{"report_id":"747edd64-2322-4e87-8e61-bc4e76adc65e","version":6,"status":"done","tags":[],"date":"2026-01-04T01:10:55Z","url":{"schema":"http","addr":"pay.kassa.shop/","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"104.26.12.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pay.kassa.shop/","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"title":"pay.kassa.shop/","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pay.kassa.shop/","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"104.26.12.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T01:10:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fmw.freekassa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-28T22:24:05.936453Z","alert_count":0,"request_count":4,"received_data":1788073,"sent_data":1908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-28T22:22:31.188277Z","alert_count":0,"request_count":2,"received_data":19676,"sent_data":1119,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fmw.freekassa.net","ip":{"addr":"94.228.127.52","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":35812,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pay.kassa.shop","ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-12-23","domain_rank":0,"first_seen":"2023-05-04T21:28:02Z","last_seen":"2023-10-25T10:33:16Z","alert_count":0,"request_count":20,"received_data":2651555,"sent_data":8841,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":1,"received_data":407265,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/main-0cea8fc18574ef7974e3.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"079ff3151baf59bb0bdf60fd274f28c9","sha1":"42297dc12725a8819bc906dad6ec25d2695ddd49","sha256":"6e7fa5266b37bc4754ffc2c667852d77982caf07b16660d884ec1313326bda04","sha512":"e7d8ec433b9431504349a9027c31fd2a06ca05c2d1c3983d04eaed1e9cd296c3edfa93f92563a948d09e4b0306139adc0aad361de937b2e9ed560469506bb7f2","ssdeep":"384:qStP9a46FYaVq3yIsN4Clg/KZHWIL+Hbyl/KD8:qEexq3eNDg/K1lJ","tlshash":"4172c89cf5c6f02207e31134903f324bb27b2e28945e8450a35ad9d63d79d4ea633fa9","size":17354,"data":"","first_seen":"2026-01-04T01:11:05.446354Z","last_seen":"2026-03-08T04:25:51.757373Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/b581ddd9e73b87fc72a5bc8d22cb2e3be63e6f0d.bdcb4a8cf40120a17efc.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eeabde594720808b68612f086cbfa9","sha1":"a507d81bc43d36a02441032fbcead708b31cebd5","sha256":"5272817ec7c5c95bdadae7669a25ab355571ab8f936dc6d978bd9923235b6001","sha512":"c250c9cd3d5004841d567d59bfcda51a237eb387386d9ff89d0c3750344f3cdf718faae28130dd4a867cd762c08022d8dcd808093979f0f8e213062557ee72ec","ssdeep":"384:+VpP2ylguV4tPr8aYc8v0yrnw338aDZtRDp:+Vp1lguy3CjrnGjDp","tlshash":"db7232c6b2c96f9a3f5712e4c07a602972f7d582cbba58b0d17ae4f63de08049733525","size":16418,"data":"","first_seen":"2026-01-04T01:11:05.451804Z","last_seen":"2026-03-08T04:25:51.761647Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-04-20T13:13:16.47381Z","times_seen":49372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68302322987585e23fe67bc3771a2a1e","sha1":"9096351bf350e1c82f85c405c2df05bcc46b5634","sha256":"c7091320443cf15cd57f975a93bddde3bb2df0a511acd5f15a383aabfa2d7ac6","sha512":"9821ffec24fc07f4713892a14fb58fb622bf7618b3356f6486572895cf98e4f2348a7e73988f8ac182edf6482f928d6f2f1c3e4e43bc96a557dc619b05b0bb0e","ssdeep":"","tlshash":"3ad0a7eb1442cdf7cda0ddbb9743d1a678efd1b780a981f425e04ca22ee1c9510285ec","size":264,"data":"","first_seen":"2025-03-02T22:52:05.537345Z","last_seen":"2026-04-23T13:16:38.459016Z","times_seen":6092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/pages/index-a3133b90d244d6053d25.