{"report_id":"7133d90e-2f25-4630-b747-6fe567ec0bb5","version":6,"status":"done","tags":[],"date":"2026-04-02T23:13:27Z","url":{"schema":"https","addr":"casha.cc/","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casha.cc/","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"title":"CashA.cc – Обменный пункт электронных валют","dom":{"size":178385,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (39394)","md5":"91e517635dd6528d9fdb8d48a9e91102","sha1":"9b5813d1e51ab1144f46d25ef8c75157c2a4da7f","sha256":"ce91e3df54fe93c5de5816c639aea5092c5496befea6a0e6a37f50be1a81b91c","sha512":"1eb431f53677c357d5ee4fbc5e3bab970b926717bf16285d3dc2dca597754c82698ad8bf4e4a6f95d4374c8e6f4b8624835ff0e35b640400c206e86f5b578ce0","ssdeep":"3072:NTyjxTaAMGFkwypl81+5Z1Ig9QtJEnMVl:NTyj21Ig9Q8nO","tlshash":"c5042c33f1c8246621568653a292773c1c7f9a7bdb170ef2f1b337b91b829cb2562509","dom_hash":"domhash87a1891d7074bbd60e6cd2ba9ab00589","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"casha.cc/","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T23:13:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-02","alert":"Hunting_JS_WebAssembly","trigger":"widget.me-talk.ru/cabinet/build/chat/modern.support.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"casha.cc","ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":77,"received_data":2212563,"sent_data":47277,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lucky Orange","description":"Lucky Orange is a conversion optimisation tool with features including heatmaps, session recording, conversion funnels, form analytics, and chat.","website":"https://www.luckyorange.com","common_platform_enumeration":"","icon":"Lucky Orange.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":15314,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lcab.talk-me.ru","ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"domain_registered":"2013-07-23","domain_rank":1579890,"first_seen":"2015-10-13T20:18:56Z","last_seen":"2026-03-27T03:19:36.516242Z","alert_count":0,"request_count":1,"received_data":12964,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"widget.me-talk.ru","ip":{"addr":"185.71.66.142","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"domain_registered":"2011-12-30","domain_rank":744878,"first_seen":"2022-03-10T14:19:01Z","last_seen":"2026-04-02T13:23:14.309983Z","alert_count":1,"request_count":3,"received_data":744018,"sent_data":1672,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":4,"received_data":123146,"sent_data":2106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.me-talk.ru","ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"domain_registered":"2011-12-30","domain_rank":830529,"first_seen":"2017-01-30T10:44:36Z","last_seen":"2026-03-26T19:56:53.762935Z","alert_count":0,"request_count":1,"received_data":49480,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-table/script.min.js?ver=0.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51fb7fb9b10b02752c7de763b94f4f3b","sha1":"b9f6a49d6f39435998b3bd708b04349bd9dc3781","sha256":"036fffff961f52b577ee8c6f3ff984d944f9224f6d0b2de25fa25a8532aec622","sha512":"1f2bbf1aaaf92fdc429f422c2546cd37627b1f80430a549c03ddc559006b4daf6948df8935835e5a846ce274821cf9bc870a7983300b4efce75c74e8e0469395","ssdeep":"","tlshash":"04319d80b3a061bb85b762f2235be0453220aff6f44e006da52ec07a0df7c453636d27","size":1446,"data":"","first_seen":"2026-02-05T17:13:42.369895Z","last_seen":"2026-04-02T23:13:36.467673Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-checkbox/script.min.js?ver=0.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3093737e1c50590a327ec1b869fb506d","sha1":"c85baa1ab7535b4cd4eb00c1c63726206893c13e","sha256":"6c713e5a5b5852097da52362cbaf767b9c3acc61e0b7299b9c1d5d612a46b31f","sha512":"5e18b558ab363eb7f70203a197a1d4568a6e9b61f3d93f59faa0968ea78b5fd13afecb8ee45d3517a6ab0f5275162542d7da6d615c62c808d6fe1bef3114d458","ssdeep":"","tlshash":"8c1132bf3924387242bbaa21113bda0a643398bc57611d68f4dd4af00efcd880523e2d","size":923,"data":"","first_seen":"2023-03-07T12:26:35Z","last_seen":"2026-04-19T14:50:33.507939Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-window/script.min.js?ver=0.5","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6170d756b3d19067bc023babb6457c7","sha1":"1afc6c6ec398fdefca61f9d8d2310e98f49d4a26","sha256":"b874bcc7cf1010abddfa45d4031310ad43dab8de6f158dd5364080d9e93d7e4c","sha512":"8b748f62ea47e622f8a3219c0713030085b13a091d62cc1afd0e32d6bc4d1064ba359fe4e0e6c1d9b6a723de9f5f5613cf4796543ac12458e5152b111e0fc162","ssdeep":"","tlshash":"a241e0747282b46f067b40b02b6b730a52919a0bcc578505857dcfd836eaf9fc74b2a2","size":2274,"data":"","first_seen":"2026-02-05T17:13:42.336829Z","last_seen":"2026-04-02T23:13:36.462992Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/js/jquery-select.js?ver=0.6","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68dcd7339b831a65104383e472cd2f85","sha1":"6e36fa7920ae96f5a38c2a22eb65de0a9c73d3fc","sha256":"d58f88832e7ebdc458cde7bd20455dc7a087b1030893333aac816cf95a752463","sha512":"e3864db9342bcdd2c9d055c250ce8d368b8ca865968f0804ed21b11980ad06a1d48e0ca0c9d5e730a8a7c251ad7cc8713a59542183cb641169b5ee006e08d634","ssdeep":"48:y3UmwbOFXV2FtB50nZy8+k6hIqLPXYZu8g4jM1AsM1RtFqfQKwZMpOjGBeMBM+1G:yl4xIcAtPznZ0OaBVJx4h","tlshash":"84918d1872cda43482ef61e71cf93a9bf91ed53a8146df60f17945b01ec088663738ab","size":4262,"data":"","first_seen":"2026-02-05T17:13:42.351448Z","last_seen":"2026-04-02T23:13:36.515041Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery/script.min.js?ver=3.5.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89475,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-26T13:56:39.133642Z","times_seen":15217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-ui/script.min.js?ver=1.12.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-04-26T13:34:32.699653Z","times_seen":18653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-26T14:07:00.255529Z","times_seen":313763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lcab.talk-me.ru/support/support.js?h=82f18ade02574bb23c9930b459d15b07","fqdn":"lcab.talk-me.ru","domain":"talk-me.ru","tld":"ru"},"ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c0ed1563d1b7fe190c7c2ffc865f0be","sha1":"7ce9bb52cb80082608c8eea1cf5669f76a5a9cb2","sha256":"058b036843fe1fb45fb5a558a6c0788ffb00b3a713048256663c9728f12e55f9","sha512":"b6690edb14ce989249a3ad7922c1eb987780d7b07f515b77c3a12d3ec74e96625636767ade63b5c8bf11a8314cc15919d211ab09ee3f995adf92b5d1e2874e67","ssdeep":"384:3j5GIKm/prTzS96d0A3fbtwKEu8k053515b0CjuHNi2Sc:UIKmlna7uS3Ttbxc","tlshash":"68422ac8396bf4b707ea5085043f2507f2780ca8541adc98fb05cc9678b49ab86aff74","size":12658,"data":"","first_seen":"2024-12-01T03:25:27.864449Z","last_seen":"2026-04-26T12:45:38.308076Z","times_seen":883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-timer/script.min.js?ver=0.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"654dc061e90713efb47762666fd2281d","sha1":"7e1a8e6d9c6c61864d9c6366eaf24ca7f0847d55","sha256":"431f4718fd47f97b73b01b18b431bfda25ff42bfdbb1afbf2e04485ace463f53","sha512":"c92257777cee777ead4d446dc00e08641dc2f14b09eb21616f5bc07d23fb66a626b8560d930d685070509b9053f9ad7d016f3711047401efb12a1de3e21f81b5","ssdeep":"","tlshash":"b3119c4873c830a152e721f16d5f13c6a615ec38c6268d0cb68db8f5edd6d54683263a","size":941,"data":"","first_seen":"2023-03-11T23:38:54Z","last_seen":"2026-04-02T23:13:36.47804Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/js/site.js?ver=2.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1759e344bef97ce1adac46303324f7fd","sha1":"e7330732f22447d5b44875c383f087c58efbe849","sha256":"2b726de626449e19e98547bdd6a238cfb22dd1c4e9b9b106ffe9e06a0d616b76","sha512":"4e67308f320096eb52af2ddd3c485e6791f8ccfda8f1cfb74a46cc19f7485993e46951eee494fdc2fe2a454319e3651448582baacfca990ac11e5f5272e69665","ssdeep":"","tlshash":"5771f342ba78b62dd1ff306da17f0110ef29d4574a022c58e8fa55606ea471ab7e3c2d","size":3808,"data":"","first_seen":"2025-11-27T22:11:20.599435Z","last_seen":"2026-04-02T23:13:36.488714Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-clipboard/script.min.js?ver=2.0.6","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42944934de0a9c5c18706911874c1b2","sha1":"77ba921a768a5e3da6a25e389cfed21d966aa131","sha256":"d60ac05828175a69d3ad94b4714f1292948082cdcfbceca74c1da11955e5de5d","sha512":"047bf9ab606354508a2884238839523b2fcb2cfc6a025dcae318b7d3c8722b21ca9a01f588695f39fa039cbc03fed9477ad8b271c77735a88a6d50a8df76b454","ssdeep":"192:kvR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:kvR/vhp3MWsBq9LJFgByVrA","tlshash":"2b22a759b380b5b156e770ad112f424bf372906960aac0d4b639d8f2bdb8ecd1467f38","size":10452,"data":"","first_seen":"2023-04-09T07:13:39Z","last_seen":"2026-04-26T13:25:03.486518Z","times_seen":3059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5bcde1acdc151f71ddc72dda03832ad","sha1":"d34c14d745800facfb24fe65bcefe823ae3d015d","sha256":"f4a813151b586a6e1e56e5fb5f3ac11e7758989b632c6cdb26de07533d6ed031","sha512":"49af1d9e9ec02f7f234bad7d0cbf3d1bb3323df1ad89b9aa789bc74e94a63b363a5911118e72dfcf79c01f2ff620bed478b5e599bdbc89ca0aa52277c5085fce","ssdeep":"","tlshash":"7bf0c0061c733038913331ed33376c071d1244070d40c81675eeaac90f60b63c6828f8","size":555,"data":"","first_seen":"2026-04-02T23:13:36.565707Z","last_seen":"2026-04-02T23:13:36.565707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.me-talk.ru/cabinet/build/chat/modern.support.js","fqdn":"widget.me-talk.ru","domain":"me-talk.ru","tld":"ru"},"ip":{"addr":"185.71.66.142","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"15d93607c46d61e929f3db7bed9c15a3","sha1":"69cf7151fff916138598382f1ba6bd36a51ef87a","sha256":"5f5768b207bf9ac193d0e199e8f5ef1ec35504b0624082719987760e0fc8716e","sha512":"7d9265db3e7ee683130504764245c8dae5cad62a3f62d871c5997c0f8db2270f06b36cb14cba7cad259a8a76a0aa581c68f2a20f9e251007c9043930ad2564cf","ssdeep":"6144:sg8y1nKUCMJ4Fco5XC+q5o6pZJ0OWpS7LStpgV142izjfUPNHbY8QKmQ/uy8BIqF:xJGOWplGcPN3FVkbV4BvPgJjR8L","tlshash":"c2f44c9672c2742313af05b7d06b2114f73e159929090c78f328bae63e55eca9276f7c","size":728839,"data":"","first_seen":"2026-03-26T12:57:53.470908Z","last_seen":"2026-04-03T06:34:30.958876Z","times_seen":63,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-02","alert":"Hunting_JS_WebAssembly","trigger":"widget.me-talk.ru/cabinet/build/chat/modern.support.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-forms/script.min.js?ver=3.51","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c96241e183012fd2646c4d6917155168","sha1":"98a92639a7de79a392c60b56e090e504071bc1f8","sha256":"27e9042e0cd29ac1e29332d3a88a1aa1bc84fb912ac5b14ced66d8f5e6890938","sha512":"fb7de78075aaa64d5ab57e8914c2a577446321c2c554524d6894c37386e5c3ba2436d0c259f4d61d884715f519798262e3491838eaea1cc1b97d2790c5da40a0","ssdeep":"384:zEuKdl8246ZBPw0+vN9FpziTpqd+KeMnQ3bYoZR94kozOE0mZ7oebm6iEII:zUzvPw0+vPziVqdPuj4kcOE0mB9","tlshash":"2d620ae532c450761bf674d5896f8147a231a92a054ec0a0ba6cccf51efcd85a173fb9","size":15258,"data":"","first_seen":"2023-03-07T01:06:40Z","last_seen":"2026-04-26T14:56:51.325286Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-cook/script.min.js?ver=3.0.0","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aa583e41e6f35fd952550abfcbe563a","sha1":"f81fc18e0044a9695273d0d3f3f18d3779a2d9c3","sha256":"935818f3735be98f1421f9d4d4a0d527fe7c5951621eace6234b32c49ded7db9","sha512":"380825069f0fabf6ac11f0d459c80e4a29529170929663a32d2022901af6801f00bdde89b776088d9d3f0e2419fca227aa4d57bb211ac4e0d9802af6e3c75f3b","ssdeep":"","tlshash":"4c31829e3299e98a0b132461493f220372284d7abacc8a808274e4f16df094851f6e3b","size":1500,"data":"","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-04-26T15:03:46.381159Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-qrcode/script.min.js?ver=1775171584","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9112713c8bc8c7974ccb3c2d1fb55088","sha1":"5201d297a045dbfc3204cf9f730575da6d96ca92","sha256":"347531a9fd819d86af38da3f2bf2ad9e3df5f7ad9a5c783498ee37ea58212b26","sha512":"6e94908c685e48a42ac7bedc0b317b2ff086a03e3a6707c7a0191302abc4acf57eb5f6c6f9df20495017c54424f1110d4e69eb2f053b647f5077d6800fb9b8b2","ssdeep":"384:cWhAxyxHcEXO2A1vv/jHzARn1gG2/S7cB5XAAdTR8eg5rW2LZ+Iaq+HHqsglHSRS:Nxk/jcp1LrWIZ+Iaq+WOYz","tlshash":"9eb2c7d5f3c4a2a957966ce1082f108be17898227c1e8154eb71c5d2fdb8bd9843bf78","size":25466,"data":"","first_seen":"2023-03-09T23:02:21Z","last_seen":"2026-04-26T07:11:19.368881Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7728678ec2495835a97b9d6b518263e0","sha1":"597153462427a03dd0d96ccc1b4794618a21f5ba","sha256":"55e7ff857482a1c42ef8d6e97d11a7a15c5b465ebb964e07b779899ecefba7b7","sha512":"f087f364cf79cab4bf55acbe93c4f61050b5571ec75336b50908be21aea6551b777e60c7d5bfbc2d153b0fae82ec6448abc701f2cab7f69dc09934eb3b311590","ssdeep":"","tlshash":"fb01cec4fbac1866c7ae214de40d11c6291d18b3b85a3cd3f9ac27c88890a69b00343e","size":851,"data":"","first_seen":"2026-04-02T23:13:36.567036Z","last_seen":"2026-04-02T23:13:36.567036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-changeinput/script.min.js?ver=0.