{"report_id":"738be886-2c2e-4c1b-8d2c-52284516f2e2","version":0,"status":"done","tags":[],"date":"2026-08-07T18:33:47Z","url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"title":"Claim Your Reward!","dom":{"size":26151,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6904)","md5":"4e5992d1e4866f4a66be20a2c6cadb2f","sha1":"a7e8b247efb1040fe75f5e1d795892b83bec41e5","sha256":"59c5cdc1c4cf5acedd2503bbdd0ec77e568ccdd194c0550335cb615399410948","sha512":"436263becb3c14d1232f172474607f793d1ea347a3cca26aa16dbf3eaf7acf98beb9831c059369666a560e54e821fa7b5ca7be2dea1cad5b8ee50841892f73c6","ssdeep":"768:O4aRxhILGfR9lxzVauZc3VRLxVP7o5P7vvK+lHcFb1:O4aRxhIwR9lxzVQ3VRLxVP7o5P7vvK+Y","tlshash":"9dc2b61991faebf232b620d5b542b7817068c6030819e0a0f6bd4e636779e4b4967b5c","dom_hash":"domhasha1c9595c5612e96bf734c3ba01d44fc6","first_seen":"2026-06-07T15:44:28.645893Z","last_seen":"2026-08-07T18:33:48.552185Z","times_seen":25,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T18:33:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"wuytl.com","ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-04","domain_rank":0,"first_seen":"2025-09-25T19:46:22.32251Z","last_seen":"2026-08-05T20:02:16.067775Z","alert_count":0,"request_count":3,"received_data":3606,"sent_data":1526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"navlek.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-06-12T15:03:27.552196Z","last_seen":"2026-07-31T00:01:14.722921Z","alert_count":0,"request_count":26,"received_data":170621,"sent_data":15248,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/reverse.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"edce613102fa9b8568cfc00a4bdffbc6","sha1":"5a228191b73bc8669ce2ddcac8a29c19e31e3871","sha256":"ae8be598a4eb760743fe211a9aae5431696e5ad806d540a5d72d5f3230170ea4","sha512":"29dc1684ded02dbde40f6764610a8265fa9c0446b4140153633027c56ccbc2867f7ed41de122fcee1f497e85ae0e2f37f59abaa37a2dc696d9463e53a5ba88b6","ssdeep":"","tlshash":"8931cd4f41f7097b48f328988e5f7175373605872a48c9993e8c5708af1ae5fc6b2b89","size":1656,"data":"","first_seen":"2026-06-07T15:44:28.739095Z","last_seen":"2026-08-07T18:33:48.572499Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/main.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdcd27d583b475262c3c1e86e7c68f5b","sha1":"af2a22969fd491d464d963e4b5b3f0e477443def","sha256":"89bd57218c76c6256a157f35f1f8d1e823f7fdb8e8c895888041aaf166eb577e","sha512":"5343e8ee953df58aa01dd3b3b771d47c1935232fe11df993f1b08d8a0aef1fdfe45027cc4ddd8ba2d9ce2734bff6c041760f75efeeef438001de459c8c118b2d","ssdeep":"192:rrLJrhQC9NPjQxcGiv48W5pGTSlhoCkvEzSJ0q5iLuLzRzjXMBPXw7if:trhvNUxcxgoep","tlshash":"3b120f1926b300bb41b36c5a57cf5740bb2090037a05dda838ed97079f5b97a6ae33ec","size":9609,"data":"","first_seen":"2026-06-07T15:44:28.741491Z","last_seen":"2026-08-07T18:33:48.573534Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-URIJICNL.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"60dfcd60d418f17d80aa3169668669d3","sha1":"77b63a74fa9638fba354b643c2addd464f8067b3","sha256":"779702a00cb02962f0dbe1ea65c8a275909467a6455a00c6396b237abce23239","sha512":"7cc91356f23b757853bbc9a22b2660d62b9165afd11409407ca230f79811145a68d93deaf0ff46dec8dd50b81dc2a7e4d2be2b9c927ca1598ac53b3ec90c0ea5","ssdeep":"192:fJiXMgY2LtoDRmCSegdXj9CTSJ4G4w/4fLioEsJb:xqYwSDR41dhqYN/4fOoESb","tlshash":"6de14115987b497a26a260582a0f694073348c933e5ce0a4bbecce455f2ec1f91fa3dd","size":6935,"data":"","first_seen":"2026-06-07T15:44:28.742954Z","last_seen":"2026-08-07T18:33:48.584608Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-RKYZDRIZ.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b5987d7667bb04a9b40bcf841eb5df5b","sha1":"8f92e06b65ff7b7b6feaad9f5fa5f51fbbd28d60","sha256":"667d12548dbf5797ee49cdb50acd62061307b35147bb8067cc3613fb9c064fb1","sha512":"ac978bbee05e6f9b0997dbe00a52dc98aa4d8910363fac79ebb3af03bb84c1925e00f49a031c78d08b37683453417230c92eb25dacda670329f5287527d4993b","ssdeep":"192:ab8lZ+WNjQMOwRdnzjh9qVXOyqyaeiDpyQcyMM:uYTz11J","tlshash":"ecd1ef1c42f312b681b7701c4f0fe9aaab7a49173744de187ecc5a502f58666c9f27d4","size":6567,"data":"","first_seen":"2026-06-07T15:44:28.754334Z","last_seen":"2026-08-07T18:33:48.56681Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-23LO2BYY.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1e7c49829211866de564d05c4680f8aa","sha1":"82a025c1404437afb14ddfb833f8d93332bddf99","sha256":"af249306a3b697fcc86383d3b472bfd4dd236cf7b2c39aacb9bcb9c603ddcbf8","sha512":"028b5943614e760a2b0c9cb5ad4ac0f75f2d838f77a0c3e2e30a5de6b84e743953bfa67a8209e1b6367ae69c801f1af5ca1fa264e44757fc28ff9114474f24e1","ssdeep":"","tlshash":"70418c841ff3812a8927235b0f4a628536684d57297f9c5ab70f2223bf8176e87e57c0","size":2060,"data":"","first_seen":"2026-06-07T15:44:28.748465Z","last_seen":"2026-08-07T18:33:48.580254Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"22ecda2d7dfcc11da4338ba0ea2e0d66","sha1":"fa84f11c683917e6671d15e1177b26ce18b6cee6","sha256":"20e30d3ccebbe402cd297e2f1b2e70b0f4de9049261701fa16072ec42e4b4987","sha512":"3c5d9c29c07b1716dc0124c0885506a1d1f43f1d6ed83728b40af9c22f228cddf1ea2b3b83ff4476c76f9e989b74c0f9ef2b7ddc3a4d2feb38cb0dc0b5b65e86","ssdeep":"","tlshash":"23e04f5f133e88bf4a510c8e5e3dd756981d93108ea0c69a90dd3439058853a287da5e","size":346,"data":"","first_seen":"2026-06-07T15:44:28.717132Z","last_seen":"2026-08-07T18:33:48.587859Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44284d15f15d243967ebd621b748d620","sha1":"112afb136208edc962b37fa043bf9503e5e86fe6","sha256":"cc847141ec958d3c2ebbfb2c327c866b941ee220adfb68d523709cfff2d6ad9d","sha512":"8d8777dc9855657eba2ff72c9579cdc77b58259f34b3aa9a44023a0740956f07978c74edc5d92e7b6291dd84d19b12e5475e639e895a6be50227b78bc71347cc","ssdeep":"96:E94aeqx7pgPYYN5DeApAFt6LPhsHgFUKNCrj7Js:W4aeqx7pLIDry+GHwU3W","tlshash":"6f91984d807aebf636f170b8f5477693d135da422429a1b0e7a80f02e12dd0f462b789","size":4212,"data":"","first_seen":"2026-06-07T15:44:28.718881Z","last_seen":"2026-08-07T18:33:48.588709Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"77860d05034268ffd8cddbddf728b8c9","sha1":"f94e41e122294cb9a72d87eb421fd8cf6b1b6d61","sha256":"94e8502350963b9b90804191b1dd2e62b1e26f27a5aaf78be22263236c615b53","sha512":"913171870f56f13677c93d2848dd3a90a10822a7c95f58829165d523b4ddc4209cae04682875f4a418ff1dc1dc3b3cd45c