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8135831f27bd26f8fe046aa4813cbf73","sha1":"1311019e27d163eb4ed7a6c8f5e05659f6a6278a","sha256":"54ed15c99adcce9ef5f169bff6f05babfb8faefddf8f655579c77a2251e09fa5","sha512":"95f17207c7f7e48f521ac86f432b2ca14e445f6096325979244d47c7fd615560933ccbffd48c85fed9fc2310708175d4055fde5fb4c3882bfcfb807c3047cf5c","ssdeep":"","tlshash":"edd0c27820a2b8b900ea17a422377ac434e544141d8cad764be090d17e3190fc8219c9","size":277,"data":"","first_seen":"2026-01-04T01:11:05.46413Z","last_seen":"2026-01-04T01:11:05.46413Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/d2da436755c97125396cdba684b81a463d3bc98a.ff28b740db1a353f8815.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48d33cbda29bcf10c70c82a1b839911e","sha1":"e8212c1e178efc3bdaea3b2c24ee103cdf754fc8","sha256":"794c261e2daaaee60ba6bcbe6057ceca2d94f4f9609b8ac73e6cb2596ac15b56","sha512":"e272a5c092adc64b12ad34377e166aa6ff1636987824dc8f2fc33484913623e1a382c60e7b27f992a6d31dc2dce1291f58d1fd6325b9c7df94809853d9c05b9d","ssdeep":"768:uilMjmkET0KiupHsFalruJ9DXGPntSJ3rNB5RF8o5f9Ak5JFFZnsFeOE:uilcmkEJxFwJ9jGiPb5FZROE","tlshash":"609345dcb4b69b03ed65a4ca66f11f4cf80d1238d5cb4babf57ce26b7410684a512e38","size":89725,"data":"","first_seen":"2026-01-04T01:11:05.444001Z","last_seen":"2026-01-04T01:11:05.444001Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/framework.959af5fe4cd273f86223.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a82d3e96be6dca7aed4a792c087b759d","sha1":"e878c79cebd6863dfcc4c5b28f27c41fd87a0567","sha256":"9ac69b51ece1a144d682c615213b974f93cdd042857006ba7eb3c433502cd461","sha512":"12057d2652af9770c5d59cbf1760c5b8473ab240b661e8955bdd0ab3b26e46c84a8a8ae3ba8bd045d51a1a9b90471966c3227d056e1f57aef9f6065effe2cfa9","ssdeep":"1536:zvnhef/ubIDJCZFqEKFSuSP19XzgMYi+Zjrzbzo61gug:zPhef6fXL+Rzbzo61+","tlshash":"0fd308d93992f5216bf311b7109f1807733d1a1b280c4960a212eedeb5fd45ea12bf9e","size":134602,"data":"","first_seen":"2026-01-04T01:11:05.462407Z","last_seen":"2026-03-08T04:25:51.722843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9dffc21f83037723e3aead2e876df94","sha1":"94e56540d27bee7ad0f1ef4ddee68f993f1c653e","sha256":"34b8b26f02d17e42d94d9449fcd847e10fe97ed13bd6ca606b81c9ae61b93d75","sha512":"89a1a7ca9b4e2d3e7185425ff9ed812c86c0ca72a846e70e3b2b8fd0aa8ad1b1183b0f138e722e26f94227b720d0c88203e4244d51f36e11169787fbafb3f17a","ssdeep":"","tlshash":"63c02b8c25475cb000e713400b1fb701f1033210a8e01c31090173046a20c13e7c5850","size":146,"data":"","first_seen":"2026-01-04T01:11:05.465947Z","last_seen":"2026-03-08T04:25:51.764421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/5dd20d797de28e0fdda7de2ab54c63b52c1f6d41.563e3d1746380ebf2927.