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1153f80c5a0ba5ba80921cb2c8ec7d21","sha1":"5d1f58ae4e165bad92fbf61800402dfd6f0fdd11","sha256":"fbd7101494251cc148d058aabe91fa59e51a6a24e5c4958f7c7e504575246001","sha512":"ac0883b7b1a1f060dace5df45cce7f6646a8ef95b44ec65a6de3d66043ab762fb38d5d2caa187b24564c84107501b5bf2c81c08d4fca1f5c8b333f6dbbb02e14","ssdeep":"","tlshash":"c7018588a900690b1aa349b1547f8209622b70e0a5176040e75caaf17f1cc2d2277c3e","size":769,"data":"","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-04-19T14:50:33.51961Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/premium_script.js?lang=ru\u0026ver=1775182384","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6726f699db852585307bf0005cdd8b9","sha1":"3929ff6fdb722750034eb91274f3dbd6005e006b","sha256":"d5592ca450411da32caa1c0dfbce26f7c87d1037c2ea371c7e556548b49254fe","sha512":"75fde5ffdad025ce12da6d61d1ab949b5eba414430d9b4ec50370db7e9e51d66445f73ae957baad230eb5b4d2e5636107ce296ca1d9741de45a04031252d30b6","ssdeep":"384:hDkORRVmNAGMB3Gn6vbN8xG5ItzvfW+fWTCz6nr0P8QJBKtE8MD7uOIEidsfkxj:fg6vb/Zmur0h8EiDxj","tlshash":"7ac29490fb5c345780ff302858bf61ca261e647a98019ca6fd3c61a45f90f5e7a1783e","size":25979,"data":"","first_seen":"2026-04-02T23:13:36.426688Z","last_seen":"2026-04-02T23:13:36.426688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-clipboard/script.min.js?ver=2.0.6","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-clipboard/script.min.js?ver=2.0.6 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3354\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"28d5-64e19f0037c4f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xS9b7DkVDF0Gfkfc4v8s0TfW3RjrhI6dbOZlGWPrVMNVD6zy0alemsuNu%2B9Kw2ocw8VOXnac0vzUpV3vX1ekJp3oCHfTtexyPRVY%2B7NtJMnh%2BfasQSAwTvP0CQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45ee5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10453,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10359)","md5":"b42944934de0a9c5c18706911874c1b2","sha1":"77ba921a768a5e3da6a25e389cfed21d966aa131","sha256":"d60ac05828175a69d3ad94b4714f1292948082cdcfbceca74c1da11955e5de5d","sha512":"047bf9ab606354508a2884238839523b2fcb2cfc6a025dcae318b7d3c8722b21ca9a01f588695f39fa039cbc03fed9477ad8b271c77735a88a6d50a8df76b454","ssdeep":"192:kvR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:kvR/vhp3MWsBq9LJFgByVrA","tlshash":"2b22a759b380b5b156e770ad112f424bf372906960aac0d4b639d8f2bdb8ecd1467f38","first_seen":"2023-04-09T07:13:39Z","last_seen":"2026-04-26T13:25:03.486518Z","times_seen":3059,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/38.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/38.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 22714\r\nlast-modified: Sat, 28 Mar 2026 18:43:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82165-58ba\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFHkvrzluHc%2BIft07Kl7joTB2OrATBcWxh7q8qM2hvYbAtHYinS6eiDcH8Q45W4SNj7YFtx7fTqKcof9B32upDaDTrLFdnJhIFOLnEpscN2RFQdebiwD4gGXzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ef2b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 621 x 160, 8-bit/color RGBA, non-interlaced","md5":"22a341636840dd74c5875ee8e22372f1","sha1":"303e934f4cde04711555c3248d6bb8781d0d5288","sha256":"d7b040250f36efaf19e16fa612c27aa5f6e8bc68954c8739f8b069b38acadb3f","sha512":"12b264e652f47e62b96f9bdc5244016ef0a73c3252bd53a10282ed2240d14c23a112099f36b7d44625f7f18204a435ca2eb94d3224b2fbb1879dffff3eba18cb","ssdeep":"384:C7LUfnV2BiS9LLerXYXnI41vd8WWjv/mOkkpYFlHYsT6x4V8L0+Qxl1KU+NdtCgz:C7enVACXYn1nu1kkpwHpQ4V8Y/J+Ndtv","tlshash":"e4a2d1f0739f10ae15b04a88d9d3fd3d513e9bb179eb9d4dbfeacc06645a9500a60c28","first_seen":"2026-04-02T23:13:36.40274Z","last_seen":"2026-04-02T23:13:36.40274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/okchanger.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/okchanger.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 2135\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-857\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRyOnX1rY50Trt9YikopE%2FiV5m94kjiV77gHDzWr8ThBiKuzNa0wHu377bp%2FrnypGPKmaYIcsieDSs3XAMUB7ET0Vdw3E62lHsyTnbfcgTbawl3B0AagTwaApg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47efcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 32, 8-bit colormap, non-interlaced","md5":"852123af30a79bc2628f3b3fa436ae6d","sha1":"b4b7e26aa009783e86deae2fdd5e8724d6fcf30f","sha256":"922ffba34476a0624ffe08e75535143837a5e7b7cf713e08979fbfcbe9e7fea2","sha512":"1979c78016610b4040224a7dce1dc1623be632233d370039f4c11d7ea5e37afff3a6d5f73e89f73a5ba5358b0d19437556e3955231cbea94033c71f27ba9e5c9","ssdeep":"","tlshash":"78413a31a03bc5e158765e79ad990dfbb191c753454337072fab6ce1c428026d64cda2","first_seen":"2023-05-02T14:04:01Z","last_seen":"2026-04-06T16:16:12.59834Z","times_seen":51,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Tether.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Tether.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1531\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-5fb\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncHxjKKjBhQ8WQb3nrgPZFyIffZ3R%2FryXdX%2Fu3qmlPattOhWwN6I4kCUHuCfBFeUrALzZ%2BVANxy4EmkYsHfyynrPqtetO3WIai5YD5gIR7BStB%2FvRBAxhIputA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a76f10b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"e7f147d7213ea8c03d40f16b152f6097","sha1":"451e4818b086f58a86d80c1ab50c602561e75d59","sha256":"9d89d31f687c34978fa379affef2050578003f4dace8780ce06a9a668972477d","sha512":"78c7cf431e8d8f1441d8c1ef54d4588b13a177806e84454a86bd72a3ea3d4d96c57d8a38ddf1d1bc95f2663ee9762eeb75a60bbd257113fcb834b23f30aec199","ssdeep":"","tlshash":"7931e7a3ca5b021fd6b584b9248059b66f2e0b9e2a7957c10b9902c23a1051fe8f881a","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-04-07T12:23:32.989701Z","times_seen":56,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Litecoin.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Litecoin.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1409\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-581\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAAFw47JrOg%2FMYV0N%2F9AW3Lxbio1sfbusEDxBDdl4QXc9uYitDJOinvhPBEsRkXpyHqJLMqkF%2BEdpyXFhIRs9WUmoOgTjS58Q0p5Qxfa2mn54z93AoHJFDcFyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7af1eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"0fc84fdbbf57ba2b420e505c05c51690","sha1":"3efa9a275fe3c89bd153f0885af312773af47341","sha256":"4e2a623d834fb731ee69ba74fa79a80183a91f1dfe99c9072fc80d66c9e4de31","sha512":"7a0c17eb214d3b9670eba910e0e8ca259112f30e2b6ac413305b923d1d258041f3c5b5fff464200b56abf996bd9c802c04eb3fb2721a5a9e310a7e628e9cc21b","ssdeep":"","tlshash":"7e2119fa5f00a158e9ffe8bad775cc25f6540dbd6200a827443b61a9362e462ccb6841","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-04-07T12:23:33.005165Z","times_seen":42,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/ROS.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/ROS.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 104778\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-1994a\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQjiZwGJSLZ0SVGNVb4HgTDwwiumiy9tZ0cZw07acCJ4lJy6ZI8Sayoh8wSaEnduPzsU5feCihUqc8msT2zhv4enkXzqSPMJkxmyDNaN9crGkW94UoHSLj93WQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7cf29b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"3fbfc967c0ff44262854d525dbacb6b6","sha1":"67685ec737903554f9de29fdbb0d23371720178a","sha256":"47684729d718c0cea08ea9797f3690ffb6e7bc8b890ea8bc1b7cd5735c784a35","sha512":"9f266f0711129f8faa2ba7683f920eae8d4136cf2a02d4371e04fca9043643115644e84f2abf721b873d3af60feb79394d04e332af9bf090dbfddde69609b415","ssdeep":"3072:uvtmrcvK0DAWM4Bgavk9+7On1DOvfF35o:ONDPBgl9+7On1DOvNpo","tlshash":"39a302897514bd708120f89fafc180610c3ebdeb17b20dad5fc618a7e9a1eddb44515b","first_seen":"2026-02-05T17:13:42.372601Z","last_seen":"2026-04-02T23:13:36.415895Z","times_seen":4,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Bez-nazvaniya-8.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Bez-nazvaniya-8.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 5615\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-15ef\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ohgy10wwHQB%2Bqeqa7WIxW1FfTrby5xFrjutHgPlMZ5U0w1Ld%2FvbP0pqnQpUrk8MA48zMoymxH%2F%2F4zTN8oOlbxeC0iW0fOVsYwti7Yt2QyaRgqrC4iO9U99zFbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7df2cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"0afb68a1689f181b0a0f4a1000420276","sha1":"f04d6d980e7156f9a80124932f3738e582507e4a","sha256":"b8eb807877ebe908700f8e39dc2e053289265d15dc6cfe8595e87a9d161f5034","sha512":"d8aa20a6a9345dc52e03baa60e067b8c8f8e57294aa3f43c18290db3778f704df233dcef923ad6bf0398db03cc27a4c30940e342a4684d3d3d5a735eb7700db7","ssdeep":"96:6BN0vzWMB4nrOVGE8aqqNGOmI1XmDK4GKSBZREgXNmEqEmZ6QyFAG14M5peG:6BAfB4rGGlVumoOPGegXoXyuO4KpeG","tlshash":"e8c1ae13f8e029314b9c05514facebfff4ea9c5fe059a1520d4f7167a188232d988e96","first_seen":"2026-02-05T17:13:42.322287Z","last_seen":"2026-04-02T23:13:36.418563Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/secretovobmena.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/secretovobmena.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1817\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-719\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5bT4vrfBHOutppIGLYPMrjLO1kt4q0Eizs8nHM9VkQG7m2eHnnPe641svFa%2F8gDQosAImzfVNFT5ITLJZyVtqUuQUNC4w%2BkT9UQVESmBxRZJwW8P2LDrx87lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47ef7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"8b91c66b32193c6941f7b821bf1a6a8c","sha1":"ec2bf667cf6f0f315821fef485509f8492b1a95c","sha256":"3aaa4220e26bd4b37c1fc6c4c75cc4885b7446d124965c1f3905e9f48ba6a06f","sha512":"5f85106aa86d2ee354ad3b293f9d23f83e1d3a0867e5c17e1732b44a24654ec934202bde822699302cf278420e70be5aab7466a1e26b753d54dfa1e4d2f93362","ssdeep":"","tlshash":"dc31d70f1600b735c68b8b7e0897c66983227f8fbaa9c2b5904b192f9838119ae2d440","first_seen":"2023-06-08T23:44:03Z","last_seen":"2026-04-02T23:13:36.423309Z","times_seen":8,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T23:13:03.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; path=/\npremium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; expires=Sat, 03-Apr-2027 02:13:04 GMT; Max-Age=31546800; path=/; secure\nmerch_locale=ru_RU; expires=Sat, 03-Apr-2027 02:13:04 GMT; Max-Age=31546800; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://casha.cc/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4358qEoR%2BfVtMiJ2yY2Zl64mb8yeK7zmwuYL78dmJdbowfLWQVm91cpLigdv6xP%2Bb%2FQ29U3SdxPCb3bBxDxgMafTjp3Z7In5Ii1GqEfH3ThVBZg3mX7Pab90Q%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e63859f2d5756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lucky Orange","description":"Lucky Orange is a conversion optimisation tool with features including heatmaps, session recording, conversion funnels, form analytics, and chat.","website":"https://www.luckyorange.com","common_platform_enumeration":"","icon":"Lucky Orange.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":63879,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"ad5a096b8815b39891634f3a085ea2f4","sha1":"d4098dc1a6b6543522a504b8e535ce0c36804528","sha256":"6cbf1b651cb876cb7dd18105edd7753ae1d2c6eb7977fae09fc5f98e0e6c4206","sha512":"72eb8031d55c59a1728de1bd05301fa1183e71f49935b41cb1b4d228ccd968464d039b263f820af3fb6d9316041dc157f7559702c1273bec66d4893329c9b3b6","ssdeep":"768:FUvROZdapzMAMGFkwypl81+NHHxUiCJWOEPCr:GuapIAMGFkwypl81+NHOiI3EPCr","tlshash":"c253ee31704d88b712279687b074730da49fce3ade1387a3f3f72aa997d1d91a463126","first_seen":"2026-04-02T23:13:36.424378Z","last_seen":"2026-04-02T23:13:36.424378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":34,"dns":23,"connect":1,"send":0,"wait":670,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/premium_script.js?lang=ru\u0026ver=1775182384","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /premium_script.js?lang=ru\u0026ver=1775182384 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 5620\r\npriority: u=2,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bwVgdUEgNvG9cBhhKIcxYuOR%2BUdA5gN4AhX7OjY0R6Z2a3rwRW1lBNMnw2om25J94hziSJcJLlUv1yxTEpomcp65j%2FhG%2BXYQlAAH5y3H%2BPYiwblIwI5yQHpTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46eeeb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25990,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"e6726f699db852585307bf0005cdd8b9","sha1":"3929ff6fdb722750034eb91274f3dbd6005e006b","sha256":"d5592ca450411da32caa1c0dfbce26f7c87d1037c2ea371c7e556548b49254fe","sha512":"75fde5ffdad025ce12da6d61d1ab949b5eba414430d9b4ec50370db7e9e51d66445f73ae957baad230eb5b4d2e5636107ce296ca1d9741de45a04031252d30b6","ssdeep":"384:hDkORRVmNAGMB3Gn6vbN8xG5ItzvfW+fWTCz6nr0P8QJBKtE8MD7uOIEidsfkxj:fg6vb/Zmur0h8EiDxj","tlshash":"7ac29490fb5c345780ff302858bf61ca261e647a98019ca6fd3c61a45f90f5e7a1783e","first_seen":"2026-04-02T23:13:36.426688Z","last_seen":"2026-04-02T23:13:36.426688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Dash.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Dash.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1411\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-583\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7eR3EBEEmZFMe2jNPduSOk99IC6EGpjqJGahT1dMB7qyVHteaJC3VPsLJuH9tjgqyQB6UZOI3IZW5EtM%2Bmv6O92Pr1osKzacYus%2FMyONS2aX%2B5ahCW6PvnXNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a78f14b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"3d9a6ae1800e8653858c3b91ea1f41b3","sha1":"9de59f2737256d861dfa9baba69bd7fc63a56368","sha256":"a71a213296296d7529d0caa94d6300160147918585b9ac63902b853d709381c4","sha512":"da8ab5df806319642b606c45cf875c53cac7ec283f7b91aec60cd63378af600ebb27f8c031d8d522334f4633f0e4718d40a43d4b6326510674f6ad37853829ef","ssdeep":"","tlshash":"7821c669bd01182adef142aacbeb86346eb2436d266b1752200b361fbbd061594df421","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.429048Z","times_seen":23,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C700%2C700i\u0026display=swap\u0026subset=cyrillic%2Ccyrillic-ext%2Clatin-ext\u0026ver=2.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css?family=Nunito%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C700%2C700i\u0026display=swap\u0026subset=cyrillic%2Ccyrillic-ext%2Clatin-ext\u0026ver=2.