1b5a7833c32b93917b2a38df05e4e6","ssdeep":"","tlshash":"e151fd5d92beebf636b415e078827b926078c6031429b0e0fb545ea3e139d4f9d1334e","size":3027,"data":"","first_seen":"2026-06-07T15:44:28.730846Z","last_seen":"2026-08-07T18:33:48.589763Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"82469718137a4f970797da63e33ccae9","sha1":"e054ab8a4de468f99d5cd899969623bdd0d896c9","sha256":"8a04da4721a7282db3bcb54ec751e825638b0aa7a3f8b9aae19334475ab5c4f1","sha512":"ee6ed31d08347cb8c4783cda060b7cef41d4e5c43eab3143fd7bafd58161f4f608fca28b6840710ca58eae5e9a10cb4d44e19818f3ca744a1a18025b219491bb","ssdeep":"","tlshash":"3261146d90fee7e033b550b4a587f7926074c6121808b1a0fb5d0f27b16ee5f862a78d","size":3367,"data":"","first_seen":"2026-06-07T15:44:28.733119Z","last_seen":"2026-08-07T18:33:48.590719Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36621ffc2353dcbae7de6be637ca9032","sha1":"9a5fc68ce04ee268076b888d1a8d6193efcc7256","sha256":"3e515af3d0f674a97f6bafffdab7790a36f2add22f506fbab5e1efedf7e33aca","sha512":"3b8273f8414c831c1b09e4391c31bee0234ae697cb21fc8b612623704d40b507a2cbfc26d7a5fb6d07926862d949423d3fa919a47f70de3202146a21e47fa203","ssdeep":"192:f5P7vvHq+9uVxhcHo6QahNSiHhCU1UOiM38WuopeMoHuCfDxi:f5P7vvK+5o63hBJWOiI8FysW","tlshash":"2d02eaada5afc7b173fd51c4a4a5e581b02895062848e094f7b18d1360bcf4b48e6fad","size":8267,"data":"","first_seen":"2026-06-07T15:44:28.734091Z","last_seen":"2026-08-07T18:33:48.591813Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/appSdk.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c6bf8d7d9171c9b2b34c91170dcc5f8","sha1":"473067b7d2ff164aeeb81b64b4a45b8a6b4294a5","sha256":"9e4831c86762158ac94d951125ff4d872d4a71a242021a89953e709175d8e844","sha512":"7c260adafd6cc634125df26b90c83bc4b6bda2eda14ab1c4f97c90b6343524ff95d3f1172192f519cb4555db25ed8f74b4f17713b5eb633f5a0491e26ec396bd","ssdeep":"","tlshash":"b9d05e2291f644cf407a54ee2a1bba4a7367093317858a80365c8671ab74403d8a13a0","size":243,"data":"","first_seen":"2026-06-07T15:44:28.735491Z","last_seen":"2026-08-07T18:33:48.562225Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-KLJ2VC5C.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0cff737ea1283db9fc2034c9ea17c822","sha1":"cb4f32c84b1749d720f11061b4bc1e9912c5c211","sha256":"a8effcb9304633ba86e33ac35bacfc4bd2e7cf4f60b603f498c58f57ca8a76d4","sha512":"2faff6270e2958d30469d3959d08083921d29101f249f5cbdb55a1cfa86e702c0d2b04b43c6829aab09441064cb06de513690fbaf3c552fa23aff45b4c52a61f","ssdeep":"96:rQ0w1GiQf4Mzd7z77ZpGjM4ETjnFHj2FANC8c78lx:k0wciQf4MVDZpmMLTjnd2Fcc7E","tlshash":"a8a1002ad9b7d4af24f321dd028fe219b13605133a5cf5843d9c9a412f1ed1e58e26ec","size":5072,"data":"","first_seen":"2026-06-07T15:44:28.746895Z","last_seen":"2026-08-07T18:33:48.56072Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/translateElements.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed74cf5e725f95bd9a827dc05e128558","sha1":"49c4f55b0494a69d0aeceb7683a5baf162a8a1e4","sha256":"02b24b2167b9b25d46de64e0806e075d4618299e0e1ded9206dff3811aceab91","sha512":"5ecb693389e4f89afe643863817593ef93c2805ca93a317ca3f3b87ee2e791755c542793c71b503d148fc00e5708c735ac311a5a21574637d42b2cee95bc4e54","ssdeep":"","tlshash":"cc51ef1866b7413b892b66674f8b01c9ba780e03247adc183bcd57425f94e3c5bef794","size":2865,"data":"","first_seen":"2026-06-07T15:44:28.74028Z","last_seen":"2026-08-07T18:33:48.585975Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/autoexit.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf61776ccd53f15e7847bc86069af189","sha1":"8114e2f6015b482b7b8f4e9e2d33f97053a9f759","sha256":"bffd7513c2100be56fa870c0c04f8b39d17e0c13bd34762813abf4e043907d65","sha512":"d7d45376f58ae4ca0dba12528712aab9a5d3b7354f741895c3a40f7c4a9c6b51f962e8af4855321a5cc099bae24f30ac6ae3eb98a8072ae49136b982084d578c","ssdeep":"","tlshash":"5831bd3b33fb193b4a6788b9475fa19a2f242943224ccc9c3e2c57849f0452194e2bad","size":1767,"data":"","first_seen":"2026-06-07T15:44:28.753068Z","last_seen":"2026-08-07T18:33:48.576188Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-JB5ZCMYZ.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ab9007248fe22b3fcb180041cacbea25","sha1":"4ce4b8682160306c7c01235cdfbcbe136a110f6d","sha256":"bbb71e224b1c9e9b8600633b55b5ce4d846ea51f17dc95255ab850ec3da07721","sha512":"8c94833c2ead4d9ee764b56b489d13e8b75202194ecd2d5e788bdf963a33937a0ec97b71aa88752be7c630a988ed388bf5fa5b842e227bdbde1bd0070c4b8f65","ssdeep":"","tlshash":"2851ce4e76f752990287116c8a5ba213a978a0033e08ec9d7edc92516f49a5c84f37cc","size":2698,"data":"","first_seen":"2026-06-07T15:44:28.744674Z","last_seen":"2026-08-07T18:33:48.564303Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"CONFIG:map[actor:server1.conn0.watcher16.process8//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:9 preview:map[kind:Object ownProperties:map[autoexit:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] back:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] mainExit:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj35 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] prizeImg:map[configurable:true enumerable:true value:map[type:undefined] writable:true] prizeName:map[configurable:true enumerable:true value:map[type:undefined] writable:true] reverse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] secondsLeftBeforeFinal:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] tabUnderClick:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] videoCount:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:9] sealed:false type:object]","filename":"https://navlek.com/prelanders/clickbox/assets/scripts/main.js","line_number":45,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/locales/en.json","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.145Z","timestamp":1786127601145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/locales/en.json HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 529\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:26 GMT\r\netag: \"cadeef77390b524d3294279265f7b7ae\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":529,"size_decoded":917,"mime_type":"application/json","magic":"JSON text