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25121ee2dde30c961adc28b0f0dada1f","sha1":"94d68632d1b5927f68262cd09bac17ac6bdcef44","sha256":"d910984e086caa597b2fb45e9ab073d8cdceb9a5d2af42b7033fcae795e46097","sha512":"5a014c9078af7a846fdebcc409ebdbe2e2933e3d2791a64f620c22946b2d6995ba67bc737cc915b56bd7eb8ea98056dc133d18be808ddd232e3948856dfea24f","ssdeep":"24576:pMV/wprOTMUaGglZbfuWjw4MLv8VWhp0l3iLjc:pMVAxMLv8VWb0sLo","tlshash":"b5051ac871c2f099479376b5807f140ff33e2da9a80dd510ea62d4c6bc799899237f6a","size":810223,"data":"","first_seen":"2026-01-04T01:11:05.448701Z","last_seen":"2026-03-08T04:25:51.718082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4016425ad2beccfa4fd4d641508ed40","sha1":"5eda5844a648e6c21ebe0f6d1346c69f462aa47f","sha256":"8ef5f46490cd912c9a7c24e6f143d7c99e6a5dbc2484912c9287074e2a41de5c","sha512":"29d8a524d8990895d364ae957f9a8820c51ec1ebbc6d077fd0729ed0d22a9b3a0026426ec208619f64af99bf8cd59d423eec67fd7fe093a286b87c87d42ae662","ssdeep":"","tlshash":"871112731605f0354f7209d1e1ffc6b5e491b01cf16845d8a515ea886f7accbce14585","size":1051,"data":"","first_seen":"2026-01-04T01:11:05.441186Z","last_seen":"2026-01-04T01:11:05.441186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"034b047a4588b514a28fcca3215d3f62","sha1":"1a6224386fc6620cdcb860772d53925ce049a417","sha256":"74a8bc7b30371977033869f29b9ee0c0254ef6581cbfb5f66e7a156ee9371b40","sha512":"3dce7a4f1af8268000f77a4136d842010f1d6a94833af9c960ecc62a03c39d4a2bf6dd5db80c4c4cd9fdfa356ee1b9a741c242a4431bfce89394c9901e16e801","ssdeep":"192:2ITH4eKUvBFjwqPxEmpqzLE1QT3NUgS5tWmSRmwT:JTCqPxEmELE1QT3NUT5tWmSRXT","tlshash":"7ee1bb1a4f55935463337d16b6c96335aeece4229123c88db35da50bcf03eba9398e07","size":7036,"data":"","first_seen":"2026-01-04T01:11:05.4667Z","last_seen":"2026-01-04T01:11:05.4667Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/KslTE9ffYhV73QO4Mmr67/_ssgManifest.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abee47769bf307639ace4945f9cfd4ff","sha1":"c0a0dc51ee8a2852baf5ff30c33b1478ff302585","sha256":"653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479","sha512":"2b074799106698df69a28fcd8255c3cfd1ccf40fd4c1bf5d463c42e63b32856f801e066706fbd960a0da4ebe645c070c398dcf01bd722dc4fa592266361ae81a","ssdeep":"","tlshash":"d4a001a0903cdc60aa63dd1c126013168fa05062651d28938afd2054c0341410300d50","size":76,"data":"","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-04-23T15:20:17.870656Z","times_seen":12256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/8050e1a2.d528938cd932329180ae.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ab8b65be0a5760f6e53e10953260f9","sha1":"db4d5f332b6d97bcaaff74b5b2cb1c25f3b832a9","sha256":"019202a9efef2c8d132240d8dcd45a66f4e9452a06e094b732fe7bf5032b9723","sha512":"80e161e23ed7739f0aa15640cb565a1386868633cbf4c24adf779751a09c5a88fa24a7beaecf7cf4c7cff9f72a28b1f0a97eede265b885f216bd8eae311269bc","ssdeep":"1536:Ttffm8642Wo2bBGrcjZxckvKlF6ht1f48OFOwvvtUKpw3FsptCQP11RJqsbRPXoR:5RKlF6ht1fiNbC","tlshash":"15e354f374175df28faaa16fdf41b6e4a279001ae5c46c0ffaad9489032127d170299f","size":144534,"data":"","first_seen":"2026-01-04T01:11:05.460291Z","last_seen":"2026-03-08T04:25:51.751147Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/2654ee894080236e322bc999fe5c9fa24702d621.cf3866627fa6bdd6d649.