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Apr 2026 23:13:04 GMT\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14628,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b878cd8d25ad2cae03888155e151a77f","sha1":"3217ab353d707fd0e3f13d04c9fc9e6f8c04086b","sha256":"add3bd815f28c0a5e5f8ee109a59c72fff5efbf2529ee62d66fd587f57d64053","sha512":"1c347c46d838ead5864e06544d81567337937c18f2111ce8f91b4a57c1e6514ab9fa0ffc4267d62dc200e8b2fc51f71ec799f8291323876e2c457c78050172b1","ssdeep":"384:mI2GbALPb2vbfoMd2VbhG6c2SbUP4C9l6DPeo:l","tlshash":"2d62bcd1045bd100aa472cc267cf7e37ed4e62113424c57aebfd9898ecabc232224b4e","first_seen":"2025-09-24T07:09:33.015788Z","last_seen":"2026-04-19T14:50:33.514001Z","times_seen":62,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":116,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-forms/script.min.js?ver=3.51","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-forms/script.min.js?ver=3.51 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5864\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"3b9a-64e19f0036caf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDdWCqtPVi2ifU8Te5nyQeMiiHGMpM9Ao%2Fpq%2BuxN9gM8qAKahEAWuhgFtljLAmqsx0Prsqm8HiO9Ulvgb0bGLPvg2QNRUT7jtlmVxw%2Br1NoECLxQQsuCbeTONA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45ee3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15258,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14900), with CRLF line terminators","md5":"c96241e183012fd2646c4d6917155168","sha1":"98a92639a7de79a392c60b56e090e504071bc1f8","sha256":"27e9042e0cd29ac1e29332d3a88a1aa1bc84fb912ac5b14ced66d8f5e6890938","sha512":"fb7de78075aaa64d5ab57e8914c2a577446321c2c554524d6894c37386e5c3ba2436d0c259f4d61d884715f519798262e3491838eaea1cc1b97d2790c5da40a0","ssdeep":"384:zEuKdl8246ZBPw0+vN9FpziTpqd+KeMnQ3bYoZR94kozOE0mZ7oebm6iEII:zUzvPw0+vPziVqdPuj4kcOE0mB9","tlshash":"2d620ae532c450761bf674d5896f8147a231a92a054ec0a0ba6cccf51efcd85a173fb9","first_seen":"2023-03-07T01:06:40Z","last_seen":"2026-04-26T14:56:51.325286Z","times_seen":454,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-qrcode/script.min.js?ver=1775171584","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-qrcode/script.min.js?ver=1775171584 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9349\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"637a-64e19f0035d0f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xvqgqYM70KYYjSv%2BivJGK6AoEjPmvRuZ50iDw3pj8nrcvTJb66680YrEnTc97bIALKg4OGJEcJL9yPkunkzRt%2FJkeqhw7PzgK3bJhxH%2BvKTrTs9BRIdSpptKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46eedb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25466,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25362)","md5":"9112713c8bc8c7974ccb3c2d1fb55088","sha1":"5201d297a045dbfc3204cf9f730575da6d96ca92","sha256":"347531a9fd819d86af38da3f2bf2ad9e3df5f7ad9a5c783498ee37ea58212b26","sha512":"6e94908c685e48a42ac7bedc0b317b2ff086a03e3a6707c7a0191302abc4acf57eb5f6c6f9df20495017c54424f1110d4e69eb2f053b647f5077d6800fb9b8b2","ssdeep":"384:cWhAxyxHcEXO2A1vv/jHzARn1gG2/S7cB5XAAdTR8eg5rW2LZ+Iaq+HHqsglHSRS:Nxk/jcp1LrWIZ+Iaq+WOYz","tlshash":"9eb2c7d5f3c4a2a957966ce1082f108be17898227c1e8154eb71c5d2fdb8bd9843bf78","first_seen":"2023-03-09T23:02:21Z","last_seen":"2026-04-26T07:11:19.368881Z","times_seen":74,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/bestexchangers.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/bestexchangers.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3425\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-d61\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2p1M2zla3IKmRu8Sqf5fM%2FjDN%2BLkopAoZRJzCSzPmdttuey3WH%2Fq8N3AUiiGTxqa%2Bkbzdtx9qEtXMhy%2B08Vr2RvL4eslRWdIqyxDo1aXrWpiKd6ZJ%2BneemdWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ef3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3425,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"65df37c120156b73e65678fa77f8567b","sha1":"e3dc381ea31168ee6c8ff472989b999e08e9971f","sha256":"2724a7cf84901a951c6e855eacf7f9f95c0b9f3174d58826320dbb49e3a67a7a","sha512":"25a4847a7660a70f259fa7820c551ed168007702859e6c094199ad6e0fe73ee7d74e461d862e4200178f07b9b6894fab337b789954938472a6cc13634501ceeb","ssdeep":"","tlshash":"fc615b8f0054462ee98bb9398f5b922ce609842ca2e1fc75700a3689dc14b4ba86c15f","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-19T14:50:33.479858Z","times_seen":22,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/pn_uploads/captcha/Y2M3OwYP.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/pn_uploads/captcha/Y2M3OwYP.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1331\r\nlast-modified: Thu, 02 Apr 2026 23:13:04 GMT\r\npriority: u=4,i=?0\r\netag: \"69cef800-533\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNIxFRLWHIJElrV22YnG76sgA6m1YGDKXlr9pa7kxZnE%2BEseiV%2Fd%2BuQBqFrNRQScXtgJYUNookznTSSkpmPEdMXyHN0bSJBbLqg3oI1%2FK%2B80z1AhBy5eBWCJ8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a48f03b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"13a32b56273cd4fabc96412c61d12be0","sha1":"b65f990dc727a50973a00141bb64fc41c421d539","sha256":"95a94a84aea9c44a8fb6082d7b26ec58c91a225d81bc5168d52e13775c6bf419","sha512":"ff0b5c1f76670527aa957196614b3eedbf20e6a42236bef85e40150f1a8509573aef07b836bd2a34febe7bfc0f2fbd64fa63ebc0d46785184b2d4ec8a52b42ad","ssdeep":"","tlshash":"2121d86a6a1364adb230e356b23ac0dac635e6676d0d0c262cedede204c14cf51048bb","first_seen":"2026-04-02T23:13:36.436406Z","last_seen":"2026-04-02T23:13:36.436406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lcab.talk-me.ru/support/support.js?h=82f18ade02574bb23c9930b459d15b07","fqdn":"lcab.talk-me.ru","domain":"talk-me.ru","tld":"ru"},"ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"talk-me.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 19:27:48 GMT","end":"Wed, 01 Jul 2026 19:27:47 GMT"},"fingerprint":{"sha1":"95:1B:80:50:92:2F:81:DD:5B:A0:EE:4F:4C:AA:0D:41:F2:6A:17:9C","sha256":"28:8C:B8:1D:E0:60:AB:20:15:B7:05:37:95:DE:58:85:CC:48:DE:FA:39:D1:61:B3:CE:3D:53:01:7B:57:C9:F9"}}},"request":{"raw":"GET /support/support.js?h=82f18ade02574bb23c9930b459d15b07 HTTP/1.1\r\nHost: lcab.talk-me.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Apr 2026 23:13:05 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 27 Nov 2024 09:53:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6746ec14-3172\"\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12658,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12658), with no line terminators","md5":"2c0ed1563d1b7fe190c7c2ffc865f0be","sha1":"7ce9bb52cb80082608c8eea1cf5669f76a5a9cb2","sha256":"058b036843fe1fb45fb5a558a6c0788ffb00b3a713048256663c9728f12e55f9","sha512":"b6690edb14ce989249a3ad7922c1eb987780d7b07f515b77c3a12d3ec74e96625636767ade63b5c8bf11a8314cc15919d211ab09ee3f995adf92b5d1e2874e67","ssdeep":"384:3j5GIKm/prTzS96d0A3fbtwKEu8k053515b0CjuHNi2Sc:UIKmlna7uS3Ttbxc","tlshash":"68422ac8396bf4b707ea5085043f2507f2780ca8541adc98fb05cc9678b49ab86aff74","first_seen":"2024-12-01T03:25:27.864449Z","last_seen":"2026-04-26T12:45:38.308076Z","times_seen":883,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":250,"dns":96,"connect":59,"send":0,"wait":50,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Bitcoin.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Bitcoin.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1906\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-772\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qA9O1M9b7hwv%2FFIfoiOJj8ec%2Fqx%2BsQvyHRZTh0IALZUgBHVfWrYWEVzVK6QOpAnvx5WhZZInUY6f7343w1QFesnUJ%2Bvx8jr70JBq3wOR4LxFxeAuROsJ3iFIUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7af1fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"91329c8c79c256bdead1c6ecb1c84a18","sha1":"7b07fcbdc7b54107c9b94f48f9153f25a68d78aa","sha256":"59ee7e0892e8b13482e0fcbb1107a9845b3e13d3821677f1d977942d66f20fd7","sha512":"926abad8f4d65f1e523ebfbb981a1d1379e005becc39b0ede185a9ba932650b81f381cee68d1cd6ba644452ac95cd1a2718d28e2f3270052efb2ddb9ff7acd12","ssdeep":"","tlshash":"834117f8a58b8534883e1806d0b40ffc7461a2063517d8066ad5f27e7ece7de82a1c43","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-17T05:59:46.783934Z","times_seen":65,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/0fb47a55036b3fb57fb76.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/0fb47a55036b3fb57fb76.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 56814\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-ddee\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bq5E%2F6EhyaFfZC7T4sf%2Bv948aI9B9amhq03DzK0ZyyEmXvkCoL28zP%2BgqQMTiV6VIPyvcIfudQ8nL6Z34JcUqJ9pKPflIM8b6PbX%2BPmO3y%2BdzvL7YdRI21AYtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7af20b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"4a30556861d7d3d71150585c2a207eb9","sha1":"87e2861744da4c45c5eafece9ce099d69043201b","sha256":"9a0f892f8b16c2035a0cfce22f4b69669778f824f994d6c3056038243b986956","sha512":"3368333e1d558d4de671a37982f27203aa0b28e0761ee11e2e7743acfa5d044ce093ffa02d13fb19d25919ab0225db319c532364277593b1438728e987a78821","ssdeep":"1536:Xx7XDr1sJJ9Rpfs1io+Z+OpKg0eKzsmy6ipWg:XxLDr1sXvpfsco+ZNJog","tlshash":"7a4312a92bdb7a066a1ef9301d062c7b5f0970c48b7304399456f9f89788d8c0a4dbbd","first_seen":"2026-02-16T14:34:51.121998Z","last_seen":"2026-04-02T23:13:36.443096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery/script.min.js?ver=3.5.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery/script.min.js?ver=3.5.1 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30908\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"15d83-64e19f0038bef-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuNjTHLG0O2DTdLQAsgKNz%2F0QymBO4gqtuKpgWQbsWSKNjj%2Fbegy98ZuMPn79OhHoWtH7zcn2Ce01tJX%2BP5bsoTxGuQBaNiuuQYTa693mrsoUXEjsvidAamRTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45ee1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89475,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-26T13:56:39.133642Z","times_seen":15217,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Zcash.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Zcash.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4119\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-1017\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TX%2B0sxR%2FZgJwpdWb4wrPS6%2BiB2Q%2F8e2deYnQ8BJz8wGhIaoXR%2FOtl5x7wgtoc6Qewk4Yewk2sGKmZYkCPOmZtRmhoDpfDVUgVRdqKRC9jZg3VuGCcL48Z2xcUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a78f15b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"7fd60355aac831fff780e7e45d6931d1","sha1":"d1822e7fa3831c3f50be323a3a249044cab009f7","sha256":"84d3e979f2c6c4f964b25dcefca28610388278546bab02881d4ac7adce673104","sha512":"2c408e19930d670a26c7eb4e8fe562ed753a83095a3c04a170ac396c61209c301a57362f92a4840146333e51f2b5cbfcce2cd41c16294687d3386ad0df27c38d","ssdeep":"96:T/FshMbnYa0wM3MSW4Bt2Cb4rmSnTu70vHgtxlinWkbq:T/Fea0wyvxSnT2OWkbq","tlshash":"89817dbf4b253742b6bc7e8d840c436ac893a62a0de7cc696e61c955c6802cdda971cd","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.446671Z","times_seen":17,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/harr.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/harr.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 281\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-119\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FImh6UiQLkdWHDF%2F3UM3dgEQKebQUlyZlEYERXtotPsJAzMa2OuQJMPmyYG74V4nqPQ%2FS47qfgSnKdH0h6OiK%2B1t9DYJwElOpLXYGRwe0LeskAOjEBiFcGktw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7bf21b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 15, 8-bit colormap, non-interlaced","md5":"9eb27af681c4a14ceb26b49e232f1d9b","sha1":"8b95cb200bb80a306ea25ef61d91cb8a66bbc202","sha256":"ed1589351fbf5998ce53cb3979fe77c8bbd66c40edbda04abe1c60b09fc9ef3e","sha512":"aea6bb14425ac88707f2f9d27bd6716c4ba868de9618ac68ffafdea838e71f4ce4e8a431561b28e9465193d653144085162feb8383775ac42200954a6b46e3f1","ssdeep":"","tlshash":"f5d097cf42c23efac4a5526f3a801ccdca13120a2b054adb8cc00ae8ec0f47b43c8283","first_seen":"2026-02-16T14:34:51.148177Z","last_seen":"2026-04-02T23:13:36.447653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/T.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/T.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 66646\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-10456\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwDAJpWqabpKprzZZoYOzTIh%2BbE90asn5opAH0j%2F%2B8F456sZfJ%2BLoZc4ULSDnVrl2BV2WJVYmFoO938c3tXQpCDTxTvHUKHa2pFVL5YeDZTcb1Sfp8FRODkaig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7bf23b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66646,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"da8c3fd8edcb51b6c6e894db3d3e1ee8","sha1":"7f79f9a2fd0e7725e8af118779bf0f084a1f7293","sha256":"2b5b276d88f3c8799b4f20c4614f88baff18177b8193b56d917b4edce8e3dbbf","sha512":"e4369f7b9390687b8c0d94c61aac0f4b1629b28aff499785562b7fb7b6e37d5b58b2baf6d8cb0ad5971b42411e7cf16724ea97d7018d0ef3e8b4c82c1724bb8c","ssdeep":"1536:M6c5KqRSvlKwk3cXbSo6/BF5ZqoS5bRouKHXq7isAv+e5vZ:bcAmcXbSoqBF58F5bymisAWqvZ","tlshash":"e35302d7ed6d5bf433c2dc32e0c859ca762284c567aa03a635a41ad9e00f5f53097eac","first_seen":"2026-02-16T14:34:51.10935Z","last_seen":"2026-04-02T23:13:36.451317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/MIR1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/MIR1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 25054\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-61de\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vO1G7WNnr4xViMWMzBvlTV98GcjZm%2F6QiefNsOTtyy%2F%2FCue8XYLshjZx15WlUdjg%2B3GQp%2FliKWjXzvBHQFImTGUv4l7vaVyQaMHZ4cUCGlN3%2Bwqa3TB%2BFOYETA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7cf25b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"083b71bec64c46b2676e34dc1850dee1","sha1":"56e62157cd3de503ca07f92a177ffb0db15a5b51","sha256":"a2f68ad39a9431841a43e599a6a5938a07aabfa22b8ce7086c53d7b95851e7e8","sha512":"bf20696b9d6fdaa7011043b71f4a650e5077b970f68b8791ac1b0ef3347bce156e892d5ddd671a8fa66e331dabb630654568d29f8fd899998da686ad05692192","ssdeep":"768:2OUVj8r7qFYX4885mjEYtKXpbfeKfPqxV0:2OUV4PuY3kVpGKfPqI","tlshash":"63b2d094d131d9fa2622fae8723cdd542583178eb5b1ba86ae0fa3030d1fef5148911e","first_seen":"2026-02-05T17:13:42.383909Z","last_seen":"2026-04-02T23:13:36.457775Z","times_seen":4,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.me-talk.ru/cabinet/build/chat/modern.support.js","fqdn":"widget.me-talk.ru","domain":"me-talk.ru","tld":"ru"},"ip":{"addr":"185.71.66.142","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"me-talk.