbea6b89641ad4421a0c0941f484b947f48e0f39fb2","ssdeep":"384:LSwOe+bMOO/Wb8pyUUPT+KsazMGva9vu5PbXpOpE3:LSwOeuMOb8p5y+rVkKeP1Ou3","tlshash":"4a92c3dd2b754ef8f88af2fed72210da341668ee65808f25c3b86e09358246c5d49cd7","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.956098Z","times_seen":1867,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/app-example.50dc94f6.png","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/app-example.50dc94f6.png HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 06 Dec 2024 06:58:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6752a0b0-eaa1\"\r\nexpires: Fri, 20 Mar 2026 19:59:40 GMT\r\ncache-control: max-age=2592000\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 316, 8-bit/color RGBA, non-interlaced","md5":"365c7008fa7b2eb36b273b2d493bb887","sha1":"1d9283eb6ca3a2aec73c8cc10a5a411c81c22f86","sha256":"fe312cdad1ae0f17aced721beb74b8106cbe5dd8a958cbdd02c0e4e8224f38b9","sha512":"1570cc1c36afae0502cf903c19a494be001f0f0ab56c964a0e9c56506948c3db7644cbb2af5484a27fd00f1d70dc5c2bac647e975cc4f5a5c7615b8b5b4daab3","ssdeep":"1536:cHIdrhsQTMN4s3w3y0zgs6tXmI0NxUIu+73aoF5:Rdr/js3w3y/NC7u85","tlshash":"1f43026515105883dff6a099508a2fdeb9ce13bf028734bfea920bb42e73b0f1765446","first_seen":"2024-08-22T11:11:23Z","last_seen":"2026-08-10T16:24:43.894508Z","times_seen":2087,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/globe.999173a1.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/globe.999173a1.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 698\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:34 GMT\r\netag: \"65fd177a-2ba\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"999173a1509726ab6a4235814220de28","sha1":"714d125e87a634d831d0ef2b5e79f0221c12db8b","sha256":"f70b988ac4377e2dbbb5b2999d12146bc33b555dcc7765f8e619dea59db72038","sha512":"7dac0c1014a72363ba55a29752a9ab054592d3cb77480b335ecf10fbd7720dc23cffacf6b357ecea19b9091c74c657cc7bcd5147e3193c3e405597fc99184539","ssdeep":"","tlshash":"7901766da36ece3d78a31774c30232b661e7126349483395d432e135a59189d7bbbecc","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.963203Z","times_seen":1794,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-eea.71971a25.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-eea.71971a25.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177c-237c\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9084,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71971a257a4d633037a160c6c0892387","sha1":"60c1dd19606f7f88de2a8fcad00f3a8b9609dfcc","sha256":"6ef05c6c3bfa1b97d4389b56bc9cf707da69e93dd3573bab527b4f4205dafd09","sha512":"1a541283512a1d1c6a4038ea3cf427cfd6f4baded34722914076d80ab6348c1fe7510013d5244693eda87f7cdb9925a96e8a881b388e5879df65ce7ae58ce253","ssdeep":"192:OxNHjqOb40KhtFepr7T6Uuu+YoPl2Xwa3zbI2+8EzJLoH1ME:YNHF4Nhtcp3GPlubHKLoVME","tlshash":"a112f8d817f584e4fe85e3fae6297499750694fbd680c744c3e87e19384222c5d4eec2","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.973712Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/so.js?20240707","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /so.js?20240707 HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 421\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 11 Sep 2024 14:01:58 GMT\r\netag: \"66e1a2d6-1a5\"\r\nexpires: Fri, 20 Feb 2026 02:29:30 GMT\r\ncache-control: max-age=43200\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"11f047e4fd3353cbf9658c4c5c7dbdb7","sha1":"7ed045b1c52c5a8a0a5105e044aefea558f89362","sha256":"f2a6a22292aa9423591c9ae69b54ac320a0d899432659ec43b664d28075f5288","sha512":"ac530543a97f278a9c7907b03ea2c17c380711a17816c3f9852b15857100e26da144f2e62d1d15dbbca68cdc7e4c5f6da4549860fe1e7512d131d11ab052cd95","ssdeep":"","tlshash":"3de0305e6d52ea20515009ede571eaa8e0bdb17afa55ca5c85e948241588fcd0d0ec44","first_seen":"2024-10-25T18:50:30.62217Z","last_seen":"2026-07-06T09:51:41.564706Z","times_seen":141,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/images/1504149457291.jpg","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/images/1504149457291.jpg HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:00 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 07 Dec 2017 07:36:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a28ef78-214d4\"\r\nexpires: Mon, 16 Mar 2026 07:22:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136404,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 460x480, components 3","md5":"004526cef4807845334240a9fd95d420","sha1":"1cb00e54ac9a9ea04557ed8ce37b297a823986ad","sha256":"d5cd758f85cd83259fdc9708de5097c6f768512f4daedc977e14c8ab71df5b04","sha512":"a93bc1b42d16572d6cf8c1f7614c9cd246010c8b7d77f75f2b719d67554e2d5484f00321572672616de1cc7df33b5d416814a84db6fb82448f2e8a3c06ed0316","ssdeep":"3072:4tRSeifmopENyJuVV4386WYfjQG+3HSN+/yFZPSW:4tfifjWN1tIfjd+COyFZPx","tlshash":"79d312f66ad46d966ad3d8cc9b5612bcc86478c372df8e262837db4d35f4263004e90e","first_seen":"2026-02-19T14:34:29.618955Z","last_seen":"2026-02-19T14:34:29.618955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/business.9d8a656b.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/business.9d8a656b.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 839\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:33 GMT\r\netag: \"65fd1779-347\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d8a656b278cd56c842d2b6c156c99fe","sha1":"ddfb2873368332704dd11c91a1c3a921076cffa6","sha256":"62b86e664ef86a4e634f871a655bdaff281f07eec50283f09fc225725b13a24c","sha512":"b39aa96b642b27e51371597bce784b68e514fd0bd93abf0c036c478b5cac651281d4af9e16f87375142afcebbdb2d199c107e9de62893c77b82a839a7e4e0ff0","ssdeep":"","tlshash":"1701ef65934a1d3cb303d3b4c6053770622a58615713b210c2733cb7a4f700c7abb9aa","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.961344Z","times_seen":1788,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/css/lib.css","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/css/lib.css HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 07 Dec 2017 06:40:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a28e24e-17a7e\"\r\nexpires: Fri, 20 Feb 2026 02:33:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96894,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (305), with CRLF, CR line terminators","md5":"97823c8138fc2199d45365bb35d232a6","sha1":"a8f012b268ecd5a6c692724cc9d13efdbeac944b","sha256":"4981631b201ac5ddacda32dbfe639cae812b55a83816a34344c2c1d483500cc4","sha512":"7f86972f6dafaffd348ca5c242487288b5f9eff5bea1ed9d62d89743862af4dc7f254972a86e867c80130f63f2cf133b544db3b021d3c3e5c32eaa2f48dbadef","ssdeep":"1536:iy9iMEXlm8th2WbKBlOcwKwGw5wqjTwLw0wIwU:iy9iM+lm8P2WbawKwGw5w4wLw0wIwU","tlshash":"c69347ee494551c90353de5693e89e540b2c82bbad210cdeb2573c0e9bc7b8877c639b","first_seen":"2026-02-19T14:34:29.620392Z","last_seen":"2026-02-19T14:34:29.620392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/css/app.43874d60.css","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:01.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /css/app.43874d60.css HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd1780-a2b5\"\r\nexpires: Thu, 19 Feb 2026 23:14:26 GMT\r\ncache-control: max-age=43200\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41653), with no line terminators","md5":"1233f1606ab2a281b898d03302622eb2","sha1":"cc554f4a401b68e53b8c499557984d460641d5f7","sha256":"53b41273fab622eba8d934ba8c0156ce0dd9f8f80c5ddf463c198351038fc990","sha512":"94ff2c796a6437961aa849067558bb4aa363510b9ae983beb75f6910a478a0d6642ff0653997423b23d02192a3c0d01aac51ebac94448aeee84cf43ed0b35aaa","ssdeep":"768:XTosIaPkIdsJIbIIExNuGZEOR+8f65WKmXjZFsOMtSIYLrou7S+w4tJCEjlKQ:jtPrsk4NuGZEOw8f65WXXjwQKQ","tlshash":"8813cb107754343df1778b6aa4e1ea6ca730c543c25785efe352b914cae61a7322bb8c","first_seen":"2023-06-10T15:06:02Z","last_seen":"2026-08-04T01:10:51.019513Z","times_seen":1893,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/imTokenLogo.8964e98a.