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ae8a7741143c5d7a748a728e6c3354e","sha1":"20d1941692937ccb9bf5d9ce38c3dd3f2d6c8f35","sha256":"61c40f04ef2f25d328678bd6c20d4256580dd904cf00d3442e90fd28e087f9c8","sha512":"3f64c26b670063ca566aea45c2c1b326263355c7fb68b766e3d8e52fcc6407cc16f26147115a0f150dd91c32277de8d010b98c9ffe53bfaad4fc7a03d45c8799","ssdeep":"768:teOTxKXSgVZ30AhsmulwlsQulcoEFeCRovCb+Msb0jebCRjA3kHqJ/+Smi5HxoRE:tPxo4zb0bRjA3kHS/ZjOQYaIU","tlshash":"1c73078c71c3b1854f8362a610bf220ef33a6946544ce414e972e9c5bda4e9da3b7f35","size":80699,"data":"","first_seen":"2026-01-04T01:11:05.461141Z","last_seen":"2026-03-08T04:25:51.699461Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmw.freekassa.net/js/user.min.js","fqdn":"fmw.freekassa.net","domain":"freekassa.net","tld":"net"},"ip":{"addr":"94.228.127.52","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"237d30925a4733e83a82317750a63742","sha1":"fabc4d695bbb7367caf52c706818959ed2c36da4","sha256":"feba227b6883348e8bb769ac396b1c0660252d02eb477d5c9cf417186a7ce053","sha512":"c0ee87f64430a4a03cc8e83c62eed18cf35c370d793d32825422a02c816fe5f4c0ac1bfae8bb6f65b87a2f96c7aa004b1ba96e63516fb80a2a26696be4f163d0","ssdeep":"768:UGIt8PDOGsuxdS71CdArt47JmY/3/yCOAJpSmvFSg5NG0VkdIdALR04aCo/rV/cp:A6AtSJRiXheJEoy","tlshash":"9bf20898b193b065527328ea403ba101f13a6d64341ac493e27e5dd73c77a6b9237fbc","size":34991,"data":"","first_seen":"2025-09-30T17:46:06.761759Z","last_seen":"2026-04-14T05:10:05.50375Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LZEZMZDYEY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"caba28e4b1d937a7542a20bedd5ed826","sha1":"0b2cc6d7cd58b03bd8003aba2f1cdead819d9d65","sha256":"67d2e43e552806cddf0a25f3acb6ed384b718a46410dece7410f213f6a95205b","sha512":"3f61474469d3d6b8b2b42d5ecc494b0b939d3e38afe64f0c98531df5508affe6d353ec814220cea870e59c6847e43e602446804771ee03fa93f268e99e3e7b6d","ssdeep":"6144:lIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNu6JWoNPad4FpC1PF:2Cpbu7/1mbrnsRWbMpA","tlshash":"948419ce73c674668396a078503f118ba57b29e2f44cc895f189cce42d74aaa4277f7c","size":406661,"data":"","first_seen":"2026-01-04T01:11:05.449606Z","last_seen":"2026-01-04T01:11:05.449606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/webpack-2e0d20f8bdad3136f7b4.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94bde281871ee3a52bb9ba43a2d22696","sha1":"9e44c074d0f5e295dcbb95b209bc899abdf83535","sha256":"3ca304acea45acdc12f1584ea7bc1d56ba6aefa0d8acdeb326c9e07f2ad82411","sha512":"8d0347a2ac34abb3e802ff955d14376a9f16a61141506567f37cdce659b29074499a38b599050f136711c78c65f7b1a5776463804329887956ae7df965ac3fe6","ssdeep":"","tlshash":"3a41a5d936d4f8b9828258a8143f6016f2351d76093ee9d09349e8f1bc38c0ac116fe6","size":2351,"data":"","first_seen":"2026-01-04T01:11:05.44312Z","last_seen":"2026-03-08T04:25:51.729007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/KslTE9ffYhV73QO4Mmr67/_buildManifest.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ce797b62d29f426e753fd4813a19024","sha1":"c9d61b5dac756c962993204c39216ca782ea211f","sha256":"45aa95d9d2dd8f6dccb2b9888fff8caf0847b95c4cf62b08516e99dfe101f412","sha512":"b10559e70e16a45d2666dc9c1749d0044ee5b1cbe6a839ad06681352e1a45b86042d03be7eba82001e2b14a4ac1661b9e72bb2ff75a716808ab49849e416104b","ssdeep":"48:n8D49NbAj8cfsSgQWL8M3afYuiWSESbNBi50oG07Q+5mhSPyQ8woIwPiSK:8MEj8tKTJYnqGoVZyQ87IZ","tlshash":"0da1bed3395af92c0b7affc43fb97f296b941020e3ed297b425e54a90990530cda4715","size":4947,"data":"","first_seen":"2026-01-04T01:11:05.453529Z","last_seen":"2026-01-04T01:11:05.453529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/a492a227a655ceddd21e6e6842496dffa0e35e67.19a25adb5a3c133ba5a9.