{"report_id":"67f12653-c8b3-4c09-9319-be6c9986bcec","version":6,"status":"done","tags":[],"date":"2026-03-25T13:13:49Z","url":{"schema":"https","addr":"www.easywgcash.top/p?0324852450715354388","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"title":"ClickWages - Get paid for completing tasks and make money online","dom":{"size":45320,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40132)","md5":"040ce20ade06049f7a9077b273cf4611","sha1":"19b5166f6e524b2e21786c9d3bcebacddd3d1d6d","sha256":"56d60a67e81d2b7a8226d6541b58a5754a2adf7fe31f80eee2f5b302428fe6d9","sha512":"cef9f201a9e97cbf4eb6b10aaa48afb4927fae9af344a272101be8e6e10172995b203a2d20295f7e77a4fefc67cdb3fa1c3d68454eeb5e72387f38a90b0cf2e7","ssdeep":"768:0pSeJBb8B2bS21UKfG8dz5axGaCG1GGmA0tTMCNh:3eJF8kXU58dz5axGae60tACX","tlshash":"23134131b08029a7116389dcbc20ff056db2e32bc61e4b1579fe629a1fe7cf1b551296","dom_hash":"domhashbac07a06ac4e7a7cfab949fbd85b54a4","first_seen":"2026-03-25T13:13:58.190972Z","last_seen":"2026-03-25T13:13:58.190972Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.easywgcash.top/p?0324852450715354388","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T13:13:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"click9awages.top","ip":{"addr":"172.67.145.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-07","domain_rank":0,"first_seen":"2026-03-25T13:13:51.345979Z","last_seen":"2026-03-25T13:13:51.34598Z","alert_count":0,"request_count":1,"received_data":6270,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.easywgcash.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-10","domain_rank":0,"first_seen":"2026-03-25T13:13:51.349136Z","last_seen":"2026-03-25T13:13:51.349136Z","alert_count":8,"request_count":4,"received_data":25309,"sent_data":1917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.click9awages.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":32,"received_data":2030344,"sent_data":17008,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bhjkads12.configtb.buzz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-10","domain_rank":0,"first_seen":"2024-09-25T22:13:00Z","last_seen":"2026-03-13T16:47:59.948714Z","alert_count":0,"request_count":3,"received_data":2141,"sent_data":1464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":467172,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lnczfe.buzz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-20T23:02:31.156171Z","last_seen":"2026-03-13T16:47:59.666541Z","alert_count":0,"request_count":2,"received_data":1812,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cloudflare.com","ip":{"addr":"104.16.133.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":9,"first_seen":"2012-05-22T15:19:15Z","last_seen":"2026-03-21T07:15:21.278322Z","alert_count":0,"request_count":1,"received_data":598,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nvzeag.buzz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-20T23:02:31.150392Z","last_seen":"2026-03-13T16:47:59.586901Z","alert_count":0,"request_count":2,"received_data":1812,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sfaehe.buzz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-20T23:02:31.151101Z","last_seen":"2026-03-13T16:47:58.765303Z","alert_count":0,"request_count":2,"received_data":1818,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ohtdaw.buzz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-20T23:02:31.152466Z","last_seen":"2026-03-13T16:47:58.575852Z","alert_count":0,"request_count":2,"received_data":1812,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hvxfzw.buzz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-20T23:02:31.157628Z","last_seen":"2026-03-13T16:47:58.482255Z","alert_count":0,"request_count":2,"received_data":1814,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.easywgcash.top/p?0324852450715354388","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"158b0a76eabb361fec0e6ace77b564cd","sha1":"c5bf1c2347dc73442ceac81436947919754601ea","sha256":"8be21b529a82eda54558df22bad1794dc13be7665a3f1c7d0d1908daf44e3b25","sha512":"1efdfffd396ca0eae2b979fe4ea9e6fb60d3d3f63b266093361b1d3ae80e9c719e809ebb84b2bf76701f046216de699bd755ff4a098083d2528d9dea8ee90f2f","ssdeep":"","tlshash":"7fe0d8069e67d23002e7a42fa77fe114357310d76012e4163a6ded04af00fce9e53899","size":379,"data":"","first_seen":"2025-06-29T03:57:52.352033Z","last_seen":"2026-03-25T13:13:58.240901Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easywgcash.top/p.js?1774444408037","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4da0773188b5f7a75c087e3197ab29f8","sha1":"748e1b6813e455341d1a3437233d48afd2f24091","sha256":"f793b930edbce4752175671c07049bb7ff27148b08ff44e87b4f39d382b852cf","sha512":"8202d86b8751efbad15cc6b1b09c059c266c4f89aba023d78bf725b3300a6eec8bb7fb739bc5d40e1e0fbb525dc444de987d354873110bd13fea50327950ae87","ssdeep":"96:O7UsuDgKpKjSPMGOmQ2aLxHjQVYYf7kTmBZEkER95:olcgK0jSXUxHjQ+YoTq2","tlshash":"e9a140095617320905fb7339af43a008eb25f0237548855dbeada9001f3ea2dc1e5fec","size":4638,"data":"","first_seen":"2026-03-25T13:13:58.231172Z","last_seen":"2026-03-25T13:13:58.231172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easywgcash.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T22:43:16.181457Z","times_seen":125296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"214818b2f1cbd9d339c6ee36ffe9eb42","sha1":"5f7bff61b60bb919f63c31121dccfd1263d44796","sha256":"445be5623440acc35eb8290f3927afd3d28c37ba3b3d2327ad87d2fa4bc1eb8a","sha512":"50d121edbc805e30ef7050c939291e552acf66b08322a0bf3d8cca33c1e88a24af5b9a262f0c8446e3e1b5b7a3b12190e66a570b99fecf804bd70d3cb7b2730a","ssdeep":"","tlshash":"a3b012112a44131681bcb929c20b8d19180abdd384a3b8d4ac87c2125f47e238c8251b","size":101,"data":"","first_seen":"2026-03-25T13:13:58.245108Z","last_seen":"2026-03-25T13:13:58.245108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T22:43:16.181457Z","times_seen":125296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/chunk-vendors.d57f73b0.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8bc9e5d1e3b984d8ff9da828f72fdb5","sha1":"ad8ee04e2f5756198dbd3641b652a0e927ee47ab","sha256":"e3bc75c2589e2d99f40c0ac9a20a7c2dc5de36073b122f35f4eb5c15b3e4a14a","sha512":"45760212e75fb7f5ea75ed748b49e2daca7d95cdcfd3aa265a46e29e97e2a1919734a2e6bc02220bc08600917dce9488e72ebfcb8cb4e050eed531c23b39bac2","ssdeep":"3072:7VjunNa65ZSNP5/WUMNVSBG2+B7XGJFpH4BwbOJ7oIQ52IJH+kk8i:JiNx58jBG2+s3H2J7oDxu8i","tlshash":"bd54e789b292b4a207e720f5417f510bf23b6968b40e90d4f2a5e4d57cb898e9137f3d","size":289992,"data":"","first_seen":"2024-10-30T12:23:22.905465Z","last_seen":"2026-05-18T23:31:23.468182Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/397.b84f500c.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86aba601def3d722b72d0fb3f3af93d2","sha1":"2a64b9d55e10d02779efec4483f0a75813bbb799","sha256":"1da4144ef488c1ef2841b7df10da7c62cc08edff5f6361c7d5c25ef891ae7e8b","sha512":"2898fcada0b53bf4a27420d7b03e6bda236bbfebbe8a33bbc3391ca6b9c327a2b7c252c0ff0c618d297864cac83f49070122e9a9a962f81aa1d4d44eba28f667","ssdeep":"192:8ES5EKdNz+PQsKdNzfFJ50I6lP6bgW+ERLEyBTVOLbKbcb96xLaVCz/kI+NW044v:8EYZlPd3V+60wLkCNe","tlshash":"39823022a896e2beec1bd41a115d3630d0602fe4c520a587ff78cdd4ead0e796b1d76c","size":17975,"data":"","first_seen":"2024-10-30T12:23:22.907978Z","last_seen":"2026-05-18T23:31:23.457843Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f676fbc201d4f6e8ed790a839f5467c","sha1":"5c124adbca7649791bd2d3a412afde0ffc45bddc","sha256":"5bc69a9d2a16b2484f3ac03d9b4a33afa03542ec1613f0ae55318d64a4483f95","sha512":"59371953546be8bec3b63b8f959f44fc6240ea787478fedc870c86a9162f01b365a666e28108d0c2acae5de4f2b5946a84fe7c88c8a3640d6a2eae42bcb623fd","ssdeep":"","tlshash":"ce21289d5cf72a11826370bd1f4b2004f074b003715ccea9be9d92517f4052d97e5faa","size":1221,"data":"","first_seen":"2024-11-13T16:43:35.546781Z","last_seen":"2026-05-18T23:31:23.507301Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/app.8cbac381.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"947ea76383c016f9594143e245372ec4","sha1":"6df86001697bc7f0672bb4ef694153e25d55d0cc","sha256":"bd53163661d7a6fd1f41b4b28e1e26ed2389110de303b69729b21ed55ba2bc53","sha512":"e20668cd2e38d0561399412f6a40488c4507d44a00ce5b02583426d8ae15100336d196704f6ab8d31e42602ea32903f0429d31e126c3073f5d74f436e9a8e4b6","ssdeep":"768:oJPg7ihPR7Mx9ZK++wyMrBB0URU6k0XzGqBARv4YmKvrIvY11:oJPg7yPZMx94++urBVRhk4GqBYv4Y9UQ","tlshash":"8ac2099f73073b2542e515fda97e3214a0348865b81e0d70b7179c827c99f1e63a1f9e","size":25758,"data":"","first_seen":"2024-10-30T12:23:22.956784Z","last_seen":"2026-05-18T23:31:23.447537Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/commons.00c6309f.