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/imTokenLogo.8964e98a.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 20 Jun 2024 04:26:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6673af6f-24de\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9438,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff362ef3dd8481a8b6507fb545025cf8","sha1":"a728dfb3d393258924ce63dfbc3f638b59d3330a","sha256":"690e08204f91ce6958a804b11ee08546156e4b5dca35f0b1ce00dee6266156b2","sha512":"a25bd09b8e65b5188bc5efcaf54aa7a215217cd53f8e92337c06edc96cf82b3e116e7771ea3ed36ac51f42d869f018178f0429e15044e8a43cfe72126643124e","ssdeep":"192:LJYVRfONtbZ36T9/zp+beh4ciRBi6m/Z1BnMg+K4jnFJibZLI2R9TZx9R:sRfONtbZ36PPiRBivPBMgxKnFJlE","tlshash":"681286f13aa463f59503ebf8de2754746a2b38fabfc54ae7c190ac499422055cdc9cc2","first_seen":"2024-08-08T18:51:51Z","last_seen":"2026-08-10T16:24:43.876266Z","times_seen":2240,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/tokenfans1.eb9824bc.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/tokenfans1.eb9824bc.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177d-683\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1667,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb9824bc9edacb0b9e4172b8323ea86e","sha1":"925f089a7bda4735a826de7cc71101cf30e70a6d","sha256":"fd968ac02328d0513537ca7ae60f986595d0f48d248bbe4efd5c52c9048c3034","sha512":"a8c03ff4fad9d81f8a84da5ddeca2fb95d9cb230b0ac720c36af171d4dc17b82013f604342f5426a49f4e39d0750b1178a64549b7e0f388f4d656ed527f9fc8b","ssdeep":"","tlshash":"d73144e6e3c562d05647dff5d63419e1a9df18f73ba5cb980266175c9a8020c494cca4","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.97053Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/js/jquery-1.11.3.min.js","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/js/jquery-1.11.3.min.js HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 06 Dec 2017 03:58:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a276ac8-176d5\"\r\nexpires: Fri, 20 Feb 2026 02:33:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-11T19:36:59.80929Z","times_seen":18594,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/win.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-6.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:15 GMT","end":"Sat, 02 Jan 2027 02:51:06 GMT"},"fingerprint":{"sha1":"71:AA:B2:AB:13:43:B4:24:14:D4:17:18:6C:6D:8C:8A:EF:6C:D2:1C","sha256":"9D:B8:09:0A:5D:43:59:9A:AE:6C:F3:99:ED:13:80:FA:DF:21:7D:65:AE:F9:B0:47:DA:3F:24:41:84:58:15:5A"}}},"request":{"raw":"GET /win.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 14:34:00 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 69971F58A69F1F3432DA747C\r\nLast-Modified: Wed, 18 Feb 2026 19:54:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13003320123770805109\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: T4271HXLQzRLZwwv2sxrgg==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2981,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981), with no line terminators","md5":"4f8dbbd475cb43344b670c2fdacc6b82","sha1":"81f53e6c5bbf81c9f4853f3f04bb028de5637d5b","sha256":"df7c4d1215e1e7dfe91bafa2044a5f4b33958d974a30c3cbc23582824f8ea678","sha512":"45fc0fee6343de678c30e4748076fbb0c8011680f3a9949ba6e94d5f0ae70a50d108e657d53d64291ef5014b5e2b4348c83a7e24498372f26284fa23965bc54c","ssdeep":"","tlshash":"2f516edc77e6e24f7b8c5da3fe05afda01b5857ba0d17243c79cb98d20e920ac668044","first_seen":"2026-02-19T02:57:10.990158Z","last_seen":"2026-02-19T14:52:12.679804Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2166,"timings":{"blocked":972,"dns":56,"connect":237,"send":0,"wait":213,"receive":1,"ssl":682},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-cosmos.9c72b55e.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-cosmos.9c72b55e.