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7eff336fc87a7a9393916d49734c0c1a","sha1":"11fa336de7992d081545716ce5cfdb716b5b8d73","sha256":"6fd71a42cf316efdc94602be28c06e70f2dad574cc120b42d0dc96a36e0e6b6a","sha512":"1168083b0791e994873b89d47706f695f93ce1c7a9a000df391ff820586277ce10633bd3738e861c7530ccf71cf24985a44e1c6ea69ea38ec3d3c930da47bc37","ssdeep":"384:w7zQeftO/bG1KyY3O1ep9v4z4s8R2De9EFaRu/ll5R1JhjZw7DC7lI:kztO/qAj3Zp9zs8sDmEFaRE5R1JRZF2","tlshash":"cb13c78c79c3f0a996536bf142ff060de33e3b41652de110da81e0da695859ce632f6e","size":45557,"data":"","first_seen":"2026-01-04T01:11:05.452599Z","last_seen":"2026-01-04T01:11:05.452599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/commons.67db408dc455d1da4120.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6093a1948f54f403b6608b3d22983620","sha1":"e69c8cf95f4dc8312d3b97f76d73d7e764e14d89","sha256":"2fdcaea3ab84ae5ffbd92b431ca230687d9b97f4f47fd791248ab61d7c68cefe","sha512":"81127f9327dab0eccc2d6e521b65aba064b06997b6c845fa825e2fb4a599c4b57ebab76ced8aca6af35d5dca77c1ba810e3ad6d9df4abee201276cfc0657b987","ssdeep":"768:HN1hI8FCYkfaAS5A33hkDPJmwObC/XJrZXpVe7LC1zXGKQBLxJe+Q:xErzhkDRmwbZFPBzX2G","tlshash":"2023a59db1d2f06647d36174803f620af2bb2958744ec480e766d9d2bc7494fa133eba","size":49561,"data":"","first_seen":"2026-01-04T01:11:05.447333Z","last_seen":"2026-03-08T04:25:51.724681Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/996731563352964f7a067178f446c2b1aae7c9df.6357db7bef7a1eced876.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d019cd109833e7a75ea26d932f4af84","sha1":"ef1954826d026f061f337a63d51e76ef7532eec1","sha256":"32fda594140b788782e596f2fd21fd0d829bdcb67099e51c02d1b30e58dc0933","sha512":"f7eabbe9426b0f7938a3824415aca3c985cc7eea1c8adec7229c5ce96c53db39e80ea8f6e0223f6aed6f2715acdb54bbcfb8e1122b2317ef4b1f4bc3e8c8d633","ssdeep":"768:9Ynfqmf2EmYQtQOkn5wLSzTDen+FbHBf2b/oIeSRSFvr8dkCZK50gJkWl:9YnfqxEmPMwmzTDenAbhfq/oIFer8dkB","tlshash":"97233a8d71c5f0a00b936bf546ff244af33a2919d50aa450f796c4ca3f6968c6223f5e","size":49037,"data":"","first_seen":"2026-01-04T01:11:05.455002Z","last_seen":"2026-03-08T04:25:51.705305Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/cf6d1ced78dbe2671f35d2b3c9178c5bcc14e120.257c4ee0b00635143533.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6619fbfe9ff500d0eb27383c229bfce9","sha1":"9203dea0fd04c80a99664fd4bccab4d410b8860e","sha256":"a18364069829ffa8f4fc5db9595110d54d7105a4a52e4290c690c30cd1ccb61c","sha512":"a5ce58cda8399fc9a66d5bfd60f815d758184c9cc1fc66d0561fd46d863045a9b4f33fd76e1963fa92517f4e08ec19ab23dc2a7dca96f16eedfa988fc58917b5","ssdeep":"1536:QRvVQ1LpYUfdODvHyfkHzpBHyLaSKHBO1Wfjm:DYdyfMzpCaSKH4","tlshash":"5c5396c8b7c6f46953636460443f5407f2bb9ea8b04ec0d8e276d4dab8b954e9063f39","size":63446,"data":"","first_seen":"2026-01-04T01:11:05.463162Z","last_seen":"2026-03-08T04:25:51.730739Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/pages/_app-f597dbae3d1820139060.