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2feeb52f7fef995e8b6e27de1e76b91b","sha1":"b4a10528b19070cca1aed284b4d85f4c7c631836","sha256":"607473483b4bc8f5fc76dcbee7ed36bf1a4aef99f1c081914df54dc1f001a989","sha512":"ee330638891b12f1e5de217577f1d05322725c5b4ee82a5a93c5d7d02a762e1694c89e72c73a2f9e8030d9a4d8f618d30a0baade5b98a25540d91abfedf25d6a","ssdeep":"1536:7L4omV32Gy7ydlqwY8xE5i/0it+yOHK4tdYC9k8mRtFjqOaeraxo:7L49Am9EcxT","tlshash":"43932a6eb1c1f03e1ad76065512f250af53a2e96a41e8084f779d8e0ac748ad132ff7d","size":92257,"data":"","first_seen":"2024-10-30T12:23:22.917796Z","last_seen":"2026-05-18T23:31:23.487227Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d0b90bc162e0d5ef75a3a79477f4476","sha1":"27af7fe727a2db7765afb8a8f3ebc97ae21a0ce6","sha256":"415a13309bac8e5a9031cf18985e5218f9c066d1e4da9b04534fe6d09f9649a1","sha512":"370e1c7b331478cb236899b279b35482f2664e12b1d2fa7d78eafcd6ef542863ab0dbac5c281a6df058a600bc6839908d1a6ea26dbd2b5efbbc83c2cdbb2a8d8","ssdeep":"","tlshash":"c5c08ccc210b0c7042f72a010b6fb200b04632129890a921390e63045f31e13d764924","size":172,"data":"","first_seen":"2025-06-06T09:40:56.696504Z","last_seen":"2026-05-18T23:31:23.512475Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M1VDFVBW8Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acf53a9b88c36c02f494361a587195b2","sha1":"c49938a3df3429f5da7a1e9e914b6f1a2fb20817","sha256":"a1b30cf318c223bb0f99c8ad21c1715d4a1b6f294678b7d39d065eeef97a63f3","sha512":"392c5b4d93d121f963ed4d20e03c23b353fe1849d0d57fa0da43332d6089207a961540fd822361ab842a15f44010b01942fca0fcbc54d3df0971af73cef09418","ssdeep":"6144:fqjcY1jZXNycfjt8y+HeIjTv87dc+GZD81Nb3fgE9QUB46Qe27km7ov:mjZXocfIHeIjj8zv6U92I","tlshash":"3ca409ceb3d674265396f478903f018ba57b28a2b45cc89af189cce02e7465a4177f7c","size":466568,"data":"","first_seen":"2026-03-25T13:13:58.207901Z","last_seen":"2026-03-25T13:16:00.714092Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.easywgcash.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easywgcash.top/p?0324852450715354388","date":"2026-03-25T13:13:27.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"easywgcash.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:46:27 GMT","end":"Mon, 01 Jun 2026 16:44:02 GMT"},"fingerprint":{"sha1":"CA:02:F0:AF:35:56:6D:ED:E3:3F:78:F5:E5:29:06:43:62:DF:75:E5","sha256":"59:0D:6B:E1:79:11:6C:D2:C0:3D:1D:56:F0:C1:3A:D7:77:00:B2:E4:53:6E:EC:31:64:A8:4D:3E:5F:83:37:40"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.easywgcash.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.easywgcash.top/p?0324852450715354388\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 25 Mar 2026 14:01:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGiSiV%2Bd0SS4SSzBy0tHz%2FHR4ojDxMYxwewDQnv1Vz0FTrhEZH3PuAeGc8ylfa2abtN7CwdoJm0eJmIrN9Qf4KQdJfiXkneWjO%2F25CNUbH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e1e2c4e0c10359e-TXL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T22:43:16.181457Z","times_seen":125296,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/css/app.6c2e9f48.css","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:28.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /css/app.6c2e9f48.css HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 5900\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=2,i=?0\r\netag: \"670a31e0-170c\"\r\ncontent-encoding: br\r\nexpires: Tue, 20 Jan 2026 21:12:28 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9GwEjPpzl5CjxheI0HwKIo%2Bred28gYz8GiqR%2Fuup4H25YoEA2K2wQXG4wg40pYDDrX36%2FQWKyJVdO5HatxQ%2Fd5Apd6SimzPw1ZmfCC7dhzcSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c531fd4b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39834,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39834), with no line terminators","md5":"3e0834fbc99be471c3c64358306c5ab5","sha1":"3021c9e8df988f59d9c82bc76fca2b097a17ecc5","sha256":"ce6b53d5a031d6a1ea6535f9364338272328618b9a481a73eaaa2d37a67c9b79","sha512":"b4ff2350e18abff61c08f2b92300465187f7ebfce2de20283e5f2e9c541417ba9ccdc1979babf44df4c8a8aa79505dec04d7929d68cca827b8e74b548083293c","ssdeep":"768:37wPCiIyh39rg828YM6Sr9w3YeWXA1u9w4HCUn/l4KdDpk:3stth28Y7SrW3YeWXA1u9w4HCe/l4F","tlshash":"e30300a1cf4f12ea3723ca9d93c1f6582e55e3f6dc941d51f80a601c8af26592186f3b","first_seen":"2024-10-30T12:23:22.951098Z","last_seen":"2026-05-18T23:31:23.443745Z","times_seen":78,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/bonus.75eb07cd.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/bonus.75eb07cd.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-7d01\"\r\nexpires: Mon, 08 Dec 2025 06:22:08 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuJ0aBhqz6UiXeYXCp70UREjDocEedCdCLxKOyS0dH9swAvy%2Foe8RduCs6pkbXJE%2BagBODzzXqXhb68j%2FMCFBnkY2JXInkrdNDnwAFUBJaW87w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c575f65b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 626 x 417, 8-bit colormap, non-interlaced","md5":"8ebfeb9a3e0b6c2d0eef60f8c44f2ddd","sha1":"baf365f03204171764a9677c7235c51e6d08d053","sha256":"5a85441e683c62cf7f4a92007af158bada1f572fcf65bc4f7f38d23c87764622","sha512":"053b78780fa061ba482038c06d2284cc3b0904a90efe082043b8db608ad3837e45e01edeb5136d694f2edeedc52c80e50bc02466ca631767428b7ba11dc2a70d","ssdeep":"768:CCZS2xLcjGum3lK/RhxweyGmoh/wAZTwsneAyehVM/Fh:CCs+LcCR3lGRhLyohYAPZS/Fh","tlshash":"0de2d067e8e6d050dc62e569eca66689b45aacd43138197835f8ff02c173087df3a0e7","first_seen":"2024-10-30T12:23:22.969511Z","last_seen":"2026-05-18T23:31:23.43952Z","times_seen":105,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bhjkads12.configtb.buzz/","fqdn":"bhjkads12.configtb.buzz","domain":"configtb.buzz","tld":"buzz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configtb.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 18:24:56 GMT","end":"Mon, 22 Jun 2026 19:23:42 GMT"},"fingerprint":{"sha1":"B0:7F:B0:C3:5C:AB:05:63:45:1B:18:C3:48:7C:41:3C:7F:6E:E9:7D","sha256":"E5:6E:F6:7C:96:B9:EA:7B:23:29:0A:EF:97:69:AC:4C:1D:53:52:E2:95:A0:E7:3C:1A:E7:C5:5D:35:C3:70:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bhjkads12.configtb.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nContent-Type: application/json\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2Fpj3weYN%2FC8IkK5jj%2BbRTnErB%2Ff8AKmlTFQ9uf%2FkUZj%2Fix3Qe0jk00TtsKnblGsKvTozQIMmS07OVXFdTzjFV5JR9esyHn7qUDvhw9r9URcvu9Pag%3D%3D\"}]}\r\ncf-ray: 9e1e2c576f6de517-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d06b706ffdb7de8236ed1b1d4dd3feed","sha1":"19241446ac057986876d5f4bd523b681d190479a","sha256":"7d123348a32c7b7e0cd6b773d1b1e60ffeb82870a54b6e50c973a971361a8691","sha512":"cb5d99e8137a1bfda7037b81c7a065ae3e3e3ea3159e1900689b6a8775f03999270eaa8d715f58768180ef810ebe6d050326366d273f105368ceb8074099d2e7","ssdeep":"","tlshash":"61a002768458476adca1918da70f9355a6e80585d74542547d8c1f394555ff8a140132","first_seen":"2024-08-19T21:56:22.653895Z","last_seen":"2026-05-18T23:31:23.459941Z","times_seen":37,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bhjkads12.configtb.buzz/api/v1/share/032485245071535","fqdn":"bhjkads12.configtb.buzz","domain":"configtb.buzz","tld":"buzz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:32.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configtb.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 18:24:56 GMT","end":"Mon, 22 Jun 2026 19:23:42 GMT"},"fingerprint":{"sha1":"B0:7F:B0:C3:5C:AB:05:63:45:1B:18:C3:48:7C:41:3C:7F:6E:E9:7D","sha256":"E5:6E:F6:7C:96:B9:EA:7B:23:29:0A:EF:97:69:AC:4C:1D:53:52:E2:95:A0:E7:3C:1A:E7:C5:5D:35:C3:70:82"}}},"request":{"raw":"GET /api/v1/share/032485245071535 HTTP/1.1\r\nHost: bhjkads12.configtb.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:32 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMljtv2Up%2FCro0KdKORYH3z7Gx94Q4XDUuD0MdH0F6kW7gj%2FaA6F9k62r9Az0r%2FIFzpjiVXXyuzsRgZEfVx4ZYdqJ0lJfC41OeBHeXh0oPplSPy2Qw%3D%3D\"}]}\r\ncf-ray: 9e1e2c6adca7e517-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohtdaw.buzz/ads.json?_=1774444409637","fqdn":"ohtdaw.buzz","domain":"ohtdaw.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohtdaw.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 07:44:28 GMT","end":"Tue, 12 May 2026 08:41:51 GMT"},"fingerprint":{"sha1":"CF:41:9E:46:5A:30:6D:7E:3E:94:4A:A5:1A:77:55:A5:2A:DE:4E:C6","sha256":"4A:B7:DC:68:F3:B2:BC:95:22:06:56:36:D8:62:82:FD:2D:CD:A5:64:2B:77:16:81:82:DF:D2:13:AD:61:9D:4D"}}},"request":{"raw":"GET /ads.json?_=1774444409637 HTTP/1.1\r\nHost: ohtdaw.