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177b-16ab\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5803,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c72b55e74e0e611c924e4b51687dbc8","sha1":"2e2b75c57289b5d7013a52e536a6611c93fad256","sha256":"f2dc04a3223bcb855780d1afb1dbe2f84d576c48090e39a68f70c67f468f2f7e","sha512":"b6a5f272a8fee153a8d4a56fb4e55f017fe75b1e5d3518fa64ecc28ffcd5a332f858b91c29d3d1a9116072ee47d7b1d81204e7492932baf4137d64f6feefe028","ssdeep":"96:f8wvPA6sbKbFTDajm6iyinXBd7ycdZgTz3KA7zIGcckwHWt5H27T9B4W:f8bKhnajRiLb7yr+Kcckwm5H27TH4W","tlshash":"a9c1d8fc7b7556f4b881d1fecb2050f83a51aae7b8020924d3a81e0ea88297c5d58dd7","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.965989Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/wallet.97a18288.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/wallet.97a18288.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177e-2095\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8341,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97a1828805fecfdeeeb01f9439361c68","sha1":"e0443b70bde9a926b982696dd2c309e174d39e0c","sha256":"7b774ea72107b78f0ae489bac190eb18c6affba7f0e3b0e7a356e3949b3af5de","sha512":"229fd1e7e8f6f532bf5932ea113727feb59844c24b36f9d4db58e99efb20f3d01176e414dc12b4ff35df48ad096abaaca752f757cb9ed067f1a7c0c83a9367f8","ssdeep":"192:DDSlNrVdI4RbsCpIqYW0w3Vx8WdiAcWV5dC9:eVVq4cqYInxpV8","tlshash":"5a023ecc07195ce4ded0c3f9ef28a5f0b223a5f9a964605c8620772b38654ad2c7b9c7","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.972174Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/css/4100.css","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/css/4100.css HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:59 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 07 Dec 2017 06:40:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a28e255-b9f6\"\r\nexpires: Fri, 20 Feb 2026 02:33:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47606,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f3573f2eebab79e16192556841629e05","sha1":"9e63bdbba09fe8a8b3ffe1a783e98190135c929c","sha256":"3d1fcedeeb26c89071ab8dcb4a090a1b1f6291c7a545060e541d46e962836565","sha512":"38015ad65063aaba4c64e7e38a7d626558d4ad9707bb10c9e09d8323208178bedd6b75cf90f904e555dde9e167b949153141e9ba1ad7feedc9b1efcae61ee83b","ssdeep":"768:V4NMoNQPu+XKpr2JEgXf8a5J0Zu25aKlPRdOj1NKeUlxW/LGJ+QZ3NXJxJ6eJGMG:8jdiJIY/LaNO","tlshash":"da23217cc291308df303b66d7bf49e55af669022ee0b127db2f1a6a4d29580c26770c7","first_seen":"2026-02-19T14:34:29.62584Z","last_seen":"2026-02-19T14:34:29.62584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/skin/images/1505183489906.jpg","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:34:00.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET /skin/images/1505183489906.jpg HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:00 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 06 Dec 2017 03:58:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a276ac9-195fe\"\r\nexpires: Mon, 16 Mar 2026 07:22:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:134\r\nvia: L1:134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"8e17b6b95d18e8d1230acdf0f0d43837","sha1":"5a5567664f827e667e5102582e93b584ae1b2cba","sha256":"a90d678d4322cc877057da99fabe31915a8c63e8d1c5743f2df994e2fa09aef0","sha512":"90392193ef081ecb791fcac1dca9d49c3e3748357f22977f79b36f10a247aca4699e2f218df78c03b8c704f88fe257f74f605be82dd66ab8c31baa6bd9dd6d0a","ssdeep":"1536:nJexNeFZUts96mG71HEdWtfqQzttkjICS7oefF3LMA5mCooZ1sz5i:iNe0mGpVxHWIrvF3LNw07","tlshash":"43a312079b412dcfe2cf647310d2e38b913b01a16bf6aa28752407deab97bbd5394d11","first_seen":"2026-02-19T14:34:29.626816Z","last_seen":"2026-02-19T14:34:29.626816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 554\r\nOrigin: https://app1.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://app1.asia\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\neo-log-uuid: 3403749152523541103\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":418,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/feedback.39ff43ad.