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 19:27:04 GMT","end":"Sun, 17 May 2026 19:27:03 GMT"},"fingerprint":{"sha1":"0A:32:C2:5A:3D:B2:55:CA:08:B7:A2:05:90:F6:15:05:30:75:22:5E","sha256":"C4:EF:63:F7:C7:52:82:C8:79:43:91:3F:F1:6F:5A:E1:12:85:0F:1C:AA:80:37:48:EC:FF:D3:1E:0C:A3:73:BA"}}},"request":{"raw":"GET /cabinet/build/chat/modern.support.js HTTP/1.1\r\nHost: widget.me-talk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Thu, 02 Apr 2026 23:13:05 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 26 Mar 2026 10:58:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c51172-b1f07\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":728839,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"15d93607c46d61e929f3db7bed9c15a3","sha1":"69cf7151fff916138598382f1ba6bd36a51ef87a","sha256":"5f5768b207bf9ac193d0e199e8f5ef1ec35504b0624082719987760e0fc8716e","sha512":"7d9265db3e7ee683130504764245c8dae5cad62a3f62d871c5997c0f8db2270f06b36cb14cba7cad259a8a76a0aa581c68f2a20f9e251007c9043930ad2564cf","ssdeep":"6144:sg8y1nKUCMJ4Fco5XC+q5o6pZJ0OWpS7LStpgV142izjfUPNHbY8QKmQ/uy8BIqF:xJGOWplGcPN3FVkbV4BvPgJjR8L","tlshash":"c2f44c9672c2742313af05b7d06b2114f73e159929090c78f328bae63e55eca9276f7c","first_seen":"2026-03-26T12:57:53.470908Z","last_seen":"2026-04-03T06:34:30.958876Z","times_seen":63,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":151,"dns":1,"connect":41,"send":0,"wait":152,"receive":131,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-02","alert":"Hunting_JS_WebAssembly","trigger":"widget.me-talk.ru/cabinet/build/chat/modern.support.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-window/script.min.js?ver=0.5","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-window/script.min.js?ver=0.5 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 863\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"8e2-64e19f0032e2f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qCvb0ECU86cKyNKzU48NjNrXCaUfjvRETB85z4K%2BvhykWnbVPOWPfiYlkyANkJE6GFCLMt8G0qIpH8UFfOem7lAftJ5XjXFGrI3veBX8xqIGsRj%2BPzenUQojw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45ee6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2274), with no line terminators","md5":"b6170d756b3d19067bc023babb6457c7","sha1":"1afc6c6ec398fdefca61f9d8d2310e98f49d4a26","sha256":"b874bcc7cf1010abddfa45d4031310ad43dab8de6f158dd5364080d9e93d7e4c","sha512":"8b748f62ea47e622f8a3219c0713030085b13a091d62cc1afd0e32d6bc4d1064ba359fe4e0e6c1d9b6a723de9f5f5613cf4796543ac12458e5152b111e0fc162","ssdeep":"","tlshash":"a241e0747282b46f067b40b02b6b730a52919a0bcc578505857dcfd836eaf9fc74b2a2","first_seen":"2026-02-05T17:13:42.336829Z","last_seen":"2026-04-02T23:13:36.462992Z","times_seen":5,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-table/script.min.js?ver=0.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-table/script.min.js?ver=0.2 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 551\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"5a6-64e19f0035d0f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RhsJ%2BzvBR%2BkY7M1jA72boM59zqAg8vW4TjosKqkZf3eQgVHxTkQqYr0C4rDNH8%2BYj50e5pXtafKcB05SRJtYabj9iQLEgDd%2FEjUlFnAkTvB%2FavZMp3SVkw8qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ee9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1446,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1446), with no line terminators","md5":"51fb7fb9b10b02752c7de763b94f4f3b","sha1":"b9f6a49d6f39435998b3bd708b04349bd9dc3781","sha256":"036fffff961f52b577ee8c6f3ff984d944f9224f6d0b2de25fa25a8532aec622","sha512":"1f2bbf1aaaf92fdc429f422c2546cd37627b1f80430a549c03ddc559006b4daf6948df8935835e5a846ce274821cf9bc870a7983300b4efce75c74e8e0469395","ssdeep":"","tlshash":"04319d80b3a061bb85b762f2235be0453220aff6f44e006da52ec07a0df7c453636d27","first_seen":"2026-02-05T17:13:42.369895Z","last_seen":"2026-04-02T23:13:36.467673Z","times_seen":5,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/tw-ico.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/tw-ico.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 651\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-28b\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAYMJuG6HJZ8X8rSdo6Sioz0iyt44XIMrTa7UhP5TE%2FD%2BzgLA3VzuXO3DGQLcDFfWMn65ouVCsCGRj8EziG4%2FtC%2BDStRZjqCaQ93Yfc4GNUcdU%2FMoiYojWlZow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a48effb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit colormap, non-interlaced","md5":"24caa2612ffb4244d208c82110ed27cd","sha1":"caace4f2ec14854d6f218edb6f69db9651542e86","sha256":"bdbe54f270f143fbe792793cd102b0d3d95869c431d49753f1ccd7f74a115861","sha512":"8e55837739bcf14b2ae3bd10f9f7058b68160552afe0d1ce7616bdf99f02c378d1dc2b1e17ea22bc72678b61e0d41fe9eb9d371b7249559b12cd43034de29252","ssdeep":"","tlshash":"69f068917413046cc0963e5341055711d55d2dad6e9ccc0f6d038929c08a74e4f1735a","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.471185Z","times_seen":5,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.1 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Mar 2025 09:48:38 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"67e27bf6-1c68b\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhDJl51W0o%2Fug%2B5ZliK4xwxpyAoJ5Mzjor%2BCOJPRTAC94J6GUmkOJK4ZW3wX8VimOWDxP7JkUPaYjSzbv8PSj4bsDf08gzgR16ipuxRAjZsNdsqB9sxzEt68Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45ee0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"dfe67cbbac3da53fdbbaed71c91db428","sha1":"8c82643ef63a8389c1b800b7c5d0af9d684b8b24","sha256":"597ddfdee7171750c16ec5aafd392cf992e9c53386d6bb6061d48e30334f09e9","sha512":"31f194ac37dc93680b60746a2a8cd67eb84af9ed74e270159ea37801c092ec9ee9217251865569fb5346a4b236aab6ca0999dd12a2fc8bcd0370013e1e764481","ssdeep":"3072:UeeJu1iQg5MG7x+qehvP0x2pck2qCA3Pu:T1iQg5MG7x+qehvP0x2pck2VA2","tlshash":"9ab3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-04-15T18:59:45.869691Z","last_seen":"2026-04-26T13:23:12.731712Z","times_seen":31604,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-timer/script.min.js?ver=0.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-timer/script.min.js?ver=0.2 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 467\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"3ad-64e19f0034d6f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mfoso2XMCPXlkpBYM8uQcBk1QlhqODHjNOApPI3nQmS0zFCutDqvninlVdm31VLVeI%2BKQ0VadL5EJ29GLU5Oou%2FbaI41ihNSqNvy34yNtYjbrCEPI4PzBnqKeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46eecb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (941), with no line terminators","md5":"654dc061e90713efb47762666fd2281d","sha1":"7e1a8e6d9c6c61864d9c6366eaf24ca7f0847d55","sha256":"431f4718fd47f97b73b01b18b431bfda25ff42bfdbb1afbf2e04485ace463f53","sha512":"c92257777cee777ead4d446dc00e08641dc2f14b09eb21616f5bc07d23fb66a626b8560d930d685070509b9053f9ad7d016f3711047401efb12a1de3e21f81b5","ssdeep":"","tlshash":"b3119c4873c830a152e721f16d5f13c6a615ec38c6268d0cb68db8f5edd6d54683263a","first_seen":"2023-03-11T23:38:54Z","last_seen":"2026-04-02T23:13:36.47804Z","times_seen":10,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/flags/en_US.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/flags/en_US.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 377\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82060-179\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsw0JQVqqBVg1LguL5kBmASIL1FNOnnkOIMk8WcT7xFkFL8wPvBAsHFM0jYb6040hlO%2Bn1du%2BVSGhxDnnnb9fl%2F6dHuKBfAT08VO3gxUnRPYwNNj49DakZu%2FLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ef1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit colormap, non-interlaced","md5":"01367587c92ac7e722da3048abd7cecd","sha1":"0b1cd55f2c2ba1cc8f8bc7425a953645556f79af","sha256":"f7af4db553d7bd32059bc4ab3c01655690c20312d6131dc7ebdaa527b4852fdf","sha512":"8b0908a51849450f8ea77fe8b533a2f9791f8bf5cfc3a034b371b90e817feb6e2ae6e9d01a6196654a640fb75e35eb2fbb8120602d8f41202116496e507b9d89","ssdeep":"","tlshash":"c7e0c0d2c7334c6fdee0b47aa9946208fb445476912337cb991c77365262203c5c6a61","first_seen":"2023-05-02T14:04:01Z","last_seen":"2026-04-17T05:59:46.763899Z","times_seen":48,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/16636839959-icon.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/16636839959-icon.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 14054\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-36e6\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkGMV9QLav0mNReGNYF12%2BPTRPa10QviaNle21BsRD1nkUAJaFRQigYG%2B1dRR6H2ps1PY2QoK2cSsEkX3yOHjhbALvyONUcXf39xS6UPR0clTYXiUvmwZGAzGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a78f17b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2e44035cb47981ada5aa601ee0795918","sha1":"d2cc4126b0c693d2f6ded0268d695cf42d09632f","sha256":"291cbff9cb1cb5c19cb7816e4a2c2eb6f04ea6b4177b38fae6207486f728aec7","sha512":"2498e22d543a5349bbd7ad021d37b67a82e0ff3e68f997b922a3f5526e800ab23c3aa995ef69b57ab19aeddf42d4c777b8a269df86d446c11a8e0797cea22013","ssdeep":"384:1Tci7rQ5msGe/T5fsiz47Ndvz9BZigxILWEursGTq:2i7c5FGe/NkiQvz9BzxILi+","tlshash":"f052d0f055bf3bd64077f5a4a03bc8e31ca2846dfaa81317cac692da69374d63724941","first_seen":"2026-02-05T17:13:42.318027Z","last_seen":"2026-04-02T23:13:36.48134Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:08:35 GMT\r\nexpires: Fri, 02 Apr 2027 04:08:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 68670\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-04-26T13:53:16.388949Z","times_seen":1102,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":183,"dns":1,"connect":34,"send":0,"wait":16,"receive":4,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/ajax-big-loader.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/ajax-big-loader.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1924\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-784\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yun2lhtqNJqmCSCH43F33eX0AMioZG2jxE%2BN1bJ6010K3Fdyw%2FgtttzBUyEtSwUV2h1xmatkYox2CFmK46dX4qV4cgtvxwadrIzU4DLZq3qqPOP7v5afDhdxKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385aa2f47b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 54 x 55","md5":"b4e616ea821751db18b863b2d3a1159c","sha1":"f6b686a55f29948379875281a187143ed79a3ba1","sha256":"66a8519cdbca18cb05c062cd53602975f1f53d80d42fe6049174bdf2d4c3c4b9","sha512":"15fcdaa9ebdc8789e143f83e53e272d430e11e8be65be38c1a22a602717ee12fd3e438803999ecb9af8f56ee229d1706e5399af034f2c1bfb0a87ff9d121a106","ssdeep":"","tlshash":"1f41b76882c71c43ff5a927c4ca970c23f325aa879874ecadcf74b164a23163b19116b","first_seen":"2026-02-16T14:34:51.123546Z","last_seen":"2026-04-02T23:13:36.48552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/telegram.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/telegram.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 325\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-145\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLTz56H4WIZI7xdrxwoD9WqgC1cORCYbuidBIqzawedaTOnDKI2nfl7d7qjfVEGXK3u4%2BMn%2Bw0YcSo3%2Fsss11g800MOg0soVvMj1cLQj4l6VTdd6Yr9LgL58Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385aa7f4ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 12, 8-bit colormap, non-interlaced","md5":"277ade45a8dd63ba2e118925c97aade7","sha1":"1ecab49da8953d3d53f40d786bc9cf3532329bc4","sha256":"c6b1af985845f0c6f10523e40a5d11428f698ebfe7d7155dc3147cf19c5eac74","sha512":"0ec77fba8ad7b8a01cb8aef51c157f7b09df039e7b1e5fc97367fd1804de240665798ae1c9c35ceb1b5446678cee63ef9eb0189c3699b103245f273698b2202a","ssdeep":"","tlshash":"79e097e54282cfe48193043cb018ccd0cc20863c02bc202fe6028bf3ca47210a3931c4","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.486948Z","times_seen":6,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/js/site.js?ver=2.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/js/site.js?ver=2.2 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1183\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\netag: \"ee0-64e19f0381902-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdlWmCU%2BBMoMgTHS%2F%2B%2BTwRtFfhSD0%2BRYsq9c403alh0wMvWk0CojB5QSv2QBPOZYyV1DsFyrskMCcXiWEyB%2FeSWekrzJPT%2FQPSN9deLhgHPbiKuDF6UjagftYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46eebb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3808,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1759e344bef97ce1adac46303324f7fd","sha1":"e7330732f22447d5b44875c383f087c58efbe849","sha256":"2b726de626449e19e98547bdd6a238cfb22dd1c4e9b9b106ffe9e06a0d616b76","sha512":"4e67308f320096eb52af2ddd3c485e6791f8ccfda8f1cfb74a46cc19f7485993e46951eee494fdc2fe2a454319e3651448582baacfca990ac11e5f5272e69665","ssdeep":"","tlshash":"5771f342ba78b62dd1ff306da17f0110ef29d4574a022c58e8fa55606ea471ab7e3c2d","first_seen":"2025-11-27T22:11:20.599435Z","last_seen":"2026-04-02T23:13:36.488714Z","times_seen":6,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/3.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/3.