data","md5":"cadeef77390b524d3294279265f7b7ae","sha1":"82c63844d53280c43c2f4effdb0e9d7c3eb08288","sha256":"724b63720a95b0fa31fc8c529a4699218346341d74b7251dc5883b6e08aa3af7","sha512":"8dcbc452d984b30e99cde434419f03f66f7035dc3c4b1942f227cca6f924ae3cb40bd94c493285550c40e15672d9458c6699b710402b573559ff42ca60e0e445","ssdeep":"","tlshash":"31f02489e552426208f17a2356677e41a9581f0b12bc28384f9b2dec217c62f61be80f","first_seen":"2026-04-11T19:58:57.819858Z","last_seen":"2026-08-07T18:33:48.553532Z","times_seen":26,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/favicon/favicon.svg","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.248Z","timestamp":1786127601248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/favicon/favicon.svg HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nCookie: templateHash:clickbox=7c8cbcfd3ded48b13500910cdd5bbe692fc9fb6393f590c6cdda16822771a36e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6268\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:23 GMT\r\netag: \"85a40338dd75fbd04becc6975903601e\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6268,"size_decoded":6654,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a40338dd75fbd04becc6975903601e","sha1":"ced19085c8439b0912826befa2e2d63f20fed84b","sha256":"e7aa25ab3dd669396e91f06b44da8f4ade94bfef84ef9a2b56465c5fc0b481da","sha512":"eb657ef6aebb1e7a0206dea3eaf91e60df2b72e9dda29ff609746225bff627907ad923fc128d8faca73c1ab3832231a4f9852139ac84448ccdba36bec707ee40","ssdeep":"96:FdUxsSGbFWSBPiQLftsZA9eW74+tMoLkc5mkUoWdtuGqA/W5stKraFd+f3u9lOBT:zUYW4aAWZBW74+tlP5Pro9tKr01c","tlshash":"40d19e3c982c69035e116210402cf248dc31aea10bdf768a77ac2e9d6385d4cdf238ed","first_seen":"2025-11-05T16:34:28.922471Z","last_seen":"2026-08-07T18:33:48.55466Z","times_seen":44,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-left-1.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.930Z","timestamp":1786127600930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-left-1.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2696\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"1d44fd2b18f49855ac378ec502fce4c8\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2696,"size_decoded":3079,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d44fd2b18f49855ac378ec502fce4c8","sha1":"ea7a361176c62cbb1d4043446f05e589c8503ee0","sha256":"610993397c2b29c04cf514cf09daa9653f55d1b446645ea82e78eff3c53890c3","sha512":"45752f1e3e7c81f2b13ad91c159ac4e79a8bd32433f2b574f7e9f02c1efb489d3eec5b4a391f659f81ea41173f2343084ff04f13c1bc9b3a9c12d95e692c649b","ssdeep":"","tlshash":"36511a39c32c5f56c04025ba1b544346db05bf211597ab666b024d459e809d2b98e1da","first_seen":"2025-09-17T22:26:52.941729Z","last_seen":"2026-08-07T18:33:48.557296Z","times_seen":57,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-left-3.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.933Z","timestamp":1786127600933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-left-3.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3834\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"ddc379023c0cb5feafe0420f410727fa\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3834,"size_decoded":4217,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ddc379023c0cb5feafe0420f410727fa","sha1":"39f7090fcf1b15042f427a80d1a26dc570d89da2","sha256":"81e197c469516968d7d7872e4a113179dcbc9ecea6b5a689c491369666d7f766","sha512":"e3b8d75a0894a93184ad1e91ce5f37273f4696d068a481ab2a4e7c673f12ef090681007d68be53be87e54b81853407a1096abc1401d95d0ab0612ae235704d07","ssdeep":"","tlshash":"f6816d73eb92e43cb12d204100cb387155f69414726f94f91e66f0280fd4f7978626f9","first_seen":"2025-06-27T08:10:52.488618Z","last_seen":"2026-08-07T18:33:48.558546Z","times_seen":222,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/treasure-chest.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.943Z","timestamp":1786127600943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/treasure-chest.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9634\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"3c5f84142165c83ebe07b92fd915b766\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9634,"size_decoded":10017,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c5f84142165c83ebe07b92fd915b766","sha1":"4fc740bce87038a3487c8b26dac4c74aa60c0b42","sha256":"477857618cf5ceacbca3fd2a9c4832a379367522c00c3c8c4a7dfd4c00ae154d","sha512":"972b45d54818fe0e37aa0e9f5144edba92c42e696d7860b15de5488f6345e8d1f7fc4338a710396270e64cd52e00c3f5246ad8a50d2835ee48842630a9d8841d","ssdeep":"192:QzrXoONKS80ZzKZMWjjegJpungh20//DLf85OwSYh5Nz6PdVpzQX6Fr6av+um:QzboGKoZXWjj7pggX05OhYPNz0pzc64j","tlshash":"f912afa27d8d5601c86720b5d3b87329e58efc3f4de9df1ad4414a4119068a26abd38b","first_seen":"2025-09-17T22:26:52.934914Z","last_seen":"2026-08-07T18:33:48.559672Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-KLJ2VC5C.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.041Z","timestamp":1786127601041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/shared-KLJ2VC5C.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/assets/scripts/appSdk.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5072\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"0cff737ea1283db9fc2034c9ea17c822\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5072,"size_decoded":5482,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0cff737ea1283db9fc2034c9ea17c822","sha1":"cb4f32c84b1749d720f11061b4bc1e9912c5c211","sha256":"a8effcb9304633ba86e33ac35bacfc4bd2e7cf4f60b603f498c58f57ca8a76d4","sha512":"2faff6270e2958d30469d3959d08083921d29101f249f5cbdb55a1cfa86e702c0d2b04b43c6829aab09441064cb06de513690fbaf3c552fa23aff45b4c52a61f","ssdeep":"96:rQ0w1GiQf4Mzd7z77ZpGjM4ETjnFHj2FANC8c78lx:k0wciQf4MVDZpmMLTjnd2Fcc7E","tlshash":"a8a1002ad9b7d4af24f321dd028fe219b13605133a5cf5843d9c9a412f1ed1e58e26ec","first_seen":"2026-06-07T15:44:28.746895Z","last_seen":"2026-08-07T18:33:48.56072Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/appSdk.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.914Z","timestamp":1786127600914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/appSdk.