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/feedback.39ff43ad.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 894\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:33 GMT\r\netag: \"65fd1779-37e\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39ff43ad318c87cf310043ceb1e547e7","sha1":"66b959f2ee476591c5855362db7cfdae6c82d81d","sha256":"4edf7e7ed086e0fe9208719144c0d9e74477576e1001dc59dbec40428236be36","sha512":"e2d418c0b3004e1bc460f479d25611e50338c8da6e7b083d13a0a8ff9a8d4dac998f3723482a9695593e5cdad953bdae355728085c85a4e2a82f1711c08c232d","ssdeep":"","tlshash":"8111c05c63589e9c67219b78d342bbb1726710e3170ea02089723037a91561d3d7b6ec","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.95224Z","times_seen":1792,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/ts.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cafekessabine.com/","date":"2026-02-19T14:33:59.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-6.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:15 GMT","end":"Sat, 02 Jan 2027 02:51:06 GMT"},"fingerprint":{"sha1":"71:AA:B2:AB:13:43:B4:24:14:D4:17:18:6C:6D:8C:8A:EF:6C:D2:1C","sha256":"9D:B8:09:0A:5D:43:59:9A:AE:6C:F3:99:ED:13:80:FA:DF:21:7D:65:AE:F9:B0:47:DA:3F:24:41:84:58:15:5A"}}},"request":{"raw":"GET /ts.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cafekessabine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 14:34:00 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 342\r\nConnection: keep-alive\r\nx-oss-request-id: 69971F589A0F833630AC3A43\r\nAccept-Ranges: bytes\r\nETag: \"9E25F39790BC7EF442E6671E951E1D83\"\r\nLast-Modified: Mon, 12 Aug 2024 07:31:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4613280838212379853\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: niXzl5C8fvRC5mcelR4dgw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9e25f39790bc7ef442e6671e951e1d83","sha1":"a76e21459ea14f8233735b3c819f30c26cbd813c","sha256":"c18b4cc7348ba40f4e88f5bbf8420de8041c5b1dd91165494281e48580e6fa07","sha512":"341d86437e392cd0f776d1997c7ce2de3b65279d55ff105e3c9e9adf1eed9d2cd3b0172dfb0c4e290074111418b5c9f68bac2ab5ec930cc0fb6cc3692a5ffc8f","ssdeep":"","tlshash":"cce0d8992466667427901c9995aef42cf4da112c38519002954ced112034aeb1e1ea94","first_seen":"2024-12-07T07:30:44.929907Z","last_seen":"2026-08-10T03:33:09.62576Z","times_seen":2132,"resource_available":false,"data":null}},"time_used":2241,"timings":{"blocked":966,"dns":51,"connect":299,"send":0,"wait":300,"receive":0,"ssl":620},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/js/website.f36331df.js","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /js/website.f36331df.js HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 12 Feb 2026 06:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698d72ad-9eca0\"\r\nexpires: Thu, 19 Feb 2026 23:14:26 GMT\r\ncache-control: max-age=43200\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650400,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3378)","md5":"71dba75388de4741eb9a7585149f32aa","sha1":"19165527037d47e419cc6f2dfa8d277922a3966a","sha256":"245a3b6120f739ccc8b57e40da5fbe1e495238f691ca87abc393af2493db7bca","sha512":"9e5cc907c3133d8318c46f951cf3f45d9599150d9fc5104081dd11075c92d0b55d7330e63f0a9440676f3f3fe495730a16cc5239988640d9d133af615d3b152a","ssdeep":"6144:eTin01pJVY5y1jEEAHN6J9LRAHQqHmrSGHDsXz0FwG37V1LT82dp5Ilv6iy8t7fU:een1mjERW9Dsj0FwG3rZ5oNvqV","tlshash":"40d4025d58b76ee554dfe01281380c29f03561bb522e9c207f1e4a586f3ce3e3a5bb68","first_seen":"2026-02-12T06:43:40.43703Z","last_seen":"2026-03-02T13:23:10.477136Z","times_seen":32,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/down.c7fc8a68.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/down.c7fc8a68.