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1407\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-57f\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86mqy%2FHudWVilQPoS2UHQUGiBwpOz%2BpzN%2B64VAO%2BAfJFuCkQbBuo0w2FFngiZRxvT84Faeqp76Q63TTML%2BI9%2BEQQlM8JmYcyYwGcJ7vr%2BMxPxEK4SH%2BilFSfmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7df2fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"d311aa61a581c2dcc2e5cbf9e6c303f9","sha1":"9932516da94a2c6f3d690912973ffddb2cebf2ec","sha256":"430dd9cba1217f2979f097727b9e6681ebb3ba766a0b120f3113ba8d70f64f20","sha512":"454c9f5b9741cd94c4a8d43570fa7cf1a424fa54893a94e2dfddbc8c526f9df95d3e6c6456679f532d3e869b9e59ac01a7bfb0306da36077a11996f05f2fcb7a","ssdeep":"","tlshash":"a021c8a749b9efddca3add5e37553cf45426921c0644a15f1ff888c9c70393c634a080","first_seen":"2026-02-16T14:34:51.122726Z","last_seen":"2026-04-02T23:13:36.48948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 10:27:24 GMT\r\nexpires: Sat, 27 Mar 2027 10:27:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 564341\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-26T14:03:07.524568Z","times_seen":21869,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":124,"dns":1,"connect":15,"send":0,"wait":17,"receive":23,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/1-1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/1-1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1426\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-592\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvceyKJ%2BRqSv2ENu62Uxqu6JHk3RA7ZoI22Tqqmp8mVd9iE3Alzmj8qmqPKk7bQcHonIoy6PZUQbURnnhA3XBEninNEefOzbMu%2FQemxu0sCxWGULqSxsQdRpvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7df2db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"f85bd3bad1fc6422fa30ae4993c99130","sha1":"4a7e3455dfded1a0ba4e4f66352381696d2e8f56","sha256":"385397724121f91cc918b14344c31b99cf5c8c926c6a79ba80c1fe6548626b9e","sha512":"a92838a3c27379e8f2594d751c315b5b6c9808e53d10f427ea5d9665b4f1e4a1d205b0907fc575681f1f7ebee5a831e8c0c0342991ab789bf6f6dd740024ab1f","ssdeep":"","tlshash":"f7218665571109d8c3a6b32ffc521dc1ce7803a8ef5152578291a2d6e81302d4b6a281","first_seen":"2026-02-16T14:34:51.157122Z","last_seen":"2026-04-02T23:13:36.49163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/kurses.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/kurses.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 20286\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-4f3e\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0LnM8FH1r7IhNUJfGZSg97EquAcHEl12MSCpJuRZWzi6v6C%2F2pm6La6iR%2BPtlmO2FAy7nL7wQujzawicb8sEnGwLkSvCNi0l1n63IZk%2FqyBvnKAtURWgRGBEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47efbb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20286,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"023bce9ceb9d90ed8a8a55511a30703e","sha1":"f6b550557d891c9e34f6edef98f59c091d6fd292","sha256":"293afb68a1d1ec4ecc33346310167559f340170a74b931a869205facecc07bd1","sha512":"423f01588db6a44ffef2a0b6fc16fbb9ff51877ea6b555c6200e91addc6489852e4dd755f1e7a4b1fd9f512a1b6be26ed13fe09474dcc36144cc57d5cf61e61a","ssdeep":"384:Xmnc7EWELH1j88rEE99BjF4vUP5UP8M/3FklEPwaAoJOCeOxf+cQf9zbxu:X3EWKVfYY9Bju8mPj/oP5eZO9A","tlshash":"0192c02da05954165e0964f93738afea2a3cfee68485cac742be605f3e3f45c305505b","first_seen":"2023-05-23T08:38:41Z","last_seen":"2026-04-07T12:23:28.176831Z","times_seen":10,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Bez-nazvaniya-4.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Bez-nazvaniya-4.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 3506\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-db2\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0PqWILLW1zI9pdkuoC5uVyEgQW8EcJL4z68MnntWCARXwBDbT2Yss148H6BSYXJW2D9mL6L9ZCr0Tk8rmNJJgLrJVvuOQF9bABRf63X2RodXiaLxwzbU8soog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a78f13b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"072c3296382ece05291245a3878f6654","sha1":"9ec3faf6b10c5d4520e8ce17b1ae34c1f01986a2","sha256":"6e61277641e12558e16e916ca0cd373c5aed2c3634eab366fa54dbd3183e0406","sha512":"c8c286533926be860fd5aee9e82bac45798560aaea0ebbfe66280cb446138ca0b7916a9bee56786bd226a1da5774054293e1ae5fbad9552fada81862f7daa586","ssdeep":"","tlshash":"76716d7c4f85882cd07eaa02253adebf4d289d42e7989319220786573376641fd2d1fa","first_seen":"2026-02-16T14:34:51.142529Z","last_seen":"2026-04-02T23:13:36.495666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/YU.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/YU.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 79133\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-1351d\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBU1p3%2FAAAsbPzQYUy0AsQBGLKbdFypqmk4Bvs8YPTO4eZHSk9CWasdxt%2B4aa%2FsRU6R%2FkevzNqNnbuMMTfc%2B5VH%2B2xUJtT9Iz53898Z0hGpTYkDaydGPgns%2FTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7cf26b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"e84732b15ad14939ccb244c1435f9b8b","sha1":"097b591be05c95176095d0af028118b968761ba6","sha256":"8ffd5014e8143ab9033900d7bf63df3e8d67595ba8442c91e7eadcf2e91230fb","sha512":"8a319c3ddaf69200edffb420b19afc2b2e0651033919845d55d7ac69f31a783cdb0f5608d6327629527b2c8961ead89ead8917795c6f559f75d0278aa8914149","ssdeep":"1536:nJfJbSZ68QntYPhs2/Oqe4PYvOOUEwyLMO0mCmXMbYsENCcilwOyX9zQh8tM:nJfJk6jntYPhsEOX4kOO7wyoOn3VsEIB","tlshash":"b773015eb4f51059cd12709db21509eb7e12afba8cb020f47cea2dc7961bf0984cd9d6","first_seen":"2026-02-05T17:13:42.361936Z","last_seen":"2026-04-02T23:13:36.496911Z","times_seen":4,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/4.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/4.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1496\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-5d8\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2B5S2bgFrTnx2Lf2M6OpONuF90dfyegGWwWaa5QHtWr4BN%2FmND%2FlugRYKf1F9PMIYVSZXEJ0fJeQ2HlhhJ2BUScMd7EiqsuYnZvIER1qdx4buEfiWj4%2BLSaCwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7ef30b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"eebe6af838151fdc979ada4c3761b0a9","sha1":"775572b09d07beb528e977914f7c50b49468b93c","sha256":"387fafff9b8e1959b69b6589faaf28ef910c9fe0838188901c209e64b397c083","sha512":"094d47b703d3f62f83631d1fa7f1f64b96f75cf1905374467656a95d59af684d15243064dc486a24037b9ee9608c5eb977c4307bce8767305b691306f9357686","ssdeep":"","tlshash":"4b310b1143c57ad9da81d80e76a86ee4790541df009b41cb2c450ecdc817cef675df32","first_seen":"2026-02-16T14:34:51.114849Z","last_seen":"2026-04-02T23:13:36.497971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/GAZ.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/GAZ.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 429987\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-68fa3\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vexlZGIu45jHlhT3oVYJ%2BHj2vUO1Zo23m1oPR20%2FM4kKsLGRW0HBO6UcVJ67TIdy464rjRaMiIxqeWZhJ6%2FTe%2BurLGoLQr21sP1VSycnaNQXqdwYIMC7bwyXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7cf28b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"cfee99bd395606fd1e0d7cab25fb6cb9","sha1":"d9201a2607b09d5d55ee0f4d126e1f6acd9fc0fd","sha256":"db7486ef937002e9d4b8b07d55ea7b757394062a67d375d76b37ac819a5e665a","sha512":"8f2c3844d29e7102df516153b1fff33cd347ee9e13cb190be60356c8972fd291e9bcf09e4d0e406494fa3944f8e00034c2e4e717e6d3fe3b4ca6283a6f82ab54","ssdeep":"12288:MEdebfNzJbmLAClGYLqW4cVkTN6jkWWu4NvYON:MEdIJ6cClGdcaU+u4pTN","tlshash":"b39423789c677634219aa699130e43797baec1354eb304a6c2df4cecf093c753bd219a","first_seen":"2026-02-05T17:13:42.355616Z","last_seen":"2026-04-02T23:13:36.499077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/email.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/email.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 244\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-f4\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URdXRWmBKuj5wIKZ4NP3rw7b%2B7CHsV%2FundNcskfJ7kyrXOQCrmV4RxZTs%2FvW3W3cbcWtiwaT%2BU5R17vPRIeDlfSTumnVXDwNnfLjYr4HqBiSkQpukgrAFywDzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385aa7f4bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 11, 8-bit colormap, non-interlaced","md5":"5ff4ccfe3f80ff45fbccce135f9e4ef7","sha1":"66685e1fe7b7d092eef9e1b0b10f68490a1bac08","sha256":"35ff0f81d24ed4b9de54b410c9a92dd0ecf71039a4c0e209e3e03deb55d8ab23","sha512":"4c68b563fbce22b0a55d1deff4709d064ccc13f0b2db9f0f1527ebeee3fdaf8dd9eece7de4070d8ab5825eadd8a0928976dd53297b4688d1582ffa1df5b963f9","ssdeep":"","tlshash":"99d022d08d220cf8d285282d760a1ed86e027306782782079210e0f8e887806d384326","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.500678Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/proobmen.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/proobmen.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6483\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-1953\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZP5vRQYhhYBiRFXHHZCS%2BOHhJxySBuThwSBqLsxj%2BmZDBbncHmWjLn0Yq4c4ugayZDATDMfP4qF0VhAH9wLikzQrjxTe0eQ8ngZq5n78vx5crNhtGfmvfTF78A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47ef6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6483,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"3f3ce4abd8c479ade992a25398507eef","sha1":"a09491b674b80273b1956c87cb1db6e7b0f65210","sha256":"3a149ce2208fcf85e0ffcea856c2cb979b6e901eaa723f622d6a886210b243c0","sha512":"68385b301a8057d17d070b4d694083acc79753eb9df8a8c56ca35502531a656a0d90642ad85068d88dbe5c00e173ee8ffdf5cf70197a2bca04fe83070459e471","ssdeep":"192:3cvzXWqgT1BwSyE4spuv1CEz7Jp8y3Y1y7XuIdKUJO6plhnX1LMyybvEpfdkR:3kzGq6vwSyE40U1jnJp8y3Y1y7XuIdKB","tlshash":"1ed14b8ccc88b80b743e35f93a315d5b136a9cf0b6f5e869612ee054e6174bed00d276","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-07T12:23:28.135474Z","times_seen":33,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/vk-ico.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/vk-ico.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-284\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrEg4O0LniUYwTTJwdFoHyL0tIgb7z686bqBJ7awo1%2BNq6B1e9%2BBYpNzlPoj68hIUhzXAEhb6Wa4S7mGgQdPHBnWPWRMNXpcyadVVinqpb4zv3VqiplCjFSKPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47efdb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit colormap, non-interlaced","md5":"6b711db329703ce562f54fd4ae13d6d8","sha1":"17cab77e5d0b6908cc5ac39a5bba5b0962186e05","sha256":"5371ac33491521076c763ecb84c929a3d6b92ff5ed50a7dad05605d1884bde84","sha512":"8675eab4dfa67794e538334d701673b70bed3a5ede3a0dd27d4a20dddc0e1d888390256a21d94c4e02e9b9155a9b1db35028fcc75e22d2d5cbe235f6d7f1a40b","ssdeep":"","tlshash":"49f096b2518c1c6fc863f68e208fdc7b85161938cde2960513bac230970eb4ab5f9993","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.503719Z","times_seen":4,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/premium_action-table1_change.html?meth=post\u0026yid=047df8e70c3b\u0026ynd=0\u0026lang=ru","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"POST /premium_action-table1_change.html?meth=post\u0026yid=047df8e70c3b\u0026ynd=0\u0026lang=ru HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 13\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"id=64\u0026cur_to="}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDKI1uc7xVYPq6rGNwVsZKW8P%2B6QeUJEgPLXAaBrXcqYZHt9MQTDCGiv4UXQq9NYtAsG55gxLYlv6%2Bn9rgLjiiEbCSrED8%2Fzp8WYLbCBXdh4gz58NKN50hM1%2BA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385aa2f46b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11538,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"283624193179a44989f095359b2931c3","sha1":"a86591c12b682b666c5c3a87bad29b04c1a9b127","sha256":"1a78de9da229388215f828b71bf14992ed49823a61c1673092cc08537b9b34e8","sha512":"94540f843dda81518f86ba85feb7cac30caf16241d20e5a0f949ff31d768baf14b51c7efeef68e2f3dc419be595d169b4c07073cad5bf0af52628bf01d42e206","ssdeep":"96:Ik0FuMjwc+085ld6BnUrCOwl3RmCFKPGTxD8JP:ILk/N","tlshash":"8332c27330395066128357ca70f6a74db323ed5afe2387c2a6e679a5660c998dd33c34","first_seen":"2026-04-02T23:13:36.505099Z","last_seen":"2026-04-02T23:13:36.505099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/glazok.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/glazok.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3206\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-c86\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3lZDJY1oPtzuHT%2FYg9u6twhh4ditwfhyoJMcz1C5ulLgN6L5wDJBBXT9L8AsXp3v%2F52pH0SFgr6J%2BPfFn4bTs5sUZMv39KF8ZiItW3O3InGlE08xfkCw69lUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47efab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3206,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"0d8f1837ec49b2f603d29cd6fbc1291b","sha1":"476745d6e26499af873ebf741c459719eb0297a7","sha256":"732da78ff87d8238cd9b9234ff45e31a575606f50863eee406f2694f806d588f","sha512":"1fb27b0c91bde58ae7dfa20a3a9a1e45ce67fada63818f2fd420d3582828196d170263ff41ffac39861a97e99d9e1d4d2e1c599b962ee4bf27890c30c8440efe","ssdeep":"","tlshash":"1c61198dbe6c4889944ab9422afef11943350c6447e8fceaa0dee04e1f14637c809a77","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-07T12:23:28.14814Z","times_seen":43,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/ab.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/ab.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 26894\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-690e\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlZpJgR3IfJl15Ifh5E%2FFnbXF2drNGmEfAj7Aeewh7wDCSS1X8BdaHWkjRZGqTuveqBcZfAb%2B%2FWf%2BGvqOcqoOPC68qC1Qc4avqnTuw9J3hBzcSo9CErhSDwxJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7cf24b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 448 x 448, 8-bit/color RGBA, non-interlaced","md5":"3cd54ad2ed6c00289f0c7d17c9cecc90","sha1":"18884ee67ba8f5466d418170501258861b0d1abb","sha256":"ea1bb96b436a401aec5d08445aa4235b9b1909e388cd157f8b6ecc4fee6b56d5","sha512":"0347f9fb97c2cce0268b11fb29df634fcde0a525ab65b590563c251f14e53c11d5fdca6dbdd7d35f29695c23698e5c26bc8f14b772d9d965479133e4b9dccd99","ssdeep":"384:fsGl9sU19oCNBuWdI05nmXHEoi76ENJRy1P5Uj6hVdDtZzAFtl6FVIKX8ohEt:fZwO9okB5/5m0N7fUP5k0ftyniDhhEt","tlshash":"25c2e11f604bc82985560025facf45aa883f9768151b97327993993a3893e477fbc32d","first_seen":"2026-02-16T14:34:51.149028Z","last_seen":"2026-04-02T23:13:36.50739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/2.