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 243\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"9c6bf8d7d9171c9b2b34c91170dcc5f8\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243,"size_decoded":652,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"9c6bf8d7d9171c9b2b34c91170dcc5f8","sha1":"473067b7d2ff164aeeb81b64b4a45b8a6b4294a5","sha256":"9e4831c86762158ac94d951125ff4d872d4a71a242021a89953e709175d8e844","sha512":"7c260adafd6cc634125df26b90c83bc4b6bda2eda14ab1c4f97c90b6343524ff95d3f1172192f519cb4555db25ed8f74b4f17713b5eb633f5a0491e26ec396bd","ssdeep":"","tlshash":"b9d05e2291f644cf407a54ee2a1bba4a7367093317858a80365c8671ab74403d8a13a0","first_seen":"2026-06-07T15:44:28.735491Z","last_seen":"2026-08-07T18:33:48.562225Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/hand.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.944Z","timestamp":1786127600944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/hand.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2822\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"d97b733d27b3d23b94f366abe4949987\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2822,"size_decoded":3205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d97b733d27b3d23b94f366abe4949987","sha1":"2864ceb8b1e13a08f4148ee00a914a3cae8382c6","sha256":"a73037b7383c7541863999285ed16cd2001918251e4d75d4f2a5e5fdc429ae8e","sha512":"6fdfe1c40444471feed324990f371f410defca6ab2a191d430742610123304e388e1fa71556b77a3b96426af67faead5c24ad1c6c322c8c47ac4c6c182bee9e3","ssdeep":"","tlshash":"66514c2c535f7910da8eac0c77a1874f0c474ed5807b9b3c14666615a72beb908fcb52","first_seen":"2025-06-27T08:10:52.459129Z","last_seen":"2026-08-07T18:33:48.563262Z","times_seen":294,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.945Z","timestamp":1786127600945,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 587\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://navlek.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":587,"data":"[{\"app\":\"landings-constructor\",\"event\":\"start\",\"language\":\"en\",\"landing_name\":\"clickbox\",\"build_version\":\"0.0.175\",\"landing_domain\":\"navlek.com\",\"landing_url\":\"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\",\"template_hash\":\"\",\"request_var\":\"6_DE_339512\",\"source_zone_id\":null,\"sub_id\":\"1bkcmi03g0083\",\"landing_load_date_time\":\"2026-08-07 18:33:20.893000 +00:00\",\"error_message\":\"\",\"events_history\":[{\"currentTs\":1786127600894,\"eventName\":\"start\",\"delta\":0}],\"context\":\"{\\\"template_hashes\\\":{}}\",\"env\":\"production-archive\"}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://navlek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mPjsj18vE3UqMxTAWLcl5aWTo8X1ra0fbpzKf7JwyeWqSrZMS3s21aaziNVO%2FNeAUv5o4f3ZKm6iFze%2B7wj6R3BoIXRZXnjKqqVeP2aFcwUtVye2L97A7r%2Bxck%3D\"}]}\r\ncf-ray: a2785e81fc6b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-JB5ZCMYZ.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.044Z","timestamp":1786127601044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/shared-JB5ZCMYZ.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/assets/scripts/autoexit.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2698\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"ab9007248fe22b3fcb180041cacbea25\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2698,"size_decoded":3108,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ab9007248fe22b3fcb180041cacbea25","sha1":"4ce4b8682160306c7c01235cdfbcbe136a110f6d","sha256":"bbb71e224b1c9e9b8600633b55b5ce4d846ea51f17dc95255ab850ec3da07721","sha512":"8c94833c2ead4d9ee764b56b489d13e8b75202194ecd2d5e788bdf963a33937a0ec97b71aa88752be7c630a988ed388bf5fa5b842e227bdbde1bd0070c4b8f65","ssdeep":"","tlshash":"2851ce4e76f752990287116c8a5ba213a978a0033e08ec9d7edc92516f49a5c84f37cc","first_seen":"2026-06-07T15:44:28.744674Z","last_seen":"2026-08-07T18:33:48.564303Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/styles/style.css","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.913Z","timestamp":1786127600913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/styles/style.css HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 6937\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"224f67a64fc23e7626b897a3145e7770\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6937,"size_decoded":7318,"mime_type":"text/css","magic":"ASCII text","md5":"224f67a64fc23e7626b897a3145e7770","sha1":"50aed4086d38749deaf902c1f626eb15d0941ac7","sha256":"d83d870ebe1c1bd998b13a83ff2abef485dc8850e897641473036aec368ab86e","sha512":"cdc6d77fbe4ebf3db0e39ee963ea504b43cc2c97b4aab8ac201afb197d791ff831b85c417e91ef24c2148d56ac7cdbf5255b04978a1c5efbbabb7c879b03b1ca","ssdeep":"192:NyemdhJTZJnaXmxM4dM46ChenCp8RIulg7:NyVvU2xjh4uuw","tlshash":"93e143584bb8aa04b46fc1a57991ebc8632c40c1de0fcd5d97f378a85e8839535a3fc9","first_seen":"2025-11-05T16:34:28.912985Z","last_seen":"2026-08-07T18:33:48.565558Z","times_seen":39,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-RKYZDRIZ.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.043Z","timestamp":1786127601043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/shared-RKYZDRIZ.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/assets/scripts/autoexit.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6567\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"b5987d7667bb04a9b40bcf841eb5df5b\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6567,"size_decoded":6977,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"b5987d7667bb04a9b40bcf841eb5df5b","sha1":"8f92e06b65ff7b7b6feaad9f5fa5f51fbbd28d60","sha256":"667d12548dbf5797ee49cdb50acd62061307b35147bb8067cc3613fb9c064fb1","sha512":"ac978bbee05e6f9b0997dbe00a52dc98aa4d8910363fac79ebb3af03bb84c1925e00f49a031c78d08b37683453417230c92eb25dacda670329f5287527d4993b","ssdeep":"192:ab8lZ+WNjQMOwRdnzjh9qVXOyqyaeiDpyQcyMM:uYTz11J","tlshash":"ecd1ef1c42f312b681b7701c4f0fe9aaab7a49173744de187ecc5a502f58666c9f27d4","first_seen":"2026-06-07T15:44:28.754334Z","last_seen":"2026-08-07T18:33:48.56681Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.167Z","timestamp":1786127601167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wuytl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 13:12:38 GMT","end":"Wed, 07 Oct 2026 14:11:20 GMT"},"fingerprint":{"sha1":"52:91:6C:D5:26:41:74:53:9E:AA:DB:9B:FC:F3:C9:92:39:16:8D:18","sha256":"97:2F:E8:72:BF:FB:F5:C9:77:EB:85:C4:C3:A2:B0:3A:85:5A:11:3E:29:38:6B:71:E1:0A:6D:13:6E:D0:66:FE"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3376\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://navlek.