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 208\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 06:02:33 GMT\r\netag: \"65fd1ef9-d0\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"968de49fb0eeedf5d6965f4130607833","sha1":"47766a409c9344a96ed569ef4be2405efbea7a68","sha256":"501cfa9eb5f8047edb1e51e62a03f32a03f845950cb8e75b00311759573d840a","sha512":"57764b64bb5aa2667fdd459c4f9a434d6ec6a6e6f6649a85c201859dd83bb641d17f04df0c1043b89642fca341909ad0809b3a166767fe6ca10b21061f4689ce","ssdeep":"","tlshash":"44d0a96b635ccd1cb0134e28e365363120a212a318ac2254d8322230b60009aae2baa8","first_seen":"2024-08-15T06:58:15Z","last_seen":"2026-08-04T01:10:51.048886Z","times_seen":1789,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-polkdot.0ce6319f.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-polkdot.0ce6319f.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177c-36cc\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14028,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ce6319fe258d51e640878721b30b00b","sha1":"8f84b97707d89c051c345dad664c11f87409d0ae","sha256":"348c471852992bea44c07ba36c56e331ddb6a25ce288fcd584cb9a78fa8006d2","sha512":"6c32b6f23ba02e0c4930d28f9ecd57fa861cda873413aed108f037b711d4f5e023f8fb172faf59c739c95514c70f17b0e9cc24acf96460c9157df87afbf95c7c","ssdeep":"384:f5KRkKZJj+AjA6Tam5cKqez2c/9sQ7HWqw8jJ:f5m/ZzTaLtgN7z5J","tlshash":"9a5293cc2bb587f8f886f0ff9b1110a4790698ff69818a75c3685d09788251c9e45da7","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.960512Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cafekessabine.com/","fqdn":"cafekessabine.com","domain":"cafekessabine.com","tld":"com"},"ip":{"addr":"45.207.200.138","port":443,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T14:33:57.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cafekessabine.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 04:03:54 GMT","end":"Mon, 27 Apr 2026 04:03:53 GMT"},"fingerprint":{"sha1":"C6:45:50:A4:FE:9C:F7:3C:5C:1C:EE:F3:6A:D4:E2:FD:07:B6:03:D7","sha256":"07:DC:37:99:AC:FB:C9:11:1C:25:28:46:0C:23:65:AF:B7:C8:A5:46:D6:75:37:27:54:3F:CC:8C:B1:F0:B7:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cafekessabine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 14:33:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27637,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (580), with CRLF, LF, NEL line terminators","md5":"98e9995ad0c85f1ad148a4c1d9c808a5","sha1":"eebb26904d3684eb03e6f21e7cd202fd0fd287ae","sha256":"8dc2f571607e5362facb9cdd7d9b5fddeafbb420f8a09d4cf2575d42d0ce63c0","sha512":"f0910d8c44a8a5aa48271abcdf837c8869d7c18b4af9ab9b7fd5063d270d99897a9b6a7c874e55e3feb6ce643a00ab3c7ab96339f54ee9461b033d1541ac1015","ssdeep":"384:DWv3uK/sRWzvoqHT0XNnn+GK2vtcEhDQFyZcyZ7N0/CR54ekMQx7wizklVxXKJ:qfuK/sRWzvoqzeZ+GK+ULhICepXKJ","tlshash":"12d21f3090f1ab3741d785f06a70ab1abee2e68bca0b170973fd5ad65f82d88dd13055","first_seen":"2026-02-19T14:34:29.631717Z","last_seen":"2026-02-19T14:34:29.631717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1526,"timings":{"blocked":559,"dns":254,"connect":149,"send":0,"wait":404,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-19","alert":"Phishing Block","trigger":"cafekessabine.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"cafekessabine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/js/app.845283e8.js","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:01.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /js/app.845283e8.js HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:01 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 20 Jun 2024 04:36:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6673b1c0-497be\"\r\nexpires: Thu, 19 Feb 2026 23:14:26 GMT\r\ncache-control: max-age=43200\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65294), with no line terminators","md5":"15f7e91291d4f9bb5d131523e0d9ce3d","sha1":"b0aac440f4f25eae6561a13b485f6730f24aea37","sha256":"db0390247d54102a8ab098451244c24f68a6b091fc7d1e08655f24a239ffb2a7","sha512":"d2d44f57dbefc0d5284fa334454c4ee81db09acd6297b9aec6dfe16b12c57beda94d052fc2abb89f473d6e5e289286feec20c303c6e8a6b8e7c90624b885cdea","ssdeep":"3072:mupUqvDzVgE0j0etKGsW4+whqIAjFnOelEJi3JS9twvxAZ+JDUgnUsq0ACGharNm:FpzLzVr0j0STtyi57xg+JDPUsq0JGUrg","tlshash":"e1740a07d746d3648ac236f02c6a77eca63481dcc6cd92a7a76ec0e017b1f7d125b5a8","first_seen":"2025-12-31T18:13:13.115767Z","last_seen":"2026-02-21T05:50:42.423544Z","times_seen":3,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/discord.2aa7ce83.