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/2.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1255\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-4e7\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPxgNXxynnYvt6Uqz73V5m8G6JcLIRMToUnw5NuNmNWZF2Pg6NbxL4%2BjEaeGHXaoti9foYumaodNMwE%2B5pR00dSNZW60vYtzsm%2BzsaEsJOhZ%2BYlM8wAzQYY%2Btw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7df2eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"634f49913b28f44c7780c57dbb93225b","sha1":"d7ea9e21c4a1e7d97f77b290225c13342de465cd","sha256":"9bcce1fabcb0866c448eb56e1e6de5aad3296f632397efdbeb03f82d7667c9ab","sha512":"bf814726f196e5aa45c883671da24511e6f767e15c48f8a3ed3208d599fb08d073eb93d69df87e1ed5087d3478a1a125088326504942f13d7f94deeb9dc7d3fc","ssdeep":"","tlshash":"a821a7fb25560cf0d619232ebad17dd15d229319aa0c16db304638d8ce7310553a1412","first_seen":"2026-02-16T14:34:51.113978Z","last_seen":"2026-04-02T23:13:36.508942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/vtb-1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/vtb-1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 16693\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-4135\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chcHFSgVgfLpAgjbsCw08yxilwkO5MkI22syspigB3CfI0R0YbeBEuZrDifeCne2peVvJ8CoDBahFYHdi53f33u40Pgg%2FvND2LdWfy1q6uhJQisy8z5cOlsCbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7cf27b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"13b0e13d3670b19efcdaf5732af19800","sha1":"54f83c66c122efc6850bff624d4d15c7a8f67613","sha256":"7a2f3365b1fc84dbe3086dc6e82b1d05168f79266558e389981f3b41f139fc89","sha512":"5c760af5d801d52a0c22869573c14674085bf55052b817ef4041675bcaf4c7cc5dcd0ef0e42bfc203003cefba464273fff6e8c8cc0218543eb15c7dd85bf84f2","ssdeep":"384:ItP5WBvYWw9bVpsvKMcQspVhbzC7Hfl7hqwQ/dEepaw:05avY3bVKDFigHoVdL","tlshash":"6e72d08941c4978cb114c7935c2e102ebd646bf9e440e37aa88dfade2e05705e22c9e7","first_seen":"2026-02-05T17:13:42.349272Z","last_seen":"2026-04-02T23:13:36.510302Z","times_seen":4,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/premium_action-globalajax_wp_check.html?meth=post\u0026yid=047df8e70c3b\u0026ynd=0\u0026lang=ru","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"POST /premium_action-globalajax_wp_check.html?meth=post\u0026yid=047df8e70c3b\u0026ynd=0\u0026lang=ru HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"link=%2F"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03SuArhMA828EE8VceWHRl5tsJ61GpZfwOqQphUZvoI5s4vqVbhExeawg6IppCJTfqN3WTCBCwlMtQM4Oq62uB9F%2FfIbJ0QPwfmSRAyOVSRxnF%2BLyLPrRBro2g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385aa3f48b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"61905d0c10bf09c029f83c959e68166c","sha1":"650cd0def692ca3c827226b9d432259a48c3be6f","sha256":"d4ae9edf22bb8ce28f50b30ef69d61ff82c7cee67b83b413de1f7d26bf928286","sha512":"2afee0f3c5b3ca122c1563e8d16d97dfff346fb9d8d39d2a66b6319635575b0ce0ad7ea3b2ce6124a81dfda605aed5abd40f9021932803b1491673641be4ebb2","ssdeep":"","tlshash":"7ba00122a0a828541ea7294111aa176639ea9a40aa1e4a98c69d5e295a066c8e68e000","first_seen":"2025-05-05T17:04:49.563822Z","last_seen":"2026-04-02T23:13:36.511902Z","times_seen":8,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":450,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/37.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:06.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/37.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 8168\r\nlast-modified: Sat, 28 Mar 2026 18:43:48 GMT\r\npriority: u=6,i=?0\r\netag: \"69c82164-1fe8\"\r\nexpires: Fri, 03 Apr 2026 23:13:06 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eVG5hQo8MApa4PZ41n6f%2BcwJzdmnxDqbIV9tAQCH9fjhEnW2WfeK24tv3yPm%2BK0l%2F1gXjCIlLyEvUlxIXpAKh4s5Vv1EL8qwAL0CdvataFeDBjRgYYolce%2B2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385adaf5db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 142 x 143, 8-bit/color RGBA, non-interlaced","md5":"02b2fc095285e13f0c383ae055a2b0b8","sha1":"95c55b5a45d95e63948b15be5395ff44332e31fe","sha256":"ffb5bf0d3b7519f249babc7ede3658b06a899beee5cc73c8460686e64e9c01a1","sha512":"199403ad7a572f095ca7972b554fe6b2aea97e58e0f06b96af3d914d9f1c9f97e1ba1c461612987743cb0e2ae6c3a897a6735e6d65cdf807ce0ae340663f4f86","ssdeep":"192:5MVL2HcUB6wmxgmhe441zveBz2zfBWmKnACggQJ2/:iQRUw8gnTeBcfgm/9Fo","tlshash":"22f1b01859755278ee375000d93366e666bc097eeefd12a39d9ceca520a3f4bf13003a","first_seen":"2026-04-02T23:13:36.512685Z","last_seen":"2026-04-02T23:13:36.512685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"widget.me-talk.ru/comet/websocket?orgId=82f18ade02574bb23c9930b459d15b07\u0026siteId=d43t5e6mmmclfm4or48gbv3ij48vv7bj\u0026clientId=XM9rS49v4GczGcgNdccls2SZVkXitwpp\u0026time=0","fqdn":"widget.me-talk.ru","domain":"me-talk.ru","tld":"ru"},"ip":{"addr":"185.71.66.142","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:06.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"me-talk.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 19:27:04 GMT","end":"Sun, 17 May 2026 19:27:03 GMT"},"fingerprint":{"sha1":"0A:32:C2:5A:3D:B2:55:CA:08:B7:A2:05:90:F6:15:05:30:75:22:5E","sha256":"C4:EF:63:F7:C7:52:82:C8:79:43:91:3F:F1:6F:5A:E1:12:85:0F:1C:AA:80:37:48:EC:FF:D3:1E:0C:A3:73:BA"}}},"request":{"raw":"GET /comet/websocket?orgId=82f18ade02574bb23c9930b459d15b07\u0026siteId=d43t5e6mmmclfm4or48gbv3ij48vv7bj\u0026clientId=XM9rS49v4GczGcgNdccls2SZVkXitwpp\u0026time=0 HTTP/1.1\r\nHost: widget.me-talk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casha.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xuM7vHWTNifR2Bi1qPZNoA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.14.2\r\nDate: Thu, 02 Apr 2026 23:13:07 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: wDmP2tyG+gg0It3lsMF2TBnaSnY=\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Accept,x-compress,X-Request-Id,X-Csrf-Token,X-Token,X-Language,X-Metalk-Operator,X-Metalk-Time, X-Metalk-Org, X-Metalk-Site, X-Metalk-Talkid, X-Who-Knows,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nP3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range,X-Previous-Time,X-Server-Time\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T14:08:29.552028Z","times_seen":14230886,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":56,"send":0,"wait":42,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/js/jquery-select.js?ver=0.6","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/js/jquery-select.js?ver=0.6 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1244\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\netag: \"10a6-64e19f0381902-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGa7XXj5rn49kYne%2B5UbnzHtd7e%2BJplEciqkyZODaKfEDZs6Du9UeV8crdC9EDOecMjS0zvnzkBrtmHAwN2%2Fs%2Fz0VgVXWSVZQsF7Enh%2F%2BKAP3j62fZ7HKwnHyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ee8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4262,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"68dcd7339b831a65104383e472cd2f85","sha1":"6e36fa7920ae96f5a38c2a22eb65de0a9c73d3fc","sha256":"d58f88832e7ebdc458cde7bd20455dc7a087b1030893333aac816cf95a752463","sha512":"e3864db9342bcdd2c9d055c250ce8d368b8ca865968f0804ed21b11980ad06a1d48e0ca0c9d5e730a8a7c251ad7cc8713a59542183cb641169b5ee006e08d634","ssdeep":"48:y3UmwbOFXV2FtB50nZy8+k6hIqLPXYZu8g4jM1AsM1RtFqfQKwZMpOjGBeMBM+1G:yl4xIcAtPznZ0OaBVJx4h","tlshash":"84918d1872cda43482ef61e71cf93a9bf91ed53a8146df60f17945b01ec088663738ab","first_seen":"2026-02-05T17:13:42.351448Z","last_seen":"2026-04-02T23:13:36.515041Z","times_seen":5,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/flags/ru_RU.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/flags/ru_RU.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 147\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82060-93\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuYPwVb%2F6SYIMBcsuL%2FsX%2BSZbP35XSb038qDhwYLfTSfRULXjDA3i4dxI50t0LZlf8u2rxp9%2BGIwLxWNRt3jmLukXBAZ8Ngjxau7vS2VZQtFHAxKhW%2F5jv50qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ef0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 4-bit colormap, non-interlaced","md5":"ed4238df44643d851f091ce61d804efc","sha1":"5f6c400a2dec275dbec9bb1970cf2c6b14129dc4","sha256":"7d5b3020fb294bed0a4b573aa29efb16d675aecb19493735b172fb9787db6307","sha512":"b3055329e3163984029486a26f40d5d9ffdb0e5338328eeaf3a1a25a70c34816132563ff50efa9b8bcbcaf719eb09bfa0500fd5c8a175361db89764aa1a50661","ssdeep":"","tlshash":"81c02bd36300cf71fdc41033f627cd31c8255830c2e00003250ecab3f2070855400142","first_seen":"2023-05-02T14:04:01Z","last_seen":"2026-04-19T14:50:33.503034Z","times_seen":106,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/fb-ico.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/fb-ico.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 524\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-20c\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSaEsl1B9KPbopUQRrivxw7SfBzlAKAW9zaGb5kXKKz88AY1MhjHrBUuigIqK8ybJtxL4Foa8fDEY9dHshurfSaiHKEl4rQn0aOV1MgYcuys%2FBO4mvo8LaRE0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47efeb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit colormap, non-interlaced","md5":"5be5e708bad62696ab1cc0a426fa3020","sha1":"e60b3d8fe709ac4b3bda2f20f45327882cb27fe7","sha256":"125c08269b4d35eb3c910b74c77045e03ce7dcb5cbe502e075a71ece61ef9939","sha512":"a480de2cec2a177bdd9d192166fbbafd314f87cdc5f55e6fd26710648a1d98b7e1b67b55344a754ba6f2f006bab475412a0a7024d8e5196035a56b0cb958d130","ssdeep":"","tlshash":"76f09e91f6188c68e9edab3dc32117c1f64543f729341686a5d9a37564d10130d91aaf","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.517619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/pn_uploads/captcha/W3omfZ9m.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/pn_uploads/captcha/W3omfZ9m.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1121\r\nlast-modified: Thu, 02 Apr 2026 23:13:04 GMT\r\npriority: u=4,i=?0\r\netag: \"69cef800-461\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ao5syZwvjoOuYrY6D3kQPfmh5cVnCUe0gwNBnq0ItrdOEZWKzvFBoTpCHPUWrzDEYeu1ZC8D0kyWO2R%2FGvkOCYEucMP0Kp1%2B7%2F5uWl5g4xfoPZjyYr0ybpIFrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a48f01b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"2d8015f4730d325ec43753a0182ca272","sha1":"1b6fd6c8e0302a79eaf12414b0cf47b37ca05ec2","sha256":"7f43374c630bd44fac9f11a69a84b497e32056aa2e0e8ec2fe643b5a9fc9c65d","sha512":"9acdfb8a5c17dd4f159b3ccde748cf5fc40a093dc141afa6936fdd1a65fe658bb299478d67a0f0fd4bceb1e746c58e9a129d485b8278e7c2b8effd009545fa07","ssdeep":"","tlshash":"5d21f9d688c68237ea29d205b41075abacf490d2c13e3d320b85e2223e43c03b390775","first_seen":"2026-04-02T23:13:36.518956Z","last_seen":"2026-04-02T23:13:36.518956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/tron.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/tron.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 47665\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-ba31\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdpvEptHQ9Mc35IIiYrVlfITXE8b%2BZutL9r%2FSDMVhoGq69A6DVlncPIfUD2g37FBzvz7r7g8ZeeIhlGRGjHpRknqO8ot5ubSitD3AEX3K%2FGa0FfzYY6E7kYMqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a79f1cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 900, 8-bit/color RGBA, non-interlaced","md5":"3cb69d1e18374c84121ab5960fbbfc7c","sha1":"f3550523265cd34f739efc877002c12b4002ae05","sha256":"c653f5158664123bc98e264b41dcfb1f32bd9d37e29444457b9d82a4149a7df5","sha512":"bfd158658643ea5c8d809814204e26d9dd9494223b89bbae9086fb763b8ed38f3eec3ff5f6bb674f7b167fa242ea278db7ee508327afd7685a47ba68dce53b75","ssdeep":"768:BskDcHIQsj/HqYfxtxd08jD7hgPe0IevGKXDB3FmSf6q269VlDbrVjp0o9TjUC:BjcSrqYfxtjzgZvGYDbX6P+VlVjp1QC","tlshash":"6523f27748cbee8fff75416a8e67b923b0f85b19d9918102c0364a4a0147e448f69ed7","first_seen":"2026-02-16T14:34:51.177471Z","last_seen":"2026-04-02T23:13:36.520262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:08:35 GMT\r\nexpires: Fri, 02 Apr 2027 04:08:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 68670\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-04-26T13:53:16.388949Z","times_seen":1102,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":206,"dns":3,"connect":28,"send":0,"wait":15,"receive":4,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69c82063-24e94\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e02hipBwHYBGVQpQOiP2ad2W5RvEGLZKdOgL3MBbQPa7BGaf%2FWSGb3gTMRqGR5cXSL%2BIvGWG91hO2EN4x3lyZPEziIReABYUO7CTGLJnycE%2FwZCoR9QU1hMTnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45edfb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (323), with CRLF line terminators","md5":"8111568544367a66296367f390dfa6bd","sha1":"7fec0315e7e09c9d73b584059b85346eafdbe41b","sha256":"0907e6c9db3b8e082e44979beabda749fdad8d59459a2c61c645301ffd566989","sha512":"8d005561a06ae34358bee7e47363d7049a8ea7ab72cb653f3246da7e1028c6cab6a9291abaef4d07407d2a8475592f6d0515edb1f2f8211c112fd04aa1a4629d","ssdeep":"3072:ZGRcik24Qq8bU26s/IgA5WX5KgWOqBv2KIe:ZGRcik24Qq8bU26s/IgA5WX5K8e","tlshash":"07e35321fb8e204ff792b1d8ea756312ce2cc1b1961302f5f9a96530e6c904857f67e9","first_seen":"2026-02-16T14:34:51.139683Z","last_seen":"2026-04-02T23:13:36.521719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Bez-nazvaniya-3.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Bez-nazvaniya-3.