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3376,"data":"[{\"app\":\"landings-constructor\",\"event\":\"template_hash_ready\",\"language\":\"en\",\"landing_name\":\"clickbox\",\"build_version\":\"0.0.175\",\"landing_domain\":\"navlek.com\",\"landing_url\":\"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\",\"template_hash\":\"7c8cbcfd3ded48b13500910cdd5bbe692fc9fb6393f590c6cdda16822771a36e\",\"request_var\":\"6_DE_339512\",\"source_zone_id\":null,\"sub_id\":\"1bkcmi03g0083\",\"landing_load_date_time\":\"2026-08-07 18:33:20.893000 +00:00\",\"error_message\":\"\",\"events_history\":[{\"currentTs\":1786127600894,\"eventName\":\"start\",\"delta\":0},{\"currentTs\":1786127601158,\"eventName\":\"template_hashes_ready\",\"delta\":264},{\"currentTs\":1786127601159,\"eventName\":\"template_hash_ready\",\"delta\":1}],\"context\":\"{\\\"template_hashes\\\":{\\\"main\\\":{\\\"buildHash\\\":\\\"23fc2fa44562a77e1915881ee19e9fd5dbcb260a4f19b96954e44b3057df6eaa\\\",\\\"clientHash\\\":\\\"5d93ad131576f345eb8dce712dc96b90255f5c68a110796e9cf0e4bf26828a04\\\",\\\"equal\\\":false},\\\"html\\\":{\\\"buildHash\\\":\\\"598afac29b0b8dcad532d9a197c0766d3e78d8aa39622dda8b3b9579add96413\\\",\\\"clientHash\\\":\\\"e2deded0c828aad70907a07a78a2787d14e9f13a11624acefd367cbce6ebefe3\\\",\\\"equal\\\":false},\\\"css\\\":{\\\"buildHash\\\":\\\"6524558dcd36e1e9f1df9f195f2c1c82684b55a65e64cd313742b8aab31d7940\\\",\\\"clientHash\\\":\\\"6524558dcd36e1e9f1df9f195f2c1c82684b55a65e64cd313742b8aab31d7940\\\",\\\"equal\\\":true},\\\"js\\\":{\\\"buildHash\\\":\\\"6b831951cd9e6df8b1ba8b278e732b8116277ee5f89f013fb2c2c8858eb1657a\\\",\\\"clientHash\\\":\\\"399c94961efe8a41e18dc94800ac04c41684dc53d6e2aa3cc6c9cc42d9f92015\\\",\\\"equal\\\":false},\\\"inlineSources\\\":{\\\"scripts\\\":[\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var H=()=\u003e{let t=new Date,r=t.getUTCFullYear(),n=String(t.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),a=String(t.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var g=()=\u003e{let r=new Date,c=r.getUTCFullYear(),a=String(r.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),l=String(r.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var u=()=\u003e{let r=new Date,e=r.getUTCFullYear(),o=String(r.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),n=String(r.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var o=[\\\\\\\"/assets/scripts/appSdk.js\\\\\\\",\\\\\\\"/assets/scripts/autoexit.js\\\\\\\",\\\\\\\"/assets/scripts/common.js\\\\\\\",\\\\\\\"/assets/scripts/main.js\\\\\\\",\\\\\\\"/assets/scr\\\"],\\\"styles\\\":[]},\\\"resources\\\":{\\\"normal\\\":[{\\\"name\\\":\\\"/assets/styles/style.css\\\",\\\"size\\\":6937,\\\"extension\\\":\\\"css\\\"},{\\\"name\\\":\\\"/assets/scripts/appSdk.js\\\",\\\"size\\\":243,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/autoexit.js\\\",\\\"size\\\":1767,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/reverse.js\\\",\\\"size\\\":1656,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/main.js\\\",\\\"size\\\":9609,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/translateElements.js\\\",\\\"size\\\":2865,\\\"extension\\\":\\\"js\\\"}],\\\"unknown\\\":[{\\\"name\\\":\\\"/assets/scripts/shared-KLJ2VC5C.js\\\",\\\"size\\\":5072,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-URIJICNL.js\\\",\\\"size\\\":6935,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-RKYZDRIZ.js\\\",\\\"size\\\":6567,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-JB5ZCMYZ.js\\\",\\\"size\\\":2698,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-23LO2BYY.js\\\",\\\"size\\\":2060,\\\"extension\\\":\\\"js\\\"}]},\\\"diffHints\\\":{\\\"nodeCountDiff\\\":4,\\\"textLengthDiff\\\":-32,\\\"styleCountDiff\\\":0,\\\"scriptCountDiff\\\":4}}}\",\"env\":\"production-archive\"}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://navlek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FhPhIpqylrU9OJv%2B5gHRIkyE0y%2BD8PYwlhpC%2BlgwYxQHtVi%2FXa9Wx3XL1x1R7b%2Bzg0Ygb41ibqcBwl8p6MePtCOCHzswJA1i7Y54VgYDughEjAfVEMhWnjxhxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2785e834add0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T18:33:20.425Z","timestamp":1786127600425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512 HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 26467\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:26 GMT\r\netag: \"29e7b01bd0e3e562d3dd551f76fa1e0b\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26467,"size_decoded":26865,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6905)","md5":"29e7b01bd0e3e562d3dd551f76fa1e0b","sha1":"b6462fe2b597902f21cc96782d6bfcc47298f9de","sha256":"fcafd554590ac705b692f3a156baeb1d0569c1434489be15566f0e86d9223a86","sha512":"cdd458087e4982ca4aea477b3d04655ce067fa775777ad4e23475eb4d674897c4675a62cd61b88c80e2cf27f978d8dcb1b2473b88ab1342b56a2c38d304572d4","ssdeep":"768:b4aRxhILGfR9lxzVau3jLQLxVP7Q5P7vvK+lHcFbR:b4aRxhIwR9lxzVhLQLxVP7Q5P7vvK+9O","tlshash":"76c2c719a0fadbf232b610d4b552fb827068c2030819e0a4f6bd4e636779e4f4a6775c","first_seen":"2026-06-07T15:44:28.712516Z","last_seen":"2026-08-07T18:33:48.567809Z","times_seen":25,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":15,"connect":19,"send":0,"wait":19,"receive":23,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-right-1.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.938Z","timestamp":1786127600938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-right-1.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3690\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"2416052edb8b7780d5d58d358402cc0a\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3690,"size_decoded":4073,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2416052edb8b7780d5d58d358402cc0a","sha1":"1eaff7a3df5ced62949db161da2cef401557b317","sha256":"4f78513050899ef3b46a71cf2e3f536e88a1ceb0893b96480b9d135004952c1c","sha512":"03f0a6190731d4c4ac9f28f1be1d03000ce265d25e8fe3abaae0c634f113040a20daea0d6e35d7ff470929293c0a70d1198025b6d96851c92dec0babacfa19d3","ssdeep":"","tlshash":"01716d806302776ec19016f220e81310ee56faf047d394035667a61a6fcc374cb5ccde","first_seen":"2025-09-17T22:26:52.930096Z","last_seen":"2026-08-07T18:33:48.569106Z","times_seen":57,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-right-3.