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/discord.2aa7ce83.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd1779-543\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1347,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2aa7ce8352d369374287bc6eaa17fb7d","sha1":"6640365975f4dab2b9da69ded94f9c66454920e5","sha256":"5bf64d9f650da48ba47165ea48faf54928f70998651a01992c989315f956febd","sha512":"b2dcbc1666a5c6ea2b7fd79fd4f96313bd99c76604bd65a186aca07e6ae24648aa0c335f12108485365c1c08f2b1526f1ada10326a0c3439afd9edb7c057be28","ssdeep":"","tlshash":"1021cef283e464e4a4479fc9e4398913f61b34fab75e8a484780ebc17b2501b984eca0","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.954208Z","times_seen":1794,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/subscribe.ff7b792b.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:04.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/subscribe.ff7b792b.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 586\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:37 GMT\r\netag: \"65fd177d-24a\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":586,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7b792b7ed2fde784f744653eee3dc2","sha1":"9551d0b17562a9fb9c456081cabdfdcde5bb3d41","sha256":"0ce9bdd49f924c57c51b574b7a7a7a3d188ecba968017146d0cb3393e58281b1","sha512":"5ad72693aeeddf64284143e32edd5d97c9d66ef1598b3be9b1f2faebfccbf24102e5e145b7b814e20ed90267b3e92cd0fb280458fb591789bfca0a173bd76ab0","ssdeep":"","tlshash":"22f021a054cc444887344715c7d5bed5642fa1434315025cf35c355f3f344a658af39e","first_seen":"2024-05-25T21:10:48Z","last_seen":"2026-08-05T03:53:04.982857Z","times_seen":1790,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app1.asia/img/partner-consensys.f63cb550.svg","fqdn":"app1.asia","domain":"app1.asia","tld":"asia"},"ip":{"addr":"129.213.74.28","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app1.asia/","date":"2026-02-19T14:34:05.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app1.asia","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 18:50:04 GMT","end":"Tue, 19 May 2026 18:50:03 GMT"},"fingerprint":{"sha1":"92:D7:E2:CD:4A:71:D3:A6:03:EB:E5:5E:E4:50:DD:A3:56:40:BA:3A","sha256":"01:02:E3:00:12:CE:59:C7:87:F0:4E:CF:93:6F:60:47:2F:E9:D9:81:16:5B:87:87:D8:6E:CC:7F:C9:1C:FA:CF"}}},"request":{"raw":"GET /img/partner-consensys.f63cb550.svg HTTP/1.1\r\nHost: app1.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app1.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 14:34:05 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 05:30:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65fd177b-c1fc\"\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:5807\r\nvia: L1:5807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f63cb5503ccf231dbff761feb62a941f","sha1":"9c23eb2cf3f0ed9f5bf0e983baf836e7f04a47f0","sha256":"59f240141226f9ed13da11246f7fe344b58ae0c2c08e62664297ab2ac2d302f0","sha512":"7d4bb3819e92a12e7b93adb07dc083d17148485f1ba435c9d8725ac253ec31aa28b0899d90cbb44679bd89546f019feb4e0c455a8f92af399ac00b829f96c838","ssdeep":"768:mv7JFv8hva55i0K+Py3VlU45OhSwSDAWb9CX7cgKUbKpjGJVVE5:mN8iziuP01wMAWbIX73yME5","tlshash":"712361d437768ae8b985b2fdc73d69e239226ccd75008989d3b03c1aa88163c5d9cdd7","first_seen":"2023-06-10T14:59:43Z","last_seen":"2026-08-05T03:53:04.966921Z","times_seen":1869,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}