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywOmZ3w%2FgBWBzERouFyIbjvMIgD4jYO1A5FKEuY7wAanYTFoEILBgr7WrIeOMgeteE0Iu2wyTFxnE0Xva7jullP%2BAj36OEbJwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c594ce9e51f-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":130,"dns":29,"connect":32,"send":0,"wait":89,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/base.json?1774444409318","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /base.json?1774444409318 HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Aug 2025 17:10:18 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68a35e7a-31f0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbVEi8mjIe%2F49oA4T7RsRa99hb3IuBlK%2FadGmD2P8YRA7eyceBj9Mxxda9GiSCzna1B1%2FOAUY8Qml1mYv74lXOrvFMOW6WBmlmgMeYLz5bU4UA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c566bc1b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12784,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1774940f381d4ad3df92fa962d65a624","sha1":"2acfad40dd4eb7f45051e468e3e4b58ea2ef5bc8","sha256":"a8b7e7a5737e955fcfe179b110f0e653f3b5303aab457466de2c823b0c4e9812","sha512":"03c214e12fe896b2cf2a6f9caccb782a07094f84b62bc97f0adac73d4596a187e7ec0d0aca6de1d673c511d3e8e1bb2aea7de8e26fde929b043425d2c6958bbe","ssdeep":"192:7Nuvqu6Ll/QLj7AaFNKTM+w+YCBGgEF1w9U9VU52+jgfI57XSxCV6UsGeGr:w2/aj7L3Lz9V22Re7XSQVtLfr","tlshash":"26424034caa98fff7690dcec96330892da48375823cc156b45d48fad6a8f52d54c1af1","first_seen":"2025-10-12T04:23:25.948991Z","last_seen":"2026-05-18T23:31:23.433647Z","times_seen":28,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/domains.json?1774444409389","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /domains.json?1774444409389 HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 15:26:57 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691de1c1-242\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: br\r\nage: 10878344\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbismtx8u%2FXznuw1VQoaZmaTtFEdMbm4hAycOzmAR%2F42Ovygaemd5BJuQZb7p2WY0xspOfuQ5hdMD7rzVXfAt2SCw95nP7Z6Kt6cQNvwUzKqHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c56dd5fb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"579be3d554433c38eaf1036329020210","sha1":"33b8a487c2a82f5e587dcb744ef0cb3117b5423d","sha256":"af889bf4d2aa169ecc553b9453656e5b2d7eb3a5089a1f6ab236d1ec85cc2003","sha512":"923b95f353c0212759fe1df163d3454194d0f6faf0b91721485f6a8e66179d80ce611f5b9bfee90417ca80716f131e50dc8cdd744fe8f5805ca80d93a3aa060e","ssdeep":"","tlshash":"25f03186eb2bba0888f78134fa072c6c0c9e71439be8b47a5fd8c5310a7d51766dd19c","first_seen":"2025-12-12T09:47:49.975157Z","last_seen":"2026-03-25T13:13:58.204286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/fonts/element-icons.ff18efd1.woff","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:44.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /fonts/element-icons.ff18efd1.woff HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/css/app.6c2e9f48.css\r\nCookie: _ga_M1VDFVBW8Q=GS2.1.s1774444410$o1$g0$t1774444410$j60$l0$h0; _ga=GA1.1.994889598.1774444410\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:44 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-6e28\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfmeCTbEKhe1UC1OkrCvpFUORfbiRRd1%2F%2Bs70mMksXZO2w0nD57rlYoUYfdqahhGjaflgtbXn%2FYp0bmwK%2BshR%2F71EAiurXtFGE4o3YMhA12ALA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2cb639adb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-16T19:56:58.563964Z","times_seen":29491,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M1VDFVBW8Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-M1VDFVBW8Q HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\nexpires: Wed, 25 Mar 2026 13:13:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154761\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":466568,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"acf53a9b88c36c02f494361a587195b2","sha1":"c49938a3df3429f5da7a1e9e914b6f1a2fb20817","sha256":"a1b30cf318c223bb0f99c8ad21c1715d4a1b6f294678b7d39d065eeef97a63f3","sha512":"392c5b4d93d121f963ed4d20e03c23b353fe1849d0d57fa0da43332d6089207a961540fd822361ab842a15f44010b01942fca0fcbc54d3df0971af73cef09418","ssdeep":"6144:fqjcY1jZXNycfjt8y+HeIjTv87dc+GZD81Nb3fgE9QUB46Qe27km7ov:mjZXocfIHeIjj8zv6U92I","tlshash":"3ca409ceb3d674265396f478903f018ba57b28a2b45cc89af189cce02e7465a4177f7c","first_seen":"2026-03-25T13:13:58.207901Z","last_seen":"2026-03-25T13:16:00.714092Z","times_seen":3,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":147,"dns":1,"connect":21,"send":0,"wait":53,"receive":60,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/chunk-vendors.d57f73b0.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:28.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /js/chunk-vendors.d57f73b0.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 81847\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:23:08 GMT\r\npriority: u=3,i=?0\r\netag: \"670a31ec-13fb7\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 1337881\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3bKW%2F%2B6cYmFKrmHFKee4SXJa6YgQwG1CCN2ciZ%2BVeM07zd6s6ifTLJDoCeHznvs8FuLeSCRtTVfkMVFpH49YYjKXLxyNbxke8a%2FPqKevtyUcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c53faebb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65106), with no line terminators","md5":"c8bc9e5d1e3b984d8ff9da828f72fdb5","sha1":"ad8ee04e2f5756198dbd3641b652a0e927ee47ab","sha256":"e3bc75c2589e2d99f40c0ac9a20a7c2dc5de36073b122f35f4eb5c15b3e4a14a","sha512":"45760212e75fb7f5ea75ed748b49e2daca7d95cdcfd3aa265a46e29e97e2a1919734a2e6bc02220bc08600917dce9488e72ebfcb8cb4e050eed531c23b39bac2","ssdeep":"3072:7VjunNa65ZSNP5/WUMNVSBG2+B7XGJFpH4BwbOJ7oIQ52IJH+kk8i:JiNx58jBG2+s3H2J7oDxu8i","tlshash":"bd54e789b292b4a207e720f5417f510bf23b6968b40e90d4f2a5e4d57cb898e9137f3d","first_seen":"2024-10-30T12:23:22.905465Z","last_seen":"2026-05-18T23:31:23.468182Z","times_seen":75,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/02.a138b302.webp","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/02.a138b302.webp HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24324\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-5f04\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GhnJsR22kV4jeNJczYDrugWPW2XQTnfrLLafniFIOQwRXelbHiHzbF4orFtiAgI70zuyAngyw27MlpR4%2BO0Cwga0Aynz5Aegx6PKXe7E7kIcog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c575f52b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b732995510874f2eb78e907573ed6a09","sha1":"1b67eb44db3ac6b498518dd531c21fd32acfe7ee","sha256":"0d0cfa2abe477be930f91d7de0ff30863df60a5ce2fe01b6d858ccfbf6aef185","sha512":"57d690095c2e4d7079931e512f34b8240e8c3943a605fc519dc6b3e91f8144a655191543029a628e241cc8df73f17145d390cb207adf72e35d0ba451ecba2893","ssdeep":"384:zgCF3WczcXpLqbzymnEmlFOUCbFdLMNWns9WeRkCCZMy/H0r0NHlKRnrMFaHeJTx:zwYTEmLOJ2+eW5CCayP+0bKRnrMdqbO","tlshash":"00b2e10ca122cd44dff8d47179b1990bf63bc47a337028807fd6925a285a5f8668f4de","first_seen":"2024-10-30T12:23:22.89728Z","last_seen":"2026-05-18T23:31:23.477746Z","times_seen":75,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/sjunkie_way.143c2730.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/sjunkie_way.143c2730.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"670a31e0-d12e\"\r\nexpires: Fri, 20 Feb 2026 08:55:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O46FFCF61GKlhMTcd4jla%2BQG4oXKEdOu9PGiW0UvyTmrJqUSfNnnZ59EzU3ZWSCN71eGj6guOasO%2FAx0%2F4w%2FijwaFrSlbdsRxp02euzu0yigPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c576f8eb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 695 x 430, 8-bit colormap, non-interlaced","md5":"a89b635493bf8f025a35b3305c31050e","sha1":"02f4e691f653b471f54e6b8d8362e2ed8203fa7d","sha256":"aaa4f4b10965f1d82264687321b3d2fd7fa2bef4c5f8422c4c6c5d85bc774c04","sha512":"89a1b9df9be95e679c847ef1b9262d62b3f29daffc0736783956e1b5b072b94c38f2aa8a21c418dd20afa148bbc887f5e47ceb9aa9bb7807b59321a0c1bf7b1a","ssdeep":"1536:QL2GxTEe3Iba2WCxf/p3XL+QeeESDMTae6l:Q626HWa3prOeESDXe0","tlshash":"4033028cf711fb25682f2355e4680223c7b00d6f289d87c98e53362a5ab47ed4c5ece1","first_seen":"2024-10-30T12:23:22.986133Z","last_seen":"2026-05-18T23:31:23.490269Z","times_seen":105,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T13:13:28.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.easywgcash.