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.940Z","timestamp":1786127600940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-right-3.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"c6211162e103961458f3c19bcc9a2571\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1852,"size_decoded":2235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6211162e103961458f3c19bcc9a2571","sha1":"d2722f202b70ef0ef50177be3698e8876c17f176","sha256":"2f16c95955b132c9f8c6495fb5e4b7fb6988789240ddf779e022fe4458830b63","sha512":"95f94240c16e78753782d17532f8058b335d478f25867d98f55d02502edd5bc323de431c743345030528ba4b1c324c0771747f173460659dff7050bb9d1acdf7","ssdeep":"","tlshash":"153119d90db897558b28861230978d4a679900ecac81ff07288cd65b2709d9f012fa8b","first_seen":"2025-06-27T08:10:52.442966Z","last_seen":"2026-08-07T18:33:48.569978Z","times_seen":221,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/star-five-pointed.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.941Z","timestamp":1786127600941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/star-five-pointed.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 636\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"1652c7660f0f4cb2abe5ccc27de1ee6c\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":636,"size_decoded":1018,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1652c7660f0f4cb2abe5ccc27de1ee6c","sha1":"ed0b317cac25c7e4223bf44ad2d701059fe828ef","sha256":"787cf973519cc12ec247a71aeebdd50e650a2b1d42d744f28cca2ad3bd09f502","sha512":"0ea7b83d4f34299f826730b0f3b8850beb3c9a4a64da65936386a350c007a3c1de12849f8a8bfc5b5f994df35351ec0fa9c16399603e37280d03f81db24a5251","ssdeep":"","tlshash":"bef0624759e81cdbce071abda12d3bff41cb88cd65c2d9920640389a01e2248ca73e67","first_seen":"2025-06-27T08:10:52.470152Z","last_seen":"2026-08-07T18:33:48.571132Z","times_seen":215,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/reverse.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.917Z","timestamp":1786127600917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/reverse.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1656\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"edce613102fa9b8568cfc00a4bdffbc6\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1656,"size_decoded":2066,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"edce613102fa9b8568cfc00a4bdffbc6","sha1":"5a228191b73bc8669ce2ddcac8a29c19e31e3871","sha256":"ae8be598a4eb760743fe211a9aae5431696e5ad806d540a5d72d5f3230170ea4","sha512":"29dc1684ded02dbde40f6764610a8265fa9c0446b4140153633027c56ccbc2867f7ed41de122fcee1f497e85ae0e2f37f59abaa37a2dc696d9463e53a5ba88b6","ssdeep":"","tlshash":"8931cd4f41f7097b48f328988e5f7175373605872a48c9993e8c5708af1ae5fc6b2b89","first_seen":"2026-06-07T15:44:28.739095Z","last_seen":"2026-08-07T18:33:48.572499Z","times_seen":24,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/main.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.918Z","timestamp":1786127600918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/main.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 9609\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"fdcd27d583b475262c3c1e86e7c68f5b\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9609,"size_decoded":10019,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fdcd27d583b475262c3c1e86e7c68f5b","sha1":"af2a22969fd491d464d963e4b5b3f0e477443def","sha256":"89bd57218c76c6256a157f35f1f8d1e823f7fdb8e8c895888041aaf166eb577e","sha512":"5343e8ee953df58aa01dd3b3b771d47c1935232fe11df993f1b08d8a0aef1fdfe45027cc4ddd8ba2d9ce2734bff6c041760f75efeeef438001de459c8c118b2d","ssdeep":"192:rrLJrhQC9NPjQxcGiv48W5pGTSlhoCkvEzSJ0q5iLuLzRzjXMBPXw7if:trhvNUxcxgoep","tlshash":"3b120f1926b300bb41b36c5a57cf5740bb2090037a05dda838ed97079f5b97a6ae33ec","first_seen":"2026-06-07T15:44:28.741491Z","last_seen":"2026-08-07T18:33:48.573534Z","times_seen":24,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/favicon/apple-touch-icon.png","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.247Z","timestamp":1786127601247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nCookie: templateHash:clickbox=7c8cbcfd3ded48b13500910cdd5bbe692fc9fb6393f590c6cdda16822771a36e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 45998\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:23 GMT\r\netag: \"2d5bca56b2de1ba1160582fcf62dd434\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45998,"size_decoded":46381,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2d5bca56b2de1ba1160582fcf62dd434","sha1":"dcadbc1651cddb6cafbef5b9e038adf645ff8f89","sha256":"c925593ada652324440e14239b92581bdd85349e004b8c3c2e67575a08d2d166","sha512":"9b792ecad10d8b284c6018f53a55ab1b0897ebca87c87be979c6bd77da126f2b6a6b92bdb80397f656e1758fc69942a814534d7810940c5c6f4d82e775ac9c61","ssdeep":"768:wJE0sDhzCcxLc0VSVus5TunEzuXnm+I/Mk5WDVn7uSNrvqFzui0FxaNkCjpuj8bl:wJE0sDEcxLjVE6n2EVn7uSNTqJuijjp/","tlshash":"a42302d5444087b4109bce5c7b95800cfb5591a6bfe21020adb7ec8f93d2aac27d4fa9","first_seen":"2025-11-05T16:34:28.927642Z","last_seen":"2026-08-07T18:33:48.57472Z","times_seen":42,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/autoexit.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.916Z","timestamp":1786127600916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/autoexit.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1767\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"cf61776ccd53f15e7847bc86069af189\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1767,"size_decoded":2177,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"cf61776ccd53f15e7847bc86069af189","sha1":"8114e2f6015b482b7b8f4e9e2d33f97053a9f759","sha256":"bffd7513c2100be56fa870c0c04f8b39d17e0c13bd34762813abf4e043907d65","sha512":"d7d45376f58ae4ca0dba12528712aab9a5d3b7354f741895c3a40f7c4a9c6b51f962e8af4855321a5cc099bae24f30ac6ae3eb98a8072ae49136b982084d578c","ssdeep":"","tlshash":"5831bd3b33fb193b4a6788b9475fa19a2f242943224ccc9c3e2c57849f0452194e2bad","first_seen":"2026-06-07T15:44:28.753068Z","last_seen":"2026-08-07T18:33:48.576188Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-left-4.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.935Z","timestamp":1786127600935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-left-4.