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff031c981a38272ac89abfdf74046fde","sha1":"44c8325cb7c76476135d25fb2601da677b2768cd","sha256":"b2fa97c2ba94ba9c638b636851f001cd00ce27746f27a77628a65272dbcaab8d","sha512":"20e44b5b95379ed8d6e9c41221a03adcba61f4c799e560f2767931b42b0c8f8a00f9f0c768fb715669485302e0433e0c2573f5f9b4614a34b40bfb7dd5b564c6","ssdeep":"12288:EVoFb/uAF25FGbzoEF1+IzZrvCkhpRVDkjc99:/b/K5oF1+IzZrJRVDkjc99","tlshash":"9715c7d9b0d7f29e16c231e2c13bbd8ef1a46900e018e727dd3ad6c7d810556a1b379a","size":883891,"data":"","first_seen":"2026-01-04T01:11:05.450372Z","last_seen":"2026-01-04T01:11:05.450372Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-04-20T13:13:16.47381Z","times_seen":49372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 04 Jan 2026 01:10:31 GMT\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1051,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051), with no line terminators","md5":"f4016425ad2beccfa4fd4d641508ed40","sha1":"5eda5844a648e6c21ebe0f6d1346c69f462aa47f","sha256":"8ef5f46490cd912c9a7c24e6f143d7c99e6a5dbc2484912c9287074e2a41de5c","sha512":"29d8a524d8990895d364ae957f9a8820c51ec1ebbc6d077fd0729ed0d22a9b3a0026426ec208619f64af99bf8cd59d423eec67fd7fe093a286b87c87d42ae662","ssdeep":"","tlshash":"871112731605f0354f7209d1e1ffc6b5e491b01cf16845d8a515ea886f7accbce14585","first_seen":"2026-01-04T01:11:05.441186Z","last_seen":"2026-01-04T01:11:05.441186Z","times_seen":1,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":193,"dns":2,"connect":14,"send":0,"wait":37,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmw.freekassa.net/api/visit","fqdn":"fmw.freekassa.net","domain":"freekassa.net","tld":"net"},"ip":{"addr":"94.228.127.52","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:32.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmw.freekassa.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 02:44:36 GMT","end":"Fri, 20 Feb 2026 02:44:35 GMT"},"fingerprint":{"sha1":"E5:19:7E:05:7E:99:2A:CF:25:4E:AB:44:D5:EE:57:B9:DA:E2:A4:6F","sha256":"B1:34:25:1F:1B:86:34:E8:65:D6:14:8B:71:8F:E2:E9:64:34:8A:75:51:EB:4D:27:11:79:A8:64:9F:E8:9F:D3"}}},"request":{"raw":"OPTIONS /api/visit HTTP/1.1\r\nHost: fmw.freekassa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-public-key\r\nOrigin: https://pay.kassa.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 04 Jan 2026 01:10:32 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, x-public-key\r\nAccess-Control-Allow-Credentials: true\r\nX-Debug-Http-Origin: https://pay.kassa.shop\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":93,"dns":0,"connect":39,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fmw.freekassa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/webpack-2e0d20f8bdad3136f7b4.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/webpack-2e0d20f8bdad3136f7b4.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"92f-19a016c51e3\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Axcoc0k3vEFtOVgBmo%2BAghQ7SCdspT0XYHTAXKlXYFsgofVCPmRA%2B9CBHKqyacAc2N0KJjBGRqkZ4rB%2BrVsbDupiidNVlP1TSEBb\"}]}\r\ncf-ray: 9b86db4c0b6b7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":2351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2351), with no line terminators","md5":"94bde281871ee3a52bb9ba43a2d22696","sha1":"9e44c074d0f5e295dcbb95b209bc899abdf83535","sha256":"3ca304acea45acdc12f1584ea7bc1d56ba6aefa0d8acdeb326c9e07f2ad82411","sha512":"8d0347a2ac34abb3e802ff955d14376a9f16a61141506567f37cdce659b29074499a38b599050f136711c78c65f7b1a5776463804329887956ae7df965ac3fe6","ssdeep":"","tlshash":"3a41a5d936d4f8b9828258a8143f6016f2351d76093ee9d09349e8f1bc38c0ac116fe6","first_seen":"2026-01-04T01:11:05.44312Z","last_seen":"2026-03-08T04:25:51.729007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/d2da436755c97125396cdba684b81a463d3bc98a.ff28b740db1a353f8815.