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 06 Nov 2025 15:51:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Z3tar4nxUiQgUUJqUuGWqeDxuNkRHZgwKxtx6hMZVtbnOSqB8KOhfm2PtpW3JOM1yw0Fdcu5pnIl%2FMIcLuynFq8MKHn%2FoCpqH3Ycmk4wnx%2B9w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e1e2c523f28cc1b-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5477,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1452)","md5":"575dba6dd48399b7abafe2de0498f91b","sha1":"756fb5b26635073389613e08959916d6349c703f","sha256":"d7289ebf94ce8000f68f93265fef47bc6fa4cf20111e21b9c42a5e3431c7bec0","sha512":"6a713f0325010f8f70861b07c19c84f8ffbbf0dee4a5f2a7a0e387c08f2fa903f101cfb88152925af1cb808e41dd35b47f9894e511accfda40fc1b975552d892","ssdeep":"96:qkPbyPy708zZ/Rm0YD651/Qi9bjzXYztyXCvd3TgM18uGh0bHS+8NT31A12lz:qYbyPy708zZ/RtYo1/Qi93zXYztyXCvS","tlshash":"b8b1a55a6ed371025123a57c5ebba148a159d843521acce53edc812cdf80fdf8de239d","first_seen":"2026-03-25T13:13:58.214068Z","last_seen":"2026-03-25T13:13:58.214068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":141,"dns":83,"connect":27,"send":0,"wait":68,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/01.0ce32c3b.webp","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/01.0ce32c3b.webp HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48056\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-bbb8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XH6weOv1q5aY38H1O24xRq%2BKMKbqnLTNyoP7T8jAmfLCiFJkrOkdNpa51Z70vniZUSbBbZGqB10vmcQn8OYurh%2F6fzwHUiBe5x%2FMcv7xAfvK3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c575f4eb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b39ee97dab8f65c01f076be79a621618","sha1":"8712a471d6113dcd0909685b88c74e6af6e4b0a4","sha256":"2cf02cd72e97681d2a81a77f36ae453fdccf07ee057fc7c6cbc7a4d1b04d15e6","sha512":"24021068d875afe438434476ef5fc8ea587fcc8583e6919546da002b748173208181c80533da1492ebf37b1835fc9f11262a1feb60ccfc2db3d5c42c5da25a7f","ssdeep":"768:camjnefrTbqovYBh3Zk+DPVnydMKXuRtYqmMtMgLhjb8fCFs1QwkyybaCchJg3YD:cXDefHJYBh3ZkyVnftYqXZLh8fJ5TybG","tlshash":"fc23f145e6223f42dad11b360263fc16c0395a9cb1c63cc8b9869ccb56b3ff499259f5","first_seen":"2024-10-30T12:23:22.9Z","last_seen":"2026-05-18T23:31:23.44921Z","times_seen":76,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnczfe.buzz/ads.json?_=1774444409637","fqdn":"lnczfe.buzz","domain":"lnczfe.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnczfe.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 08:53:35 GMT","end":"Tue, 12 May 2026 09:51:28 GMT"},"fingerprint":{"sha1":"17:9E:18:8A:DF:11:39:A3:F3:84:8C:6D:01:FB:2A:BE:00:6C:6C:D7","sha256":"19:5A:CD:C4:36:2E:9B:34:7A:37:DD:FC:70:8F:82:51:04:CE:7F:42:11:1B:42:69:28:13:CF:96:59:F9:39:E3"}}},"request":{"raw":"GET /ads.json?_=1774444409637 HTTP/1.1\r\nHost: lnczfe.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dU2I9gIpAdonDbWBtVenMGB1IhvvoWGLYOeCDVU9%2BTXzc0%2F7OtjKLRQRC8177U01IzogQf62mXhwHp39rTw1HMVXvjxxocgig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c593cb6e51f-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":121,"dns":36,"connect":29,"send":0,"wait":84,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflare.com/cdn-cgi/trace","fqdn":"cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.133.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:28.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:59:51 GMT","end":"Wed, 10 Jun 2026 21:59:46 GMT"},"fingerprint":{"sha1":"58:B5:84:23:E3:FF:0A:1C:12:D9:8C:26:C4:E6:49:2B:39:8D:65:5F","sha256":"DA:9F:CA:34:E8:21:86:5E:30:66:DB:0F:02:94:92:01:3B:65:17:F1:4A:AF:5A:69:3A:BD:E9:A4:8A:17:4C:19"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9e1e2c547b20b893-CPH\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"eaf83fa90132f371adeab2670708e02f","sha1":"5ce44b698ad6d8501c176e8e67f92fd5cae986b9","sha256":"8abb5f0c0d7bacbbded1ad18d92b2e3661104dc628c0f4912f953d58334cfdbe","sha512":"2f02dac33704d21f02d897bd54062a2ce8faf8f53d4c551c7ca6103f93103d5d596fc1a136aba95d213d249974f89293d102db309ed84d9c3ad118790b749ef4","ssdeep":"","tlshash":"91d02bdb952d016c242cc41802ab53c6c7a1010789eab972ede24509afc92da04dddf0","first_seen":"2026-03-25T13:13:58.217138Z","last_seen":"2026-03-25T13:13:58.217138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":95,"dns":27,"connect":27,"send":0,"wait":30,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/home.82d1cd31.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/home.82d1cd31.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-ac82\"\r\nexpires: Tue, 16 Dec 2025 05:14:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SifCXfic5gTpbM%2BO0Xu9fgWwH6Q5kcb42AjsHy0QbuCMGOrIWBhOMndUf4C2MxCIQ0lCY9%2F%2FyzJtfWnz5wo3iT8Bm2U9tVrpbCMlHjd6sF6u9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c573edfb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 563, 8-bit colormap, non-interlaced","md5":"417293efd4f45bbdef2ad9a43ffad401","sha1":"08bd7249137cf9d45c0aa3123a91d6127af697b2","sha256":"e7f81732a32bc083f33d265b6bce354734c99828e93b18af170e9c4340407fe4","sha512":"3af2f1b5eb5699775bcc2a47ac374a59ab5ca54e05b3163f8348760ace871aa020f81d27513940cde6f19e853da6bca2b67d29290ac3b53b5e8a370c612100aa","ssdeep":"768:sUBb0uCVASL1ADLDsZ8Or3HGaaAU6yaNaroRmK2r3YY6gQL9lW:sjkxsZ6Tp6yaNCouYY6gQbW","tlshash":"5f13f19de05daa6d0d34a8e48cfe307b7031ef4be5f2e94020eeb92b5e78085554c939","first_seen":"2024-10-30T12:23:22.936526Z","last_seen":"2026-05-18T23:31:23.476894Z","times_seen":72,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/bonus_3.02d1c94f.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/bonus_3.02d1c94f.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-dfb2\"\r\nexpires: Fri, 12 Dec 2025 16:45:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrlD1eV3YP%2Fk2vzGSO6NWB1NDmCFx%2FHdlGJol7xlQkUtIJ1qyxEMbx2%2FY0naLKudNj4u%2FDYagNussFQuE5OrOzQEFzefvoKsEYowKXKF9E5Xcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c576f79b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 800, 8-bit colormap, non-interlaced","md5":"468e062edf16043c313e518667fda914","sha1":"be97a8e929143c7c606183a6f2c8b9eeee88283a","sha256":"dfef17acd62edbc98b1b0f5977ac7f3e4738a92bc1b7561fe7452b8f9f3293dd","sha512":"2c4f8a68a40141c5fc4d0bc44415ee03f3dcad0045e48b67fd05d47d10064bc734b197c20b0f87a58d18d70d240a9354d41be59cb4553394d6837801095e2d1b","ssdeep":"768:a4MUUQWc0THcC7961DdzxCN+0MXeHoxikPyfxqQ58dQZV5xwNMgUeO+kzl:VM5HcC79+VRXKoxikLQ5MKV//7+kx","tlshash":"e74302937fd2554ed16324379eb62c125ae119283653b6ef0b0f66baf5cba182c1c890","first_seen":"2023-05-02T10:52:04Z","last_seen":"2026-07-30T01:22:55.620765Z","times_seen":249,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hvxfzw.buzz/ads.json?_=1774444409821","fqdn":"hvxfzw.buzz","domain":"hvxfzw.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hvxfzw.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 09:16:10 GMT","end":"Tue, 12 May 2026 10:13:47 GMT"},"fingerprint":{"sha1":"7C:F6:76:5E:86:97:69:C2:F9:1E:E4:2E:23:C6:0B:4F:0F:C4:4E:64","sha256":"1A:D8:75:27:B5:78:DE:EF:7C:56:83:B9:50:35:1A:0B:91:9B:BF:F2:39:01:E9:A7:A5:74:57:28:38:71:14:E3"}}},"request":{"raw":"GET /ads.json?_=1774444409821 HTTP/1.1\r\nHost: hvxfzw.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlABexEeKphgsu8se0FmidWyF0fAwjaYjL1rtb4WShgNmMVP2wUfKObxHUYiIUcvSvbgjQKT57qufZVlw4%2BDbAL3S6K54YrmLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c598874460d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bhjkads12.configtb.buzz/","fqdn":"bhjkads12.configtb.buzz","domain":"configtb.buzz","tld":"buzz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configtb.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 18:24:56 GMT","end":"Mon, 22 Jun 2026 19:23:42 GMT"},"fingerprint":{"sha1":"B0:7F:B0:C3:5C:AB:05:63:45:1B:18:C3:48:7C:41:3C:7F:6E:E9:7D","sha256":"E5:6E:F6:7C:96:B9:EA:7B:23:29:0A:EF:97:69:AC:4C:1D:53:52:E2:95:A0:E7:3C:1A:E7:C5:5D:35:C3:70:82"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bhjkads12.configtb.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qp5pA3s6YINvms%2BEj7Ndaa3heZ4K6S1UB0XiaVRK%2BRD0SJNsQ86TWl8NhFIUmmYrVQ55QeyVTGfAX0HSrKEwdPdn3aKRUnxBaqz9f%2BKSXgtOZIrHSg%3D%3D\"}]}\r\ncf-ray: 9e1e2c56dd5de517-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":104,"dns":29,"connect":27,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easywgcash.top/p?0324852450715354388","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T13:13:27.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"easywgcash.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:46:27 GMT","end":"Mon, 01 Jun 2026 16:44:02 GMT"},"fingerprint":{"sha1":"CA:02:F0:AF:35:56:6D:ED:E3:3F:78:F5:E5:29:06:43:62:DF:75:E5","sha256":"59:0D:6B:E1:79:11:6C:D2:C0:3D:1D:56:F0:C1:3A:D7:77:00:B2:E4:53:6E:EC:31:64:A8:4D:3E:5F:83:37:40"}}},"request":{"raw":"GET /p?0324852450715354388 HTTP/1.1\r\nHost: www.easywgcash.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00hlz8GmCgJX251B1vB%2BedWV%2Brsnd8Zg4YkqKND4wTiF%2BqYaKk%2FWaWj2YDzcdugWHSyK%2FubxNizMoEM%2BXhZHMLWVp06A7w9Wvdzt5nll6LI%3D\"}]}\r\nlast-modified: Sat, 24 Jan 2026 06:42:23 GMT\r\nage: 5207464\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9e1e2c4cedc18a82-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3636,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e2aed3eb64a956e8e824fca95326a169","sha1":"7c5122787223714c46fd4b9eaebae8a6fb40e90d","sha256":"e659b542c2af1c9f4f63de53bbfdb02fa86bd0db0345049135eaf52d97202534","sha512":"439b51c2b3aa44f14d8484c65e3314c5eaa853827f0efbd78eedfb4f63584a1a479f3d62e5d4056367475371c4e26d15833ef37455351b04b8b281be8ef30754","ssdeep":"","tlshash":"7b7121679f12d41902a2c0182bfef108a62994d3c626cc6277dc5a8f8fc1fd5d9b325d","first_seen":"2026-03-25T13:13:58.221835Z","last_seen":"2026-03-25T13:13:58.221835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":150,"dns":80,"connect":27,"send":0,"wait":39,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:28.