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4062\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-fde\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHsBhHLO%2BYtIZO1FQrIjV0bNHbOu1xLA351XvC4OkuAc0Y9Jg9HWuTSna1We%2FMr%2BNFfVk6pxGzGquZKMGNousEYWIFh8EBexviAMT8d5sSocTDibe7a%2F90ytUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a77f11b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"9d52db242d5cda60e950de1cd168105a","sha1":"0d258ea01c654b857ed7aff8edf0cc6919d9aee6","sha256":"59b6b746f6da512339bead63e35653b34508dabb9a578d69106c1d73815e417b","sha512":"82785452befa36c7612c354af2e60bf08b8dbb196f36f77b560fca10d86c9ea967fad7f5c64cd93be4e45f420c376cbc01327443ff09f63101e19903bb8cd62e","ssdeep":"","tlshash":"9f816e3396e49ebb1cf176ec18d34607afc10839f9b237cdb1810dae606201150ec51e","first_seen":"2025-05-06T11:43:25.916635Z","last_seen":"2026-04-02T23:13:36.523235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Ether.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Ether.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-a33\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zCW%2FR96Zk8aDQRjpzM7Dpg7DxfXjL1CG1NakrdlCA59y8FYWnRgr17Rl%2BJl2Xxpne2oinoINNKSNUhhyflZWG5u93pYabhxwdDMfNhn5f%2BYjWqGTYC8JTA%2FIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a78f16b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a578eaf6647aa6e7ce126543dc334490","sha1":"2a46e38869c19529a66960c9040da3b9b2e74ee8","sha256":"9de374df86ba2cee9931c637c2f1e598b6899f315da9cc4c9ebec907b05b9510","sha512":"68b0b0ffa457a35640b21c21ff6a250e32c831c3c082f238c36be63f77b56015b7af47dff0c25c3eee44effd3d8cb4b5296aec05bcb65cb44e8b5c352522e789","ssdeep":"","tlshash":"f8512b49854c9449e15b075d0c89dec52ae1f015f1b29dac07c8f0549d92a1cb90c9db","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-17T05:59:46.756895Z","times_seen":43,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/Dogecoin.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/Dogecoin.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 7032\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-1b78\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BqhPlOTfPV7VFKD0iLBAWDCQcO9COcxzqMEBPSSLjI%2FCemL1LLXWPfX3R0JJjkll44Ey%2Bfw9bBv3feYobKOht4u8MgYKrTrQXzCEofMBFu4Ruoxdpgju0J48Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a79f1ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"5500bad3df269573df4c5e4e9b26485d","sha1":"fc5dce0e88ea64c8306632a55208cdf59370e373","sha256":"57ac76c9a84b0ca4a9e4cdef2c599f66a6c0e531f08203e4dc6c071077eefddb","sha512":"a9b760a0ab6ccde305dc41b9b9c4e6d9e08cce386e2fd924dbb08b22a2c28b7213e51dbff3b5fb7fa6eedb42e838240938d4cdb5af13c90e561a7fc352b6530f","ssdeep":"192:1cuACoallksiHV+OqwFqnGGEO/mTQRBqGgh9CokHzkC:1JtlqrknV/mT6dc9lkHJ","tlshash":"25e19e632cda752714d433447537bc7131e032e4a79d6aa831f3b72e7c5092ea8e581b","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-17T05:59:46.858562Z","times_seen":31,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/tm-ico.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/tm-ico.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 689\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-2b1\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBSaV79%2Bqw%2BKb%2FHZ8Dlm58vVcmkd6a2%2BcoWdSezuTs65sgZ6BUoKlGpiwV%2BMTCcyOpLLSwSU%2BFsg%2FCBQYwGlIfNy9fLXyJHNsCBOihrrSlNVWQdh5CxA9paklg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a48f00b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit colormap, non-interlaced","md5":"b7559c8a35edfcafffd81f36cfdc20db","sha1":"ac1bcabc5674b84178b96568990d473a8a26d760","sha256":"a6314efbb855692c733ef594806f4b4e35e887f3d798a439a7939bb333692b31","sha512":"d8347ec1b0cfeb2bd4b0213e095004e329232163254ba14379bf66f34570bf4fbb1252d6450c8615e341a6e4070ac3afdfc61aa2d613e6f40fae83cf6478329f","ssdeep":"","tlshash":"3a0168543e459c7d796546d70f8d0c335d9f1794a540437fb160402315c81c158abf8d","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.527672Z","times_seen":6,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.me-talk.ru/API/DOCS/onlineChatAssets/json/8/2/82f18ade02574bb23c9930b459d15b07/casha.cc.json","fqdn":"static.me-talk.ru","domain":"me-talk.ru","tld":"ru"},"ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"me-talk.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 19:27:04 GMT","end":"Sun, 17 May 2026 19:27:03 GMT"},"fingerprint":{"sha1":"0A:32:C2:5A:3D:B2:55:CA:08:B7:A2:05:90:F6:15:05:30:75:22:5E","sha256":"C4:EF:63:F7:C7:52:82:C8:79:43:91:3F:F1:6F:5A:E1:12:85:0F:1C:AA:80:37:48:EC:FF:D3:1E:0C:A3:73:BA"}}},"request":{"raw":"GET /API/DOCS/onlineChatAssets/json/8/2/82f18ade02574bb23c9930b459d15b07/casha.cc.json HTTP/1.1\r\nHost: static.me-talk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Apr 2026 23:13:05 GMT\r\nContent-Type: application/json\r\nLast-Modified: Mon, 30 Mar 2026 18:12:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69cabd20-be81\"\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Accept,X-Metalk-Time, X-Metalk-Org, X-Metalk-Site, X-Metalk-Talkid, X-Who-Knows,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nP3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48769,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7cce33adce3e720f8134f71217699d91","sha1":"df265b6117d188734d623d4cb9bb1bc6a05dc400","sha256":"d6c9b0795fd9affc57875b7a1525cad14f50b5623056ecfe865ed12b097c1292","sha512":"db2f45a59c4043762a568382b75a275fdb3df521af70ecbc0b6ec5f7f6c09e5f6d8c0808e2332484677e1ba2c912254f138634e309135ac2dde072fbe6629f83","ssdeep":"768:Ht2XDfuWeY3WklYclK4kDLxOxltIezWxU0rfe9xYdtu9xHkt:MXDHeYlmclZkL0ltrGDrfe9xYvu9xHkt","tlshash":"5723c8b4d2551a7c1989f3e6c6323e6e268d90abf150cb3dcc7c8963f1d61dc92a0647","first_seen":"2026-04-02T23:13:36.52906Z","last_seen":"2026-04-02T23:13:36.52906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":195,"dns":39,"connect":42,"send":0,"wait":85,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-cook/script.min.js?ver=3.0.0","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-cook/script.min.js?ver=3.0.0 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 727\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"5dc-64e19f0037c4f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9csHIUP7H2MjQ0h6QMVe52u9waSa85pHgaLL6x8pT%2Bf%2Bpm4Gt9uEVpPlEYJr9pkAYTs9j3HvALHoHeCgjd0cZmvdMyrA7D9owyI25j5nYhk0gl0ycNjbbuFvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a45ee4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464), with CRLF line terminators","md5":"0aa583e41e6f35fd952550abfcbe563a","sha1":"f81fc18e0044a9695273d0d3f3f18d3779a2d9c3","sha256":"935818f3735be98f1421f9d4d4a0d527fe7c5951621eace6234b32c49ded7db9","sha512":"380825069f0fabf6ac11f0d459c80e4a29529170929663a32d2022901af6801f00bdde89b776088d9d3f0e2419fca227aa4d57bb211ac4e0d9802af6e3c75f3b","ssdeep":"","tlshash":"4c31829e3299e98a0b132461493f220372284d7abacc8a808274e4f16df094851f6e3b","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-04-26T15:03:46.381159Z","times_seen":89,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/exchangesumo.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/exchangesumo.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 782\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-30e\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUZjw6m%2Fztc1%2FOG9JjtgfekcJBqDhi%2BehuqHbBKXahRrgnETOpXNICTNAIbvQHMP4eMcUEw8BTo2nMrc1QK9iLbeaGXilKSPc6eHfrX5kVbjfdM5tYJBj9LZPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ef4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit colormap, non-interlaced","md5":"8433c946c98fc8b7737a6b20d1baf3bb","sha1":"b5c3e13667336d9ea77cb513a9ef3eb83cf49b4a","sha256":"1b3f9eb3b45a818e3d6ac90b0636aedf150823bcc028695e8676501e64b1701e","sha512":"07393c0d06fe6acdc9957f5a0e940c59ac4d9d9c62d8886489ac68cc825c6a8be363f8636a7b94a5c3b88041e5a40368b14a0409b8d3bfb2e9a5e3f112a03190","ssdeep":"","tlshash":"fb0175aad55d3d10daa6213a3337f1ba59673a8537043700a7ab40e634301654228b8b","first_seen":"2023-06-08T23:44:03Z","last_seen":"2026-04-07T12:23:28.173249Z","times_seen":17,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/bestchange.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/bestchange.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2843\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-b1b\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPpqgURwAhBtXwJQ5Eh1%2BuRKMWAQuhWwM9YSN4T4hYcV93uz2Edw559yN41Oa7oaQcqp%2BLaltyV%2F%2FSkVFXYAeTteW5FSkREcJqJF%2B8M9MxWhLGVRM71vvIldmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47ef9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2843,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"7339463059545271e39600202b62d23f","sha1":"dde2ed7b8c3f4ba6651de82bd1ca0193c46f7201","sha256":"9b45b7eebebec8911d3d3d4b1092f1c49f082730932a043ed34b0bd7cf6e29e6","sha512":"3b49bed9e4a447da64a281afcc53914a5d728ca339c5c6ef57f9defaaac75bcb6919b1d97f693d9b53c646f70893fa887ba076c1bad87545967c61fab6f584fc","ssdeep":"","tlshash":"cf515b59e58de98d9d17b1d0a18cf421f462afdc38837264c11e9f875d0d062f86c18b","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-04-19T14:50:33.477593Z","times_seen":77,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/tusd1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/tusd1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 47088\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-b7f0\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkhyvqD%2FYHcHn5EchIBaDydi5lNW%2BK5IDX0YOEM1alGoN2PKgaIRpaF13RbrEyTTPNzaGdFKm%2B%2F%2FJJAFilFyKqlglu3VKgGVuwWwf8sT8QkJN08yt8GSg4O53w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a79f18b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"5751bd8931f7037d75cb2e7f60ee16ef","sha1":"1b332ec4c89f4b198c8e48415d55e7e5b02bc50b","sha256":"12d910c923b839cfd7f7c05de52cc9474ff5920fa6032a0c15aefd3d3d9a5651","sha512":"e6972c138a7cf795aa08e4dab599bd29c649110af3119fe5611fde00668b3de3ee04e55013f792dff0b8486f010671995ffd110af0834ed1e33504f2720757f5","ssdeep":"768:Me0yLxOUYzC7LfIe7bIPEYPqrtsofqD0kaN85xLeZibYqT0JDWxgk72DcLuR:B0yLoU6C7Lf57D+qhsofqD0z8uGYK0JB","tlshash":"9323f1c9be53e6630c1f83407e698bba987f9688720e5d7125f774a7e60a2e330541dc","first_seen":"2026-02-16T14:34:51.130924Z","last_seen":"2026-04-02T23:13:36.537985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/5.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/5.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 992\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-3e0\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6zPizjj%2FwttxOCJmKEx8Omll1jOeFxnLbZ1ZAYMYeROLe2OvHtKqc3VbMCVAfe8NYZ6fNtl6zOSxSiMxZGT%2BnQmlTRLBjuBld0vugQP3rZQttAlM1RS2%2FgH0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7ef31b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"f6a46454e87f5f0c84203e14d6cdc84a","sha1":"b2428c951629cf6c98d03025ff75ace13f7f3486","sha256":"2b049eac6cd1f5d5a9b6ffed2857a3668a80a42044383bae1db3b98118033eb0","sha512":"31faed32560bb90432976eec6df062bb17aca5b2d97df349b69d5531ade8404572d7b3154e1450639e6632c2ea551a0cdc24555ae61ed95c3bfc5250d247ee1f","ssdeep":"","tlshash":"421163a6080199ccc900565ebfdfeee64807447d87a01ecbe48044f2dd73687538f287","first_seen":"2026-02-16T14:34:51.138642Z","last_seen":"2026-04-02T23:13:36.539472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://casha.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 10:27:24 GMT\r\nexpires: Sat, 27 Mar 2027 10:27:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 564341\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-26T14:03:07.524568Z","times_seen":21869,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":165,"dns":1,"connect":33,"send":0,"wait":15,"receive":8,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/online.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/online.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 404\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-194\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHsNUvC4VEP44e4E5J%2BXTcVKJ4%2FO7oaZqtzRkvcubrVI8H1rP2gaeZa0UME8hR4F81qewkwjKa0D3ohxdxs8opDtZPfmgJapMij8Z%2BV%2BOxG8JU0xbLuW2dEw7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a86f37b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit colormap, non-interlaced","md5":"e1b8b18740a618a4bf2ce36a60cba58f","sha1":"4de7ac7f44916007cc7d9262b4d5d061c491c7f7","sha256":"c6779b68c4f64f149e9b085ac6f3449e1fb20b622208db270d63a2bdf0cd8da8","sha512":"e690a56e0d9095304b31436439c50947df854be0353c99ec2cc551cfb682ef59bb4d0e153ed995ba5909245fc67a88df7f6cbeae18eb5f62d0ce09ba1ff88735","ssdeep":"","tlshash":"35e0785175514c558a5d0fad4d777ef5db360c7b4fd74457c18578546d310091384743","first_seen":"2025-05-15T09:06:25.238633Z","last_seen":"2026-04-02T23:13:36.540965Z","times_seen":9,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-ui/script.min.js?ver=1.12.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-ui/script.min.js?ver=1.12.1 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"3dee5-64e19f0033dcf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71XPBzNFpY0xBt1CxNB1VCt174jt%2Ffiny2%2FhKc0C7LrE1hL70w4qpimCyeeUQR6VEpzuILMooQ6kMIdeQ5dbIIRm4mws2MKckseJLNY%2F8p59tTB4rSO%2F6SqYeg%3D%3D\"}]}\r\ncf-ray: 9e6385a45ee2b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-04-26T13:34:32.699653Z","times_seen":18653,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/okku.gif","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/okku.gif HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2311\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-907\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aC%2FK%2F9zf6CNrcU5ILaNZQO4qy7G80BgyPLwlZvm%2F6kC3uYjDEkqoC68zL4faDJqKzqUPwUre81cd26AyO%2BcUacFmoavBos%2F0mG6mgv3q2KU6x837vfrtpXAosw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47ef5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"a9bba06cfa3dcf7120d61bc85b43f50f","sha1":"31220cb274c46ea7ddc8abc40d992ca9bec9cc38","sha256":"8286edc49d5419bb54c801482b36943ce4d474f01d0d738921b19b3d5a5d0317","sha512":"9c832d5a6ae9f46a9d0b961c5babbcb3b48ac0ee5e6d79b18a7365c806f15a46fe8f3417a7ff5d0c3ecfde6de20ad337bf6efb370b942e4f27f08d2bd523a5a2","ssdeep":"","tlshash":"f5414d45109fcec4c56ec1f5807cd6991b195b9b7db6bb098548b2807453478b12f5e1","first_seen":"2023-06-26T21:51:10Z","last_seen":"2026-04-02T23:13:36.54433Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/themes/newexchanger5/images/l_arr.