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/d2da436755c97125396cdba684b81a463d3bc98a.ff28b740db1a353f8815.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"15e7d-19a016c51f0\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNznBisokvBz8aXkNTxGfOs8dcH4k2%2BGjAec%2BvUgZMqt5Ld08S6%2FHYITk3i0nxllFBoLXdf3a9O6%2BSuOI6AX56kWEjSSNZyRdqfb\"}]}\r\ncf-ray: 9b86db4c2b7d7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89725,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"48d33cbda29bcf10c70c82a1b839911e","sha1":"e8212c1e178efc3bdaea3b2c24ee103cdf754fc8","sha256":"794c261e2daaaee60ba6bcbe6057ceca2d94f4f9609b8ac73e6cb2596ac15b56","sha512":"e272a5c092adc64b12ad34377e166aa6ff1636987824dc8f2fc33484913623e1a382c60e7b27f992a6d31dc2dce1291f58d1fd6325b9c7df94809853d9c05b9d","ssdeep":"768:uilMjmkET0KiupHsFalruJ9DXGPntSJ3rNB5RF8o5f9Ak5JFFZnsFeOE:uilcmkEJxFwJ9jGiPb5FZROE","tlshash":"609345dcb4b69b03ed65a4ca66f11f4cf80d1238d5cb4babf57ce26b7410684a512e38","first_seen":"2026-01-04T01:11:05.444001Z","last_seen":"2026-01-04T01:11:05.444001Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/KslTE9ffYhV73QO4Mmr67/_ssgManifest.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/KslTE9ffYhV73QO4Mmr67/_ssgManifest.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 60\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"4c-19a016c5206-gzip\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUL4LMZnTkvjlux74EckuJkLSuxunpxVl49PQmswrAAUc7Lh6lt29DQDDVWPSx9UOfxzjyxCS3u4Xi%2Fmw3%2FMgYiglk0%2FXhE67Jyo\"}]}\r\ncf-ray: 9b86db4c2b847130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"abee47769bf307639ace4945f9cfd4ff","sha1":"c0a0dc51ee8a2852baf5ff30c33b1478ff302585","sha256":"653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479","sha512":"2b074799106698df69a28fcd8255c3cfd1ccf40fd4c1bf5d463c42e63b32856f801e066706fbd960a0da4ebe645c070c398dcf01bd722dc4fa592266361ae81a","ssdeep":"","tlshash":"d4a001a0903cdc60aa63dd1c126013168fa05062651d28938afd2054c0341410300d50","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-04-23T15:20:17.870656Z","times_seen":12256,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:32.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 04 Jan 2026 01:10:32 GMT\r\ncontent-security-policy: script-src 'nonce-l13fvjeZqMoGjvTZ3-p6gg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16860,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"15b8d50d9ac139a137fe99e45263334b","sha1":"b0a28c53c92d4310e40dff2684ace9c1ba3c2c36","sha256":"a198d5c5c0fa9b5552e5f8ab89c1e402c28175fd0d1e452a4a4547833bf03ba0","sha512":"05481b3c4bd92715f3976dddc109d58280922eb1982eb659567884d68c5067b91a5570d590fa903a9de8a8952b714a25dc8f746dbd1043d83529fa41c241def7","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/c:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+P","tlshash":"ce720e50041754009b835ce223ce7f30fe0e92517146d0b1abfdab6beedbda6926939d","first_seen":"2026-01-04T01:11:05.445455Z","last_seen":"2026-01-04T01:11:05.445455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/main-0cea8fc18574ef7974e3.