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 25 Mar 2026 14:01:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoGa5h3OZyrbl0ES0W%2BrcHZNiVjuKVrIfsdLt7820vGtRv5HltmRI8Cj7wEahPMnEdmxLzDcRNOayaBfKlARUdr29xKonfatNfMzEdD9Dhbrsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e1e2c532fe0b4c5-TXL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T22:43:16.181457Z","times_seen":125296,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/domains.json?1774444409214","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /domains.json?1774444409214 HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 15:26:57 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691de1c1-242\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cu8tyJIYTSb7EXA9o3ovdloK7EEZ%2Bq2cUEWUxqsuXfij8zbv5otcfBDzwAPuhbhySaDz7fIpzuMR44K2ThChrEKwH66NQPqm9%2Fo%2BV6POQq6V7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c55b921b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"579be3d554433c38eaf1036329020210","sha1":"33b8a487c2a82f5e587dcb744ef0cb3117b5423d","sha256":"af889bf4d2aa169ecc553b9453656e5b2d7eb3a5089a1f6ab236d1ec85cc2003","sha512":"923b95f353c0212759fe1df163d3454194d0f6faf0b91721485f6a8e66179d80ce611f5b9bfee90417ca80716f131e50dc8cdd744fe8f5805ca80d93a3aa060e","ssdeep":"","tlshash":"25f03186eb2bba0888f78134fa072c6c0c9e71439be8b47a5fd8c5310a7d51766dd19c","first_seen":"2025-12-12T09:47:49.975157Z","last_seen":"2026-03-25T13:13:58.204286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/logo.bf09f434.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/logo.bf09f434.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"670a31e0-23b9\"\r\nexpires: Thu, 19 Mar 2026 07:13:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmuwS4qR3yEDyfT%2BcKGngR6isxR7vMgXXv2sGaCEIGV%2BYvgPmFnf7nmxGhr163wfSpbh0aQdhkbib8TsTI4tJjIdshkb1p9QfMax8PT5pUu3QQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c571e48b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 798 x 287, 8-bit colormap, non-interlaced","md5":"b2c3784cfa5b5a63b219e6482682b1a0","sha1":"c312ee9c7698cde753f5e95fe94081034e4b8b97","sha256":"607fefeeeb067146b43a84973a1f6487053190aee023155512c4ba74ec77b3b9","sha512":"4d7105f08d03cfbbd8f92b507ab0cf316c8486342a6f3bc5400a147e9c196d43c50366c895cf02a5d8887da41ca449ba5ac61ad68960f5cfb17dc8d2c601934e","ssdeep":"192:HA1H1QL38g0c4NQ+mxSincGHc1QGuVx9j92btgqhriMrtdhb33oQ/iMtsrWx2o:HA1HMD4dqSicec1QG892Gqhrbr5rYMtJ","tlshash":"7d12bf5dfd1282412c4086256c73d221ae3d619cce70aa7dfd36e01784da5b8ade0acf","first_seen":"2024-10-30T12:23:22.931126Z","last_seen":"2026-05-18T23:31:23.494713Z","times_seen":110,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/icon-01.78c3c47d.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/icon-01.78c3c47d.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-4150\"\r\nexpires: Tue, 16 Dec 2025 05:14:24 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2xTMxultHqQruYrE5hCQk2%2BABtRgTaJhafrsp4s%2BMyDZoGz9qE5AMJXM6vLXGj8I771HqyPpszpZMgGfHpdWxKsL%2FcT%2BPumke9HUo7Ez1rZ7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c574f0ab4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"6ef666fde5d39f3acc3c02b897e2b800","sha1":"9f771a939667440e96d4988bde80425b6a2a8446","sha256":"a6f998e45c128ef6722017f5f270247fb5efc0590add771b2f0355f565bb4fcb","sha512":"b3b57acc87dc5281f8ecfd06ab3d6932f76d2e306856f80054a3126bb3e8397d6e00d70ea600e7a2e04a6f6d4bea88bac3a6b12e9179dc005f77d61da48073c2","ssdeep":"384:y6PbklppxkL1gUiNQP5vhc5WTLfCM4o0Z90N6nZ/z1a7R0o2p0fDSfsnC:pYvkLiDMZo9vZyM/zs7ePp1n","tlshash":"d172c08433349decca1f31fa084fbc655d2879ae13b858f77546de049da64f620b6385","first_seen":"2024-10-30T12:23:22.94256Z","last_seen":"2026-05-18T23:31:23.435163Z","times_seen":108,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/fonts/fa-solid-900.40ddefd7.woff2","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /fonts/fa-solid-900.40ddefd7.woff2 HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/css/commons.64ead512.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 154228\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-25a74\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PG0UIQB%2BBtfiHYUIBL96KTglrL4R9dDLyWzj3jiAXh9GeTwBK22og4%2Bz%2Bgx6Q5Qn0njms%2FoCL8ZLDaoA0EgxC%2FH3SNp7sZ%2BnakuUNC14HW7I%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c57b8adb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154228,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 154228, version 769.768","md5":"55b416a8df21f9f987aa352f10d1343b","sha1":"2717f3f58271f2f2e6120d9937c7227002656d34","sha256":"d76fb4e841748a3f6bc63efa23156e02631c283bf41f84efcbdaf339ea3e1b73","sha512":"7c4983811eba2ae80998c62c0eb48cc53eec26e3ca4222d5cf0a758a5ea92e6a14dcfed4fe5b7ef5513f89be2c0f336d0131687fa3eddcbd4bb218bbd6beb985","ssdeep":"3072:1s6054PmrMMxqMo/sE4yN1JWxUY+qI2kqdYt2B1dqchgjwQ:W68io3G5JYktDt62b","tlshash":"fce3123d3f8fc58deaa2037b7c645050a1b9bfa9a9f1293dc67028ac11557e17b48d8c","first_seen":"2023-04-05T03:24:19Z","last_seen":"2026-08-16T16:56:51.644572Z","times_seen":18912,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohtdaw.buzz/ads.json?_=1774444409821","fqdn":"ohtdaw.buzz","domain":"ohtdaw.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohtdaw.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 07:44:28 GMT","end":"Tue, 12 May 2026 08:41:51 GMT"},"fingerprint":{"sha1":"CF:41:9E:46:5A:30:6D:7E:3E:94:4A:A5:1A:77:55:A5:2A:DE:4E:C6","sha256":"4A:B7:DC:68:F3:B2:BC:95:22:06:56:36:D8:62:82:FD:2D:CD:A5:64:2B:77:16:81:82:DF:D2:13:AD:61:9D:4D"}}},"request":{"raw":"GET /ads.json?_=1774444409821 HTTP/1.1\r\nHost: ohtdaw.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PKXkfrudebf77T6KaDJPUO36ioZeW%2Bqf001QYWmYXi7H4uyIuk8KMwCV7eeqErvGzyvNPUGQIjvjoyXuTkfyluaUpe8s3xbAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c598ddbe51f-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvzeag.buzz/ads.json?_=1774444409637","fqdn":"nvzeag.buzz","domain":"nvzeag.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvzeag.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 20:06:01 GMT","end":"Wed, 17 Jun 2026 21:04:36 GMT"},"fingerprint":{"sha1":"3F:F0:ED:A0:D6:F7:2D:0A:54:C3:2E:DF:D2:0D:0D:FB:FC:78:09:E4","sha256":"30:1F:2F:D9:BC:C3:43:07:44:55:43:1C:8A:26:6F:14:9C:E6:C9:7D:D7:14:29:C2:37:50:1C:58:8D:01:A8:28"}}},"request":{"raw":"GET /ads.json?_=1774444409637 HTTP/1.1\r\nHost: nvzeag.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIQYd7YGSAgPPbdoNlPaNDlDhpVOxOJ4FHEC9eQSgGs%2FP%2FFG45mLgkXPMLLSFZ4irzQ3IlSP1R3VaNpHxTxqfutbrn0oXUNg5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c592bc7d81e-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":110,"dns":24,"connect":31,"send":0,"wait":96,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/04.56201203.webp","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/04.56201203.webp HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63856\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-f970\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJ%2B5cD52wUD2ffYTAUUcUWM1iV7qHSYLB%2FD%2FokecfICFFwCdlqgyU84FbqYBRLp5fEvGdwcaO3XUi10IjlrrRxlTP2aI3UWH2go1u1OzH4cXWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c575f5db4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c056d29e3bbc59c71d98bef2afc7e5a","sha1":"e9adf9a1e9cce97a3c4abf76e9251604b2fa47c0","sha256":"396498a9d523777e55ae7abcc6c3d0e69125395a40bef1a01d0e54914a9b0f59","sha512":"88befd9cf0e11d3779d1963912bdbbbf1f43edb42e1dc78ab798f18c9b4165627f2cf1fa901efc665021743c058ef817d410bd97e13a3652956146d9f9a05dce","ssdeep":"1536:GrZAtYccEO/jlpXSUJQk4rwixIZ7pGJia7tXGOTUW0Mmu0GuOkS+5gU:GrS/cEiXiUP4rwikc40VUW/1KOL+5","tlshash":"235302afc6512f33534a65bcae3ee048d51ea3a6eb902b20c4ddd401f5eb89c814de53","first_seen":"2024-10-30T12:23:22.966175Z","last_seen":"2026-05-18T23:31:23.488473Z","times_seen":75,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sfaehe.buzz/ads.json?_=1774444409637","fqdn":"sfaehe.buzz","domain":"sfaehe.buzz","tld":"buzz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sfaehe.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:34:03 GMT","end":"Tue, 12 May 2026 17:32:27 GMT"},"fingerprint":{"sha1":"41:68:5B:CE:6C:4B:50:69:0B:63:9D:94:7B:31:5B:01:9B:91:44:D1","sha256":"38:DF:D7:9B:BF:BA:37:B8:1D:FD:0E:A9:64:F4:BA:67:94:DB:07:94:10:94:DF:BE:51:64:B3:F5:18:5C:85:7D"}}},"request":{"raw":"GET /ads.json?_=1774444409637 HTTP/1.1\r\nHost: sfaehe.