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/themes/newexchanger5/images/l_arr.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/wp-content/themes/newexchanger5/style.css?2\u0026ver=2.2\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 155\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-9b\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rhpz%2BA4xCfD4X%2Bea0k2Qm1BZNyHAHOdpQjGvMhtoSHvr%2FLxPOdUkOlG8nyQeogz5%2FY%2FFXHChmSkm%2B1kz1eWD9SexwUjcoCvUrmIh%2FBvlS2LIu2o71CIcNG6w6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a74f0fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8 x 6, 4-bit colormap, non-interlaced","md5":"14391b90ad2c8a6ae90cf4cabcb1a12b","sha1":"eb84a79bd1ad1a6d6032951d80a64744de879a04","sha256":"456e6a2efaef55249ffe3b5bfe3930ec915c417a4be9e441ebab9b28eadc683c","sha512":"845426f4b9f6550fb39c747e313faa731ac14badce6c43ae88f35c4bf67b208cf6943c8955e5d41c5bc9dd62cf0caf6d1821d0c9b60d9e22eb64500a76849088","ssdeep":"","tlshash":"29c08cfbc3168ef38240013f374b0ec04920421c11a20087a44081f0ea236480344243","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-02T23:13:36.545554Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/sol1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/sol1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 156771\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-26463\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeOBwBgEAh3nc5Fp6VjVE%2FlBY2v%2FZgZ7Is5KbcR6Du107z4ioYTdg053p%2FAQWGBKXGJnrrmMJFN%2Bb%2FunpfAiKbLpTgUzC4AQCTukMxhtRM5cHyOx9jakt4ULqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a79f19b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"7ec909510a2b54a94266ab313a537f35","sha1":"bc9ba4ea8aac1d5322426a02b217aef228e7a904","sha256":"520216ccaadeed57c200e4f227780a51c122b346e4976f2d86917b9fdfb7802f","sha512":"e8ad0d47ed0e6abdd92c5a2d675c9531497f5917ff9b0330eecb4658105863cb21fd436f31e42e87225df9d5f9d3c66ef21299adc5211e8d25c6e114904326f5","ssdeep":"3072:+14EioQfBDM4WOAFCiLO/MYP0tkuF0IdKJ4mxE:+CEioCMH3gkYMYPm1BdKw","tlshash":"90e312d9a7ab0d0d78ac6ab1416b1cc8806a12717eed42bd6a8b0d1db1677f7ccc4309","first_seen":"2026-02-16T14:34:51.112304Z","last_seen":"2026-04-02T23:13:36.547251Z","times_seen":3,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/SBER1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/SBER1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 83842\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-14782\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DP2%2FSG8iWdlMRf4A0piiK%2B9ZReRDrROgqdmkXdHcrllNFL8jjs6pysT8UqWUf4cefASIuctKV7L19utlPECtnduI529rJlzsWgIVukCUgLS0RJhCfz9oY29SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7bf22b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"3f9ad52d812f1ec1eabc5a0264b90466","sha1":"037323e5a4ef2f753635dcdf4178e1e90a18626f","sha256":"6da9887be863615177b17b7e135d3664b902d3b4e32b5734c6b387eeb8595692","sha512":"aa5671c362614f3c9a7fe827f2fbe3316de98bf725e1a8d3b3578ff8cecbe25147ad45be30fc890c8f089b445566319b16306ae684ddf2fd9b2ca12cce4b4845","ssdeep":"1536:x95KKvYz378qVMJt3be7A0uVJn8p9k/VcDCc6AUujSdYYulGoppSalgUcri9R/RK:TxQXQJtY+0Dk/VcD3vLLppS1PmHQ5151","tlshash":"d783123215899d9be5bed7e6001aac824da57c8025ce4d7bf3e49dc3444f5b192ac3e3","first_seen":"2026-02-05T17:13:42.32833Z","last_seen":"2026-04-02T23:13:36.548341Z","times_seen":4,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.me-talk.ru/support/sounds/newMessage.mp3","fqdn":"widget.me-talk.ru","domain":"me-talk.ru","tld":"ru"},"ip":{"addr":"185.71.66.142","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:21.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"me-talk.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 19:27:04 GMT","end":"Sun, 17 May 2026 19:27:03 GMT"},"fingerprint":{"sha1":"0A:32:C2:5A:3D:B2:55:CA:08:B7:A2:05:90:F6:15:05:30:75:22:5E","sha256":"C4:EF:63:F7:C7:52:82:C8:79:43:91:3F:F1:6F:5A:E1:12:85:0F:1C:AA:80:37:48:EC:FF:D3:1E:0C:A3:73:BA"}}},"request":{"raw":"GET /support/sounds/newMessage.mp3 HTTP/1.1\r\nHost: widget.me-talk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.14.2\r\nDate: Thu, 02 Apr 2026 23:13:21 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 13733\r\nLast-Modified: Wed, 11 Jun 2014 13:19:06 GMT\r\nConnection: keep-alive\r\nETag: \"5398574a-35a5\"\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block;\r\nContent-Range: bytes 0-13732/13733\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13733,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"2fac87d34075763c02e97fc64a775132","sha1":"5ca4a3373c457be8b77a89649eb1ebd1b6134c3c","sha256":"f04d575c757661872dd73f61b5f00d86f58b5adfef684b5d6b9e55432fbf171c","sha512":"d988ae4db1ad752950ff45cdbb3b82014efca9d9256fb1159e1ca0073e7afe670bc1f7e906f1d6a9871ecf5fb22367965412005d969ab666e73c0070bcf548c2","ssdeep":"192:xXS6uoIRs/RvSSeCGuxCd3DJI95AmTPd3XEkWQ0V5BurQ2ViS/MAAwlt3f06QjPJ:xXSKIyEkC3avMkMu1ViS/7Jlt3ffQTZn","tlshash":"3c52af020d4c7d2bf9b646b483ab5151e79ec4773f90db87d762e690065f0344b8935d","first_seen":"2024-03-10T08:34:45Z","last_seen":"2026-04-23T07:46:02.666652Z","times_seen":155,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":137,"dns":1,"connect":41,"send":0,"wait":77,"receive":2,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-changeinput/script.min.js?ver=0.1","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-changeinput/script.min.js?ver=0.1 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 366\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"301-64e19f0037c4f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LReES8T43x2c7wJbB%2B2JjI1V5YUCqpup%2Fekc6t15pS%2F3yHuLb%2BLm1aN9oO1ZCvM0iKyhKXRsOdxa%2Bv91T5U9DKeCopsI%2B2w5OnySmHE5kj1Fw8qSjRPhNC7xGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46ee7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":769,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (769), with no line terminators","md5":"1153f80c5a0ba5ba80921cb2c8ec7d21","sha1":"5d1f58ae4e165bad92fbf61800402dfd6f0fdd11","sha256":"fbd7101494251cc148d058aabe91fa59e51a6a24e5c4958f7c7e504575246001","sha512":"ac0883b7b1a1f060dace5df45cce7f6646a8ef95b44ec65a6de3d66043ab762fb38d5d2caa187b24564c84107501b5bf2c81c08d4fca1f5c8b333f6dbbb02e14","ssdeep":"","tlshash":"c7018588a900690b1aa349b1547f8209622b70e0a5176040e75caaf17f1cc2d2277c3e","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-04-19T14:50:33.51961Z","times_seen":121,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/plugins/premiumbox/premium/js/jquery-checkbox/script.min.js?ver=0.2","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-checkbox/script.min.js?ver=0.2 HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 356\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 18:39:28 GMT\r\netag: \"39b-64e19f0037c4f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYTl9BwVGIpr0yAMn9EsMXD7XZ0gjgWiemNEN1DayYOPg0O5tX8rsKTP8YimEiGbC4IIa23msC8oYkpIymrfhdAvEQJPAkQxulM6ooSMZc12Ms71sog7lS2KFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a46eeab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":923,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (923), with no line terminators","md5":"3093737e1c50590a327ec1b869fb506d","sha1":"c85baa1ab7535b4cd4eb00c1c63726206893c13e","sha256":"6c713e5a5b5852097da52362cbaf767b9c3acc61e0b7299b9c1d5d612a46b31f","sha512":"5e18b558ab363eb7f70203a197a1d4568a6e9b61f3d93f59faa0968ea78b5fd13afecb8ee45d3517a6ab0f5275162542d7da6d615c62c808d6fe1bef3114d458","ssdeep":"","tlshash":"8c1132bf3924387242bbaa21113bda0a643398bc57611d68f4dd4af00efcd880523e2d","first_seen":"2023-03-07T12:26:35Z","last_seen":"2026-04-19T14:50:33.507939Z","times_seen":124,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/udifo.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/udifo.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 2541\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-9ed\"\r\nexpires: Fri, 03 Apr 2026 23:13:04 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlSXPfrnPYsiSm0b3F6UyU1y8p7bbhqyP2MSqi%2Frr8skGfrKHIltoMsdJgZvTtmL3CJWOLXyXIRJMtveAEuuNYGZMY8M%2B9J%2BolbkxMb11LmSQ5DaAKlGlmpY%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a47ef8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced","md5":"505ff6846743ed82a3ed4d9008a65444","sha1":"f2841f7ec1ab32acd651f4382966874d8194aa91","sha256":"a83f179456e65e35037eb1e81273ea34b7b08b9827e6f4957b679ee69f8f161f","sha512":"03c9cca9c074654a9699ba9c494cabe736fccb82a77329faf48c7e2e1191ea85a8c8e9db0be59752607b90925c0040de98ac6e730cc57e6a3728f1ff606acb7b","ssdeep":"","tlshash":"2f514cd4c363cc21ab3754964e0359013f3e19fa261177a4a29e50902d44e7f684fa95","first_seen":"2023-06-08T23:44:03Z","last_seen":"2026-04-02T23:13:36.557574Z","times_seen":8,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:04.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 03 Apr 2026 00:01:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vW9wuShox6bD82Mq%2BbLkKlQTkwDfLpO0K89ktDooieUF9er%2BTICDY2gw3%2BoyiVyOfhAWj8rm5BOG9fYfxbrU9%2BzTdNnjlSYlR5ybSb3vuKlxMlCmX3IWiOP1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:04 GMT\r\ncf-ray: 9e6385a48f02b4ed-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-26T14:07:00.255529Z","times_seen":313763,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/USDC1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/USDC1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 82654\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-142de\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDm6RDYQyBOfUcn0n4qhJSvMz6DdakgK4ODA2wfOliKLFVDVk%2BFalKsuz8lxxhPmOje6yofklE%2B1%2Ft%2FU9MmWvNISnkklL8ur5kl2xh4tUf26PbvzLszs7YkKvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a77f12b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"5d090279b6187b38746cefa811ad1f64","sha1":"a6fb832d7a1bd10e82b29d1f6fe692cbf1a40d63","sha256":"efced9ea7ac3f8025800b79a045c97a5d29a98b8f76e5e59f5ded49f58cc5298","sha512":"3f2dd18becbc3870547f8900fc9c7224077cb359829d54b1eb4a37c6aed9080af9c7caf3243203934f650ff3724d6fbfbc38b092f26fce15c4d25f18bba1649d","ssdeep":"1536:pReH0GaKHApM7CWSK1+FEle9e9BzdvHx8L4JHdZls557Vt3AhO9:qiLqC7uUEIU3zdvR8UHdAv77f9","tlshash":"4183121a636ae8b28ea616751c9f2ef8f9488dc80c19477a9c7b954ffcf483634414e0","first_seen":"2026-02-16T14:34:51.195435Z","last_seen":"2026-04-02T23:13:36.562191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/512.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/512.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 7563\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-1d8b\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90CP02Yk7%2B121vTHbGWAtMdYk8dYVmA52QAknHQWcMyfMVZrGGiD8mhNgylS%2FQNgmhh8QEbgVkvjEnOlohmTyjf1V%2BuAckCMHiyyTwVBJXvBbv%2FOzuvv0Yj%2B3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a79f1bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"931a7a09123dd5211ead0f0005037e06","sha1":"a24951632385006c29c6c37077b4d587cfc5f2f8","sha256":"de75d5be87d1f4a978a6f982968e2f7ddcacb3b84da90796e6a0db2faa6391bb","sha512":"cd40d3776a6161fdb0ce3f15021da4d394c9c73b5aabe081e66d8f07722fc820c21574cd2454fe436869bb907d9309f018f07f5dbfe0e4f6b167e38d63f07141","ssdeep":"192:aYYLAosGqvsMhXgpRJhFWr6cEipdHnA4+tO/:IL/s1PhXgvJhEr6cEwA4+tO/","tlshash":"46f1ad3397aae2abc5fee5774a6205615035908319842317ccc686eac82a7ff446588a","first_seen":"2023-07-01T17:24:12Z","last_seen":"2026-04-16T15:51:15.693146Z","times_seen":29,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casha.cc/wp-content/uploads/6-1.png","fqdn":"casha.cc","domain":"casha.cc","tld":"cc"},"ip":{"addr":"104.21.79.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casha.cc/","date":"2026-04-02T23:13:05.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casha.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:24:01 GMT","end":"Fri, 26 Jun 2026 09:24:00 GMT"},"fingerprint":{"sha1":"32:C8:B6:06:98:6A:B6:6B:19:A0:7E:3E:B0:B7:E6:7F:A0:5D:7A:DB","sha256":"58:8F:71:ED:AC:A8:9B:3A:2C:54:49:BC:32:C4:04:59:72:1F:52:1C:62:E0:D2:80:78:97:E1:7A:B9:26:F0:B1"}}},"request":{"raw":"GET /wp-content/uploads/6-1.png HTTP/1.1\r\nHost: casha.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casha.cc/\r\nCookie: PHPSESSID=b165621f3702f63f0ba541c8a7b1101d; premium_session_id=2uli0oqHH5prDBrqLj2WnhAVm1FvJEjBVWiaa2gwN0oOl4ZEawkCDvlAmXxzk37y; merch_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 23:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1028\r\nlast-modified: Sat, 28 Mar 2026 18:39:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69c82063-404\"\r\nexpires: Fri, 03 Apr 2026 23:13:05 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XdcHouQKZCTVH4ctwWuNG0pJTqbWEDtlvNDpngNHvhOUIt%2FrTXxN0fNmowSL057ZdoOmqZFNHPLCMpwhC5C5Sx6a9IjyKkiwILpiRliab90r6pMm8%2BCvqrCPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6385a7ef32b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"eddfaa9ed1ddf1b2a967d43e2d6a0c06","sha1":"d6a238ac92ad32a6d3804d00c330d517ac89d25e","sha256":"1414a404b9ec3783d962c4b8b1249b618f7d7c41bf70ba140a7222dfae63940c","sha512":"afad60d7d019e8a9bca8e9c43003eef282cde3c6e10e032bf2abaa7b570ed06910569b4cc70ec1d87cfc9b6fca94c9f43287f04d4a9be0d41210faeecb8b56df","ssdeep":"","tlshash":"c1114443f04379f6809d966c75864ec55875441820a48283b1aac2e2ce6f39e837a0d4","first_seen":"2026-02-16T14:34:51.158504Z","last_seen":"2026-04-02T23:13:36.564118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}