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/main-0cea8fc18574ef7974e3.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"43ca-19a016c51f4\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnqXFR7N%2FJMLcsq92L3tHcfl4khbd2rs5iItLk1DXdHoqKdKV44zQKNnDmvNJg5wKemd0VSa%2B8AtERCMJtBd0htzF83q8jtSFea2\"}]}\r\ncf-ray: 9b86db4c0b6a7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17354,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17354), with no line terminators","md5":"079ff3151baf59bb0bdf60fd274f28c9","sha1":"42297dc12725a8819bc906dad6ec25d2695ddd49","sha256":"6e7fa5266b37bc4754ffc2c667852d77982caf07b16660d884ec1313326bda04","sha512":"e7d8ec433b9431504349a9027c31fd2a06ca05c2d1c3983d04eaed1e9cd296c3edfa93f92563a948d09e4b0306139adc0aad361de937b2e9ed560469506bb7f2","ssdeep":"384:qStP9a46FYaVq3yIsN4Clg/KZHWIL+Hbyl/KD8:qEexq3eNDg/K1lJ","tlshash":"4172c89cf5c6f02207e31134903f324bb27b2e28945e8450a35ad9d63d79d4ea633fa9","first_seen":"2026-01-04T01:11:05.446354Z","last_seen":"2026-03-08T04:25:51.757373Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/commons.67db408dc455d1da4120.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/commons.67db408dc455d1da4120.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"c199-19a016c51e3\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FyjCl9wGCwGwdHRfN5ioLa8B8tYZHFF3LNOtHHUdpYp0gHSCtsD8wubVakvCZmYaCBec%2FFyH8BUIj0AvjlTcjXBGvdzd%2F0G3og1\"}]}\r\ncf-ray: 9b86db4c1b717130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49561,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49561), with no line terminators","md5":"6093a1948f54f403b6608b3d22983620","sha1":"e69c8cf95f4dc8312d3b97f76d73d7e764e14d89","sha256":"2fdcaea3ab84ae5ffbd92b431ca230687d9b97f4f47fd791248ab61d7c68cefe","sha512":"81127f9327dab0eccc2d6e521b65aba064b06997b6c845fa825e2fb4a599c4b57ebab76ced8aca6af35d5dca77c1ba810e3ad6d9df4abee201276cfc0657b987","ssdeep":"768:HN1hI8FCYkfaAS5A33hkDPJmwObC/XJrZXpVe7LC1zXGKQBLxJe+Q:xErzhkDRmwbZFPBzX2G","tlshash":"2023a59db1d2f06647d36174803f620af2bb2958744ec480e766d9d2bc7494fa133eba","first_seen":"2026-01-04T01:11:05.447333Z","last_seen":"2026-03-08T04:25:51.724681Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/5dd20d797de28e0fdda7de2ab54c63b52c1f6d41.563e3d1746380ebf2927.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/5dd20d797de28e0fdda7de2ab54c63b52c1f6d41.563e3d1746380ebf2927.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"c5cef-19a016c51ee\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FrgIqrs2a%2FbZGBlXJctHHVH%2BxGz5WUqAX62NxIaV2j%2BrnBRTEvv8bGGcuTYELxdpNUnFLoMRA0ddeYFC3U5Dh%2BPvqxwsjVEZ%2BAv\"}]}\r\ncf-ray: 9b86db4c1b727130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":810223,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"25121ee2dde30c961adc28b0f0dada1f","sha1":"94d68632d1b5927f68262cd09bac17ac6bdcef44","sha256":"d910984e086caa597b2fb45e9ab073d8cdceb9a5d2af42b7033fcae795e46097","sha512":"5a014c9078af7a846fdebcc409ebdbe2e2933e3d2791a64f620c22946b2d6995ba67bc737cc915b56bd7eb8ea98056dc133d18be808ddd232e3948856dfea24f","ssdeep":"24576:pMV/wprOTMUaGglZbfuWjw4MLv8VWhp0l3iLjc:