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiz9KC8wfes0V%2Fm9c6MiliDddU7%2FnAz99ZK4ECsWB9bgqSMFu%2B3bx6tLDXDPPowPYSs%2FWgKEqtcKIDOPKXJRczLajktlK0Jh9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c59393bf8e1-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":117,"dns":28,"connect":29,"send":0,"wait":101,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/locales/en.json?1774444409215","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /locales/en.json?1774444409215 HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Sep 2024 08:04:23 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"66ee7e07-b2fd\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQQBoDgpsqVCn2D77NpPtf15%2FSbaCFgd8lcrs%2BYnHIT8%2FpDuelKzzOPV12B%2BTUPHSP22MyYNoEEPEP2IrpraORlGmheXDw%2BQUZxUgkt2C6ZUeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c55c93cb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"83ba0e35ac6cdd7e7e904de364d5c68c","sha1":"ab5d57aa28b4abdca1013d0205d7addbb519886b","sha256":"4884ac4c17ea4ae020144a638c1251f3d896ca30060bd7ab90a05ca22a191dc4","sha512":"8f7243a4bdbc30d9c1166f0fc8c4dd9235bb86d57ab6fea9112f8b8160b98a0612a2b9b4681fa49e4e7789f870bb5e542d026ddebfffcdea3c75794de376074d","ssdeep":"768:DcCx17EmstJ/gZKEqDAMtfGYh1HVTfN/KxKVWrf:wCx17EmeJBA1YfVTflKxG+","tlshash":"7423b61bdf07527709d3e2517a862ea2f724507c2365c91e9fdd8098239ea2a5b3f3d0","first_seen":"2025-06-06T09:40:56.526935Z","last_seen":"2026-05-18T23:31:23.429969Z","times_seen":37,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/commons.00c6309f.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /js/commons.00c6309f.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 26987\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:23:08 GMT\r\npriority: u=3,i=?0\r\netag: \"670a31ec-696b\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xrrft%2FrM7G2fbURSRGCwkKvpBp%2F481ZkHYHrVLfbcCqPry5btL%2BxRgytPtCoiLCpzSzy7yrz%2F%2BFUJbBb9BQXa28RanKc4lE7E2DHgm46yhMpqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c564b77b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"2feeb52f7fef995e8b6e27de1e76b91b","sha1":"b4a10528b19070cca1aed284b4d85f4c7c631836","sha256":"607473483b4bc8f5fc76dcbee7ed36bf1a4aef99f1c081914df54dc1f001a989","sha512":"ee330638891b12f1e5de217577f1d05322725c5b4ee82a5a93c5d7d02a762e1694c89e72c73a2f9e8030d9a4d8f618d30a0baade5b98a25540d91abfedf25d6a","ssdeep":"1536:7L4omV32Gy7ydlqwY8xE5i/0it+yOHK4tdYC9k8mRtFjqOaeraxo:7L49Am9EcxT","tlshash":"43932a6eb1c1f03e1ad76065512f250af53a2e96a41e8084f779d8e0ac748ad132ff7d","first_seen":"2024-10-30T12:23:22.917796Z","last_seen":"2026-05-18T23:31:23.487227Z","times_seen":77,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/03.c106721c.webp","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/03.c106721c.webp HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52954\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-ceda\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3N%2FbzfMLmhjhKGm2AZD9VvuaViPb3tufeK3SYKA836%2Bxd77fqYt4xizZLmbf1wfKBQoe4S2QtnjMqkrjmkk3U18%2BY7X6k3J%2BEVxLdp477wTHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c575f58b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70b67765585461ab0f71abecf6aff4f5","sha1":"8238051351e4a4f0ffeb8f42d6980b47be578f68","sha256":"8cf37afe1c2394613e41e4c7d7397dec5eac6bf8fd940c5800f3d01e04291d1c","sha512":"0676d6cf4a92920fa84f8bbfb784743b6cbb1b8b103249a0f0b8a95be66c05ed544b65d0189953b037a692dd73ec3bc8e77a71e22ed6acb905c1ceadc67c2a00","ssdeep":"1536:L5L2h3rxI8jMdeVFLE6bKhGu1vLbLj3SA3Ib:LE3IEMAlK31vLWR","tlshash":"5d33f2a3af711342dcbe57733097a58b27f3869045e573a268e8a6c215112d7b03e3c6","first_seen":"2024-10-30T12:23:22.902639Z","last_seen":"2026-05-18T23:31:23.495661Z","times_seen":74,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/fonts/Feather.f76bd32d.ttf","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /fonts/Feather.f76bd32d.ttf HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/css/commons.64ead512.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 65112\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\netag: \"670a31e0-fe58\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qm%2FDXxTYe3jFNUcpF2ydOywQsq9CHFv8u4C%2BFDFaiTjYXxLvdsPkoNAj8GBjN41VUeH9mPYqG9QVudIJVkn5AVZk%2FEawWm%2FJb%2FNEbISpit4VSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c57e961b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65112,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, Feather    ","md5":"fe1594343a6aed9427c646993d06ea9c","sha1":"18d0455f25678b44731eac73dc8654df1d2c314e","sha256":"e103929dd758126ea4a090ff0e33b620f3ceb1b81ffad1345023c95661c84d8c","sha512":"bfbbb4e68322738a47495fecb5da2dbc17bda0c6c2e954fa1e70b9eb658701fed39ca3858f7b38c182fda7871252dc12765161868057748321ce94bd298ab7da","ssdeep":"1536:GAbq8WMb9OSQp0vzMoOUSVs3jwgxhqJJAS4ClCsPE2YWFgI9zYWkeU3NLyce4Ql2:GAbPWMb9OSQp0vgoOU6s3jwgxhqJJASF","tlshash":"ea532957b34bff0fdb6aad3ba801a5b24ee9d425832fb18759815d038609cb44c9c7c9","first_seen":"2023-04-05T09:59:27Z","last_seen":"2026-08-15T19:30:49.448449Z","times_seen":1284,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/397.b84f500c.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /js/397.b84f500c.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3209\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:23:08 GMT\r\npriority: u=3,i=?0\r\netag: \"670a31ec-c89\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nthD4wLQJyOnJUn2cdDpEbKK9G3GKkyoXyoa%2B4gpsRzcNcSSHe4fi5WtvUYV1cCRjKeLgQYp28NV9Ro2vBzcOX60rlfMW%2FKrd%2Fvza420n3bYkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c565b87b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17975), with no line terminators","md5":"86aba601def3d722b72d0fb3f3af93d2","sha1":"2a64b9d55e10d02779efec4483f0a75813bbb799","sha256":"1da4144ef488c1ef2841b7df10da7c62cc08edff5f6361c7d5c25ef891ae7e8b","sha512":"2898fcada0b53bf4a27420d7b03e6bda236bbfebbe8a33bbc3391ca6b9c327a2b7c252c0ff0c618d297864cac83f49070122e9a9a962f81aa1d4d44eba28f667","ssdeep":"192:8ES5EKdNz+PQsKdNzfFJ50I6lP6bgW+ERLEyBTVOLbKbcb96xLaVCz/kI+NW044v:8EYZlPd3V+60wLkCNe","tlshash":"39823022a896e2beec1bd41a115d3630d0602fe4c520a587ff78cdd4ead0e796b1d76c","first_seen":"2024-10-30T12:23:22.907978Z","last_seen":"2026-05-18T23:31:23.457843Z","times_seen":77,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sfaehe.buzz/ads.json?_=1774444409821","fqdn":"sfaehe.buzz","domain":"sfaehe.buzz","tld":"buzz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sfaehe.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:34:03 GMT","end":"Tue, 12 May 2026 17:32:27 GMT"},"fingerprint":{"sha1":"41:68:5B:CE:6C:4B:50:69:0B:63:9D:94:7B:31:5B:01:9B:91:44:D1","sha256":"38:DF:D7:9B:BF:BA:37:B8:1D:FD:0E:A9:64:F4:BA:67:94:DB:07:94:10:94:DF:BE:51:64:B3:F5:18:5C:85:7D"}}},"request":{"raw":"GET /ads.json?_=1774444409821 HTTP/1.1\r\nHost: sfaehe.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IYoz5y36jfiLh%2FLTWKJn0wR4AhlE74LLdYfAgGUFSRWkiQnjr54XYQycrNhXj59ZBHMj4h2%2FnihC6a1EOpcTbWvGpdTyjrMTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c598a52f8e1-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/chunk-vendors.d57f73b0.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:28.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /js/chunk-vendors.d57f73b0.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 81847\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:23:08 GMT\r\npriority: u=3,i=?0\r\netag: \"670a31ec-13fb7\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQehSdxfJocC5CXrYoxeASvDGjybH0FydZanMGPdN3dDm8pamKqwQr8g0%2B7A7lSBOQf6UtQTUPIoTNjtMd4IvRYBYZqjoGFKxEzdwLR82FXL9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c53da7cb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65106), with no line terminators","md5":"c8bc9e5d1e3b984d8ff9da828f72fdb5","sha1":"ad8ee04e2f5756198dbd3641b652a0e927ee47ab","sha256":"e3bc75c2589e2d99f40c0ac9a20a7c2dc5de36073b122f35f4eb5c15b3e4a14a","sha512":"45760212e75fb7f5ea75ed748b49e2daca7d95cdcfd3aa265a46e29e97e2a1919734a2e6bc02220bc08600917dce9488e72ebfcb8cb4e050eed531c23b39bac2","ssdeep":"3072:7VjunNa65ZSNP5/WUMNVSBG2+B7XGJFpH4BwbOJ7oIQ52IJH+kk8i:JiNx58jBG2+s3H2J7oDxu8i","tlshash":"bd54e789b292b4a207e720f5417f510bf23b6968b40e90d4f2a5e4d57cb898e9137f3d","first_seen":"2024-10-30T12:23:22.905465Z","last_seen":"2026-05-18T23:31:23.468182Z","times_seen":75,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/css/397.d97ad719.css","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /css/397.d97ad719.css HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-54\"\r\nexpires: Thu, 19 Mar 2026 21:30:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnJBGueMQO4bm8PQXVGxBUit1KsANkUZX35dJRh9ReiHsFXFv77XbgWh%2F%2BlahoWjjIGQDMYC2N74QGCiYDM7t9NCFzIEV%2Fu6%2FAZS%2BY68b4ItwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c565b83b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"ae4c7746e2ffd966cadb8f4d04151dd7","sha1":"eb0b27433a77b2151df21eccd5ee7cd292f76418","sha256":"0381945b6d57c874f5f86228b7a20f846f755a02dad5e9fbb690502ec6d1acf6","sha512":"6023cce0f30e67f5b69339e302cbd9c68c4287a16811c00dfd06f0290484317d51ad4994cae3ab406baa8ca47d480f7879c12119ec9f8818b3e7c8c524a41594","ssdeep":"","tlshash":"01a01205a48d00051d938016105036741e38915186888b548426222001530b82420000","first_seen":"2024-10-30T12:23:22.926023Z","last_seen":"2026-05-18T23:31:23.493705Z","times_seen":76,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easywgcash.top/p.js?1774444408037","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easywgcash.top/p?0324852450715354388","date":"2026-03-25T13:13:28.