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2042\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"adcabd6f278889f1e1c73a77d6fa6e08\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2042,"size_decoded":2425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adcabd6f278889f1e1c73a77d6fa6e08","sha1":"c414b093e48114f84e6c038a577857f110a30031","sha256":"3925b87d2aec26251d1e56893cd43f5fb8e5cfd30c07b90ce6a2746d60d7bb6c","sha512":"ee7f60e6bffcbd010888db6a665a26dedb28299dfb3cdbf66ccba3261e9dafd1c7d1a10f682c1f332b26b9282b3932231cc7e1f606b436020d65255f8d6061a2","ssdeep":"","tlshash":"2b411a1a5129544afa3d4b4d1b36e4e1559b0008ff079d69f4c6080de69f805df49fdc","first_seen":"2025-06-27T08:10:52.427087Z","last_seen":"2026-08-07T18:33:48.57728Z","times_seen":221,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-right-2.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.939Z","timestamp":1786127600939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-right-2.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4738\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"ea363c4eb09396dbb86e7738437dc580\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4738,"size_decoded":5121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea363c4eb09396dbb86e7738437dc580","sha1":"24eefdc07cd0a817cddb40633f31e75de8f3e6c5","sha256":"898586343f351fad0511a99a06de347447c66118c3a0ba254135a804d99b362e","sha512":"eb6f111499255cc4025714847f6594b9f10ba17980dd34f25ca150729930f1a0e68723f02f16e325b92da1df6f443197ec50361a14c03a12ad73913b9d574dda","ssdeep":"96:G0zruaEmQxYIQP8lqul01fG8uUKdLpXwtDl8NnHEp:7zruRmQxfzl01DatlwtDGlw","tlshash":"88a16ca60b40d3d3cde42ab8d945670dc25979512750d3fbe70311778e452f06ebd2ad","first_seen":"2025-09-17T22:26:52.911432Z","last_seen":"2026-08-07T18:33:48.57903Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-23LO2BYY.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.046Z","timestamp":1786127601046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/shared-23LO2BYY.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/assets/scripts/translateElements.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2060\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"1e7c49829211866de564d05c4680f8aa\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2060,"size_decoded":2470,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1e7c49829211866de564d05c4680f8aa","sha1":"82a025c1404437afb14ddfb833f8d93332bddf99","sha256":"af249306a3b697fcc86383d3b472bfd4dd236cf7b2c39aacb9bcb9c603ddcbf8","sha512":"028b5943614e760a2b0c9cb5ad4ac0f75f2d838f77a0c3e2e30a5de6b84e743953bfa67a8209e1b6367ae69c801f1af5ca1fa264e44757fc28ff9114474f24e1","ssdeep":"","tlshash":"70418c841ff3812a8927235b0f4a628536684d57297f9c5ab70f2223bf8176e87e57c0","first_seen":"2026-06-07T15:44:28.748465Z","last_seen":"2026-08-07T18:33:48.580254Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/star-four-pointed.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.942Z","timestamp":1786127600942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/star-four-pointed.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 492\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"19a648d7f4abdf58b681f4c290afb76b\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":492,"size_decoded":874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19a648d7f4abdf58b681f4c290afb76b","sha1":"0bc732bf13be96c7ed11b60f83a7b0ad7ba1d972","sha256":"854ccfd95646ea558658b455501a0e94e134e8c3ece9be385ac1cff401e2eb3d","sha512":"1e3d9d9c2a14591d08e01408fcabd92e5099d58fc8bd3f0534b38382b27a9726e35670a0d286069bcfb35ae0512192820fd773ec344f6754e263b5487f71180d","ssdeep":"","tlshash":"72f00e75d2086a80dbd48c7ca9d88328b5b4b34c21d854bd04bbe4a888023e83cf5ce8","first_seen":"2025-06-27T08:10:52.462074Z","last_seen":"2026-08-07T18:33:48.581242Z","times_seen":215,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/shared-URIJICNL.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.042Z","timestamp":1786127601042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/shared-URIJICNL.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/assets/scripts/appSdk.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6935\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"60dfcd60d418f17d80aa3169668669d3\"\r\nexpires: Sun, 06 Sep 2026 18:33:21 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6935,"size_decoded":7345,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"60dfcd60d418f17d80aa3169668669d3","sha1":"77b63a74fa9638fba354b643c2addd464f8067b3","sha256":"779702a00cb02962f0dbe1ea65c8a275909467a6455a00c6396b237abce23239","sha512":"7cc91356f23b757853bbc9a22b2660d62b9165afd11409407ca230f79811145a68d93deaf0ff46dec8dd50b81dc2a7e4d2be2b9c927ca1598ac53b3ec90c0ea5","ssdeep":"192:fJiXMgY2LtoDRmCSegdXj9CTSJ4G4w/4fLioEsJb:xqYwSDR41dhqYN/4fOoESb","tlshash":"6de14115987b497a26a260582a0f694073348c933e5ce0a4bbecce455f2ec1f91fa3dd","first_seen":"2026-06-07T15:44:28.742954Z","last_seen":"2026-08-07T18:33:48.584608Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:21.160Z","timestamp":1786127601160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wuytl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 13:12:38 GMT","end":"Wed, 07 Oct 2026 14:11:20 GMT"},"fingerprint":{"sha1":"52:91:6C:D5:26:41:74:53:9E:AA:DB:9B:FC:F3:C9:92:39:16:8D:18","sha256":"97:2F:E8:72:BF:FB:F5:C9:77:EB:85:C4:C3:A2:B0:3A:85:5A:11:3E:29:38:6B:71:E1:0A:6D:13:6E:D0:66:FE"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3242\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://navlek.