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"easywgcash.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:46:27 GMT","end":"Mon, 01 Jun 2026 16:44:02 GMT"},"fingerprint":{"sha1":"CA:02:F0:AF:35:56:6D:ED:E3:3F:78:F5:E5:29:06:43:62:DF:75:E5","sha256":"59:0D:6B:E1:79:11:6C:D2:C0:3D:1D:56:F0:C1:3A:D7:77:00:B2:E4:53:6E:EC:31:64:A8:4D:3E:5F:83:37:40"}}},"request":{"raw":"GET /p.js?1774444408037 HTTP/1.1\r\nHost: www.easywgcash.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.easywgcash.top/p?0324852450715354388\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Jan 2026 09:20:56 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6958df78-121e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: br\r\nage: 5303014\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FVm4zBAs8NrfaQra1glH4RR%2F5SBu%2FOv6Ffw7ehr0SkrisV3MdZPuTbPHdVLlzHHN5Ouss7i7kAPwUwNdnnmbwaebXs4n1LyHwbFOb%2FtRT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c4e5d1c359e-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4638,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4da0773188b5f7a75c087e3197ab29f8","sha1":"748e1b6813e455341d1a3437233d48afd2f24091","sha256":"f793b930edbce4752175671c07049bb7ff27148b08ff44e87b4f39d382b852cf","sha512":"8202d86b8751efbad15cc6b1b09c059c266c4f89aba023d78bf725b3300a6eec8bb7fb739bc5d40e1e0fbb525dc444de987d354873110bd13fea50327950ae87","ssdeep":"96:O7UsuDgKpKjSPMGOmQ2aLxHjQVYYf7kTmBZEkER95:olcgK0jSXUxHjQ+YoTq2","tlshash":"e9a140095617320905fb7339af43a008eb25f0237548855dbeada9001f3ea2dc1e5fec","first_seen":"2026-03-25T13:13:58.231172Z","last_seen":"2026-03-25T13:13:58.231172Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/app.8cbac381.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:28.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /js/app.8cbac381.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7559\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:23:08 GMT\r\npriority: u=3,i=?0\r\netag: \"670a31ec-1d87\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGLMyiBJGAyGy9K9b2iJHc35u3bZycl6O%2Bni3TOAWkbWMt3tG2Ly%2FWPSG8sfJfWwMO6qzPYY7%2Ft4nPxUsAP8Gg5AjfXB753Wp4Xlj%2B%2FrV91dow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c53da78b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25758), with no line terminators","md5":"947ea76383c016f9594143e245372ec4","sha1":"6df86001697bc7f0672bb4ef694153e25d55d0cc","sha256":"bd53163661d7a6fd1f41b4b28e1e26ed2389110de303b69729b21ed55ba2bc53","sha512":"e20668cd2e38d0561399412f6a40488c4507d44a00ce5b02583426d8ae15100336d196704f6ab8d31e42602ea32903f0429d31e126c3073f5d74f436e9a8e4b6","ssdeep":"768:oJPg7ihPR7Mx9ZK++wyMrBB0URU6k0XzGqBARv4YmKvrIvY11:oJPg7yPZMx94++urBVRhk4GqBYv4Y9UQ","tlshash":"8ac2099f73073b2542e515fda97e3214a0348865b81e0d70b7179c827c99f1e63a1f9e","first_seen":"2024-10-30T12:23:22.956784Z","last_seen":"2026-05-18T23:31:23.447537Z","times_seen":78,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/js/app.8cbac381.js","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /js/app.8cbac381.js HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7559\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:23:08 GMT\r\npriority: u=3,i=?0\r\netag: \"670a31ec-1d87\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 277960\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioDCDOAPiI183d61b9FrKlOdGtAtPLxRY8izWppKBEDmcyrsTu3gPh0Qscy%2Fdp%2FwO%2ByKi%2FBHvEBbyEw8aMu7CtwEpQxllYkkiSR7WMKtUzxOBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c550edab4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25758), with no line terminators","md5":"947ea76383c016f9594143e245372ec4","sha1":"6df86001697bc7f0672bb4ef694153e25d55d0cc","sha256":"bd53163661d7a6fd1f41b4b28e1e26ed2389110de303b69729b21ed55ba2bc53","sha512":"e20668cd2e38d0561399412f6a40488c4507d44a00ce5b02583426d8ae15100336d196704f6ab8d31e42602ea32903f0429d31e126c3073f5d74f436e9a8e4b6","ssdeep":"768:oJPg7ihPR7Mx9ZK++wyMrBB0URU6k0XzGqBARv4YmKvrIvY11:oJPg7yPZMx94++urBVRhk4GqBYv4Y9UQ","tlshash":"8ac2099f73073b2542e515fda97e3214a0348865b81e0d70b7179c827c99f1e63a1f9e","first_seen":"2024-10-30T12:23:22.956784Z","last_seen":"2026-05-18T23:31:23.447537Z","times_seen":78,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/css/commons.64ead512.css","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /css/commons.64ead512.css HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 29034\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=2,i=?0\r\netag: \"670a31e0-716a\"\r\ncontent-encoding: br\r\nexpires: Wed, 31 Dec 2025 20:14:18 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErRTnV%2BH6AYn7EKLGfkqlKOPZ%2BmTaw6Hw3XoXbBYg39WkhNKzyLGiG4fbqnRG47rg6HZK8%2BSUL3xF%2BikMPdmSjqMQ9sk3tYqOf0sV7fcaUyywQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c564b6fb4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195050,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40661)","md5":"1b1f3bbbd609d99bf98990a5f1a91698","sha1":"0afd53f1045e79929279c27f26032ecf95ef58f6","sha256":"a5a75076afaf79ed82223a13ecd1bde3b7cc7c567e4d9a9c6fd73756c3e15270","sha512":"1fb6cc46985c790619cbd8c7842b85950e7630c8a0911f17f21809cf5f31da90c827c4a384d88247170d9f6e205e4afbb6374eee49d1b03650ae68f9fb4422d1","ssdeep":"1536:jIcOPfcMVMFsp6/zZzALMDIb05srVBiL1wnXNASURUr9K:r1wyUr9K","tlshash":"8014b577b491212990278a52d7cc5e7c5e2cd61356620deeb383780acb86bde32d670f","first_seen":"2024-10-30T12:23:22.920143Z","last_seen":"2026-05-18T23:31:23.467263Z","times_seen":65,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/icon-02.7a841b7e.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/icon-02.7a841b7e.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-915f\"\r\nexpires: Fri, 12 Dec 2025 16:45:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiUjFv2fX1rdHKE37BxcV3hbPZnhuKtnCvRA0e2dlVC5jYct04uOZ5TBeV360%2BVeN861qTPZclkTV1R0vqHLnzbipdhpBdEeRGFt%2FNFXWvIQ4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c574f16b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 432, 8-bit colormap, non-interlaced","md5":"3892ccb1d7e148877883fbbc1afb383e","sha1":"0b76c8bc01f2c1ba9f70b0eb2532eb6ce4fcbc7b","sha256":"a9cf0440e55d837adaf5547faad58ff626f3300ea722c40efca03ad9ed77e528","sha512":"7547daa36d33e2112f6f8ac7eb3aafe319a550162d53dfb1d8986194632e9649ef6d388403810ddfd19649aaf930b3e9158cafcea499fb3646cd179585e8ab4a","ssdeep":"768:iWdqVHQEPZtDPGeH08VK7QEGiL5GoV52LrzrzV+e:9qZQ+ZtqmaMEG2ZA99","tlshash":"b2f202407decc482a3d8bd9354bc06cc237ab49a42f2e6593c1e19d58f99eb6906cfd1","first_seen":"2024-10-30T12:23:22.983266Z","last_seen":"2026-05-18T23:31:23.436858Z","times_seen":108,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnczfe.buzz/ads.json?_=1774444409821","fqdn":"lnczfe.buzz","domain":"lnczfe.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnczfe.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 08:53:35 GMT","end":"Tue, 12 May 2026 09:51:28 GMT"},"fingerprint":{"sha1":"17:9E:18:8A:DF:11:39:A3:F3:84:8C:6D:01:FB:2A:BE:00:6C:6C:D7","sha256":"19:5A:CD:C4:36:2E:9B:34:7A:37:DD:FC:70:8F:82:51:04:CE:7F:42:11:1B:42:69:28:13:CF:96:59:F9:39:E3"}}},"request":{"raw":"GET /ads.json?_=1774444409821 HTTP/1.1\r\nHost: lnczfe.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uplAvODjgFPNL8uDlsOWzWEhgpWjK1Q%2FJXa9OeAIi4brJOlUoGlieuvMT34BlvlDFwcKAJGhhNyNxj4kgukHSbJKw39YEoWUkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c598dd4e51f-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click9awages.top/","fqdn":"click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"172.67.145.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.easywgcash.top/p?0324852450715354388","date":"2026-03-25T13:13:28.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.easywgcash.top/\r\nOrigin: https://www.easywgcash.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 19 Nov 2025 16:02:42 GMT\r\nage: 10876246\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=za12LbfR3cwSt9ECB4nT%2Fmef%2BIw%2BBEB4IKf1gjfpvt%2Fj23TISENh3LzyVMyuHJ9GXM%2F1H62DzDcJvX%2FXuIILEkLJmrRdzHBPHXdvwuHm\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e1e2c4f9c4ea0c9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1560)","md5":"2fc0e53c19dd5f65186a91b0aa3bcd75","sha1":"869102f988edde1adecce1834e9049ed2a7fede1","sha256":"87d6b5013601c168c49cea97d8413bff32c229848bd0af6007a6389e8d828cfa","sha512":"c40023308c4fa18cf84e6fa99ff0963fcef6fa80d70ff369e11dc5d963058e58b8e0ff04eb024bd06aa3a27fc9e783cf9582f82a322a286a51876d543fcd5a02","ssdeep":"96:qkW8byPy708zZ/Rm0YDg51/Qi9bjzXYztyXCvd3TgQ/9N6uGh0bHGatNTz6k121S:qebyPy708zZ/RtY61/Qi93zXYztyXCv9","tlshash":"dbc1d7cf1e9371154663346c7eaba444f268e503121edde43ddc91898f80eaa8de134d","first_seen":"2026-03-25T13:13:58.236136Z","last_seen":"2026-03-25T13:13:58.236136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":135,"dns":64,"connect":29,"send":0,"wait":52,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/icon-03.78cfc15f.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/icon-03.78cfc15f.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-bce3\"\r\nexpires: Thu, 19 Feb 2026 17:36:06 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gM5ho%2B7axiwue3yRg6iSlvYyXzlS4GlMWUre3EEGrcZOB8OzpowSTEsWhDAqCUEXHb9LiiFdEWbGe3JaYJbtCJ9ZnmCSzkgfcXlEgS95HZVjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c574f1ab4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 626 x 417, 8-bit colormap, non-interlaced","md5":"dc6de03eed3d788ff3c098b037cd900f","sha1":"211cf6dcdba33f993c945ccc22751755296351eb","sha256":"278bd6b060a84462d1dde82de20b9a5e01bde6c23d943484c778910dfc693412","sha512":"d53e131f4f1ae0b7d4471234964d92e9615ed9d6c878f21823befa15a9c33616fdbc9a2841e9d0d2d317df44daee8e1573d07bee1bd7bd4310afaf2f5da5afe2","ssdeep":"768:LYlu3M5HApOOOQx4eiIjt3u3U4kAlnz2w1aAounPHKYa2q91m9qNJ9yrg:Lq5HEl9t3ujJnSA1KYPScEJJ","tlshash":"a52302d8f1d8d4b52a4efb83e63985d7a6ae5c20d6c890974e26f47c23f0306c22b446","first_seen":"2024-10-30T12:23:22.947206Z","last_seen":"2026-05-18T23:31:23.438193Z","times_seen":106,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/img/bonus_2.2359b458.png","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /img/bonus_2.2359b458.png HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\u0026_ga=1774444409302\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 08:22:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"670a31e0-3410f\"\r\nexpires: Mon, 09 Mar 2026 03:13:54 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gShod5maRaDe75gL314lY810lXFhBySU4Hy4ag6oofpG253Dw%2BLx%2BoPC62KEjOFxlG5BoKphXLFbl5Cg%2BLJMu0vyBmM6x%2Fu%2Fq7OJiOsO7KD7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1e2c575f69b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 800, 8-bit/color RGBA, non-interlaced","md5":"fec591d2c382a0c51227dd979441c991","sha1":"f9aa92d1f72401d02daa7c0deaf2f2a3d97c8bd8","sha256":"63fa7664b03e7acd2c77a5f54580757aab4060965264f381c7eb6e54613ac992","sha512":"3eefb9426cbffdcfaf08a3675c72295e53e2abf29cbcf4204cb682ba8fc1718c05a541311a02e05712794bc43bee3dc8f3865476554e48524e8a51187574f44f","ssdeep":"6144:WscglDqJRXWJOMQDOMrgbK03DoPDGdHrttllRU7s:x1gTXXNyfJDkGjxREs","tlshash":"3724124cf67688124c816c3762c49abf3b601d574700ba2e4ed0ba59dd3e478b789f9b","first_seen":"2023-05-02T10:52:04Z","last_seen":"2026-07-30T01:22:55.654598Z","times_seen":247,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hvxfzw.buzz/ads.json?_=1774444409637","fqdn":"hvxfzw.buzz","domain":"hvxfzw.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hvxfzw.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 09:16:10 GMT","end":"Tue, 12 May 2026 10:13:47 GMT"},"fingerprint":{"sha1":"7C:F6:76:5E:86:97:69:C2:F9:1E:E4:2E:23:C6:0B:4F:0F:C4:4E:64","sha256":"1A:D8:75:27:B5:78:DE:EF:7C:56:83:B9:50:35:1A:0B:91:9B:BF:F2:39:01:E9:A7:A5:74:57:28:38:71:14:E3"}}},"request":{"raw":"GET /ads.json?_=1774444409637 HTTP/1.1\r\nHost: hvxfzw.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfAPXu4p7GoWQSnwuLvABkxc1MSwlQJOS9iyf0Z8PSriUTZgtwyzX9un8MrwV%2BaZJoC%2BGh%2BQ8Q0ignxtkLIDyHjIn32Z34Lu9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c593f43460d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":123,"dns":34,"connect":29,"send":0,"wait":95,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easywgcash.top/favicon.ico","fqdn":"www.easywgcash.top","domain":"easywgcash.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.easywgcash.top/p?0324852450715354388","date":"2026-03-25T13:13:28.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"easywgcash.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 15:46:27 GMT","end":"Mon, 01 Jun 2026 16:44:02 GMT"},"fingerprint":{"sha1":"CA:02:F0:AF:35:56:6D:ED:E3:3F:78:F5:E5:29:06:43:62:DF:75:E5","sha256":"59:0D:6B:E1:79:11:6C:D2:C0:3D:1D:56:F0:C1:3A:D7:77:00:B2:E4:53:6E:EC:31:64:A8:4D:3E:5F:83:37:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.easywgcash.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.easywgcash.top/p?0324852450715354388\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:28 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Aug 2024 17:07:22 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ec65pI1T9j8AmT0fWa3aEsMEqGO2J56RfIadHIBcPGW7TNjw5XRYrSSXuiSfKFZglEF5X5l5W7iFXDKelxi9t%2BcFcuemznk5Ia4Js9l0ctI%3D\"}]}\r\netag: W/\"66ba414a-67e\"\r\ncontent-encoding: br\r\ncf-ray: 9e1e2c4e5cf9359e-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 16 colors, 4 bits/pixel","md5":"41e8e21253d0c580c7adb293d17b4962","sha1":"5b5d8173d5cb719adffc8625ad5fe76f395997f3","sha256":"3e50662b08bb11108d4e0c93bcfd8efdf7be66632049666f63e182f729021ff0","sha512":"1dd59ea074b19c812cb43016d9273bbcb6654545ecf09e1fb55f9ad3280d8c5fa1cf669c5bcd636acb6be5e6c7849bebbfe217c41e0687a16948359286455870","ssdeep":"","tlshash":"9231cb7420b9ec0be3357238480f4f95f543aed2278954e738457f291eb15e099730ac","first_seen":"2024-10-30T12:23:22.923365Z","last_seen":"2026-05-18T23:31:23.50005Z","times_seen":111,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"www.easywgcash.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.click9awages.top/favicon.ico","fqdn":"www.click9awages.top","domain":"click9awages.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"click9awages.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 18:31:34 GMT","end":"Fri, 29 May 2026 19:29:58 GMT"},"fingerprint":{"sha1":"D3:1B:1F:C8:B8:44:8E:D0:84:1C:DC:A1:7B:74:9A:0F:A2:FD:E0:FB","sha256":"7D:70:78:84:49:53:09:E0:AF:3B:91:14:C6:4C:A2:1B:AC:04:2C:08:87:76:37:A1:16:45:37:D1:C9:21:3B:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.click9awages.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Aug 2024 17:07:22 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgBTG1b%2BcvTrHcqCMeI0%2BEDXtcnOVspHJ7%2FUUBTpqUArSwKvF%2BSFaP1V%2FkjJe%2BqCOz0a2V9YHpaLQ5oPJecMnOIy2tOIwIYDYlqvVrHtelclMw%3D%3D\"}]}\r\netag: W/\"66ba414a-67e\"\r\ncontent-encoding: br\r\ncf-ray: 9e1e2c54ee50b4c5-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 16 colors, 4 bits/pixel","md5":"41e8e21253d0c580c7adb293d17b4962","sha1":"5b5d8173d5cb719adffc8625ad5fe76f395997f3","sha256":"3e50662b08bb11108d4e0c93bcfd8efdf7be66632049666f63e182f729021ff0","sha512":"1dd59ea074b19c812cb43016d9273bbcb6654545ecf09e1fb55f9ad3280d8c5fa1cf669c5bcd636acb6be5e6c7849bebbfe217c41e0687a16948359286455870","ssdeep":"","tlshash":"9231cb7420b9ec0be3357238480f4f95f543aed2278954e738457f291eb15e099730ac","first_seen":"2024-10-30T12:23:22.923365Z","last_seen":"2026-05-18T23:31:23.50005Z","times_seen":111,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvzeag.buzz/ads.json?_=1774444409821","fqdn":"nvzeag.buzz","domain":"nvzeag.buzz","tld":"buzz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.click9awages.top/?inviter_id=032485245071535\u0026s=\u0026U4Pk1IiI2NdaswGZ=GnobBQWcyVIkFzH1XmJP","date":"2026-03-25T13:13:29.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvzeag.buzz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 20:06:01 GMT","end":"Wed, 17 Jun 2026 21:04:36 GMT"},"fingerprint":{"sha1":"3F:F0:ED:A0:D6:F7:2D:0A:54:C3:2E:DF:D2:0D:0D:FB:FC:78:09:E4","sha256":"30:1F:2F:D9:BC:C3:43:07:44:55:43:1C:8A:26:6F:14:9C:E6:C9:7D:D7:14:29:C2:37:50:1C:58:8D:01:A8:28"}}},"request":{"raw":"GET /ads.json?_=1774444409821 HTTP/1.1\r\nHost: nvzeag.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.click9awages.top/\r\nOrigin: https://www.click9awages.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 13:13:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UiiC3eBi2I%2FFVioVXxFm1MNYhwlyUY9g3cpLAGH5oq3g6FhORxhaRosezDJMUt2hXuhyk7WYpZmGZnankG9OrgLKOawp6X9sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1e2c598df4d81e-TXL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf28ed72fb1d6d6f9fd5a2b4596d70be","sha1":"aa70f6b9f65bd3faab3f5d75c1ff5fa46daf788d","sha256":"19b948b08fb344c84cba500353e283d920098d94da84014d46520ba2abfe4fdc","sha512":"c7ec12d5830ee39e1174f73630a035e6ad7a26424f93c2c6121f9696c3fd1d7c79a5380fb14baa67ff99ae4f88ab216d88ddd3e3447023daaf2f79223c91e50f","ssdeep":"","tlshash":"f1e08c30000026a8d9b2be1b6e03388f4dca9601ceeca83da44e1d2cd32d14c5f33020","first_seen":"2025-10-12T04:23:25.922554Z","last_seen":"2026-05-09T23:40:05.887725Z","times_seen":100,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}