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3242,"data":"[{\"app\":\"landings-constructor\",\"event\":\"template_hashes_ready\",\"language\":\"en\",\"landing_name\":\"clickbox\",\"build_version\":\"0.0.175\",\"landing_domain\":\"navlek.com\",\"landing_url\":\"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\",\"template_hash\":\"\",\"request_var\":\"6_DE_339512\",\"source_zone_id\":null,\"sub_id\":\"1bkcmi03g0083\",\"landing_load_date_time\":\"2026-08-07 18:33:20.893000 +00:00\",\"error_message\":\"\",\"events_history\":[{\"currentTs\":1786127600894,\"eventName\":\"start\",\"delta\":0},{\"currentTs\":1786127601158,\"eventName\":\"template_hashes_ready\",\"delta\":264}],\"context\":\"{\\\"template_hashes\\\":{\\\"main\\\":{\\\"buildHash\\\":\\\"23fc2fa44562a77e1915881ee19e9fd5dbcb260a4f19b96954e44b3057df6eaa\\\",\\\"clientHash\\\":\\\"5d93ad131576f345eb8dce712dc96b90255f5c68a110796e9cf0e4bf26828a04\\\",\\\"equal\\\":false},\\\"html\\\":{\\\"buildHash\\\":\\\"598afac29b0b8dcad532d9a197c0766d3e78d8aa39622dda8b3b9579add96413\\\",\\\"clientHash\\\":\\\"e2deded0c828aad70907a07a78a2787d14e9f13a11624acefd367cbce6ebefe3\\\",\\\"equal\\\":false},\\\"css\\\":{\\\"buildHash\\\":\\\"6524558dcd36e1e9f1df9f195f2c1c82684b55a65e64cd313742b8aab31d7940\\\",\\\"clientHash\\\":\\\"6524558dcd36e1e9f1df9f195f2c1c82684b55a65e64cd313742b8aab31d7940\\\",\\\"equal\\\":true},\\\"js\\\":{\\\"buildHash\\\":\\\"6b831951cd9e6df8b1ba8b278e732b8116277ee5f89f013fb2c2c8858eb1657a\\\",\\\"clientHash\\\":\\\"399c94961efe8a41e18dc94800ac04c41684dc53d6e2aa3cc6c9cc42d9f92015\\\",\\\"equal\\\":false},\\\"inlineSources\\\":{\\\"scripts\\\":[\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var H=()=\u003e{let t=new Date,r=t.getUTCFullYear(),n=String(t.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),a=String(t.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var g=()=\u003e{let r=new Date,c=r.getUTCFullYear(),a=String(r.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),l=String(r.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var u=()=\u003e{let r=new Date,e=r.getUTCFullYear(),o=String(r.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),n=String(r.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var o=[\\\\\\\"/assets/scripts/appSdk.js\\\\\\\",\\\\\\\"/assets/scripts/autoexit.js\\\\\\\",\\\\\\\"/assets/scripts/common.js\\\\\\\",\\\\\\\"/assets/scripts/main.js\\\\\\\",\\\\\\\"/assets/scr\\\"],\\\"styles\\\":[]},\\\"resources\\\":{\\\"normal\\\":[{\\\"name\\\":\\\"/assets/styles/style.css\\\",\\\"size\\\":6937,\\\"extension\\\":\\\"css\\\"},{\\\"name\\\":\\\"/assets/scripts/appSdk.js\\\",\\\"size\\\":243,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/autoexit.js\\\",\\\"size\\\":1767,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/reverse.js\\\",\\\"size\\\":1656,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/main.js\\\",\\\"size\\\":9609,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/translateElements.js\\\",\\\"size\\\":2865,\\\"extension\\\":\\\"js\\\"}],\\\"unknown\\\":[{\\\"name\\\":\\\"/assets/scripts/shared-KLJ2VC5C.js\\\",\\\"size\\\":5072,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-URIJICNL.js\\\",\\\"size\\\":6935,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-RKYZDRIZ.js\\\",\\\"size\\\":6567,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-JB5ZCMYZ.js\\\",\\\"size\\\":2698,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/shared-23LO2BYY.js\\\",\\\"size\\\":2060,\\\"extension\\\":\\\"js\\\"}]},\\\"diffHints\\\":{\\\"nodeCountDiff\\\":4,\\\"textLengthDiff\\\":-32,\\\"styleCountDiff\\\":0,\\\"scriptCountDiff\\\":4}}}\",\"env\":\"production-archive\"}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 18:33:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://navlek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Flksp95Dp%2Be703hU7ItyebYsXiMtVPfdOPjTn%2BQI21g6q1KWC7S%2FJlh1FiqfYaSElKq41BttR2l1RbOHgLEUyQq%2FmILVMIL7WCQcocUsKl7Rgxd%2FwE13iTsZeTA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2785e833adc0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/scripts/translateElements.js","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.922Z","timestamp":1786127600922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/scripts/translateElements.js HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2865\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"ed74cf5e725f95bd9a827dc05e128558\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2865,"size_decoded":3275,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ed74cf5e725f95bd9a827dc05e128558","sha1":"49c4f55b0494a69d0aeceb7683a5baf162a8a1e4","sha256":"02b24b2167b9b25d46de64e0806e075d4618299e0e1ded9206dff3811aceab91","sha512":"5ecb693389e4f89afe643863817593ef93c2805ca93a317ca3f3b87ee2e791755c542793c71b503d148fc00e5708c735ac311a5a21574637d42b2cee95bc4e54","ssdeep":"","tlshash":"cc51ef1866b7413b892b66674f8b01c9ba780e03247adc183bcd57425f94e3c5bef794","first_seen":"2026-06-07T15:44:28.74028Z","last_seen":"2026-08-07T18:33:48.585975Z","times_seen":24,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navlek.com/prelanders/clickbox/assets/images/cloud-left-2.webp","fqdn":"navlek.com","domain":"navlek.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512","date":"2026-08-07T18:33:20.932Z","timestamp":1786127600932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navlek.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 02:32:11 GMT","end":"Fri, 02 Oct 2026 02:32:10 GMT"},"fingerprint":{"sha1":"09:74:82:2C:E8:3A:53:A1:10:A3:37:27:FB:68:C9:DC:29:71:98:CA","sha256":"2B:0C:5B:C4:00:7F:D6:C2:53:E0:EE:04:93:9B:2B:B8:9B:D8:36:79:EE:ED:91:6E:55:F0:2A:AD:F6:C8:95:92"}}},"request":{"raw":"GET /prelanders/clickbox/assets/images/cloud-left-2.webp HTTP/1.1\r\nHost: navlek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://navlek.com/prelanders/clickbox/index.html?fa=1\u0026var_1=1bkcmi03g0083\u0026var_2=B2jadgpb2F\u0026var_3=6_DE_339512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 18:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2268\r\nserver: nginx\r\nlast-modified: Fri, 05 Jun 2026 15:05:24 GMT\r\netag: \"35e4c6e712ea741379180333c9eda6a1\"\r\nexpires: Sun, 06 Sep 2026 18:33:20 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2268,"size_decoded":2651,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35e4c6e712ea741379180333c9eda6a1","sha1":"640ee747797bce5f4d45283edb5bc994bd25ff73","sha256":"3242a5bb7bf12882f4a48c286b2a23d59cfe516a8808333e8119b55c16fc92c8","sha512":"cfd9230c3e6c1fd2b0550dbfd66ee4d43debc0a73ed54da9feed7a85764faac7a84e9b79551af9e2276b83f37decc675a25659e02da7234677acd49e0d891d65","ssdeep":"","tlshash":"a841e9334b120bc7e5bd02f86c419b22d6377f410e5593af62c282275fc59d1ae0a6cc","first_seen":"2025-09-17T22:26:52.897889Z","last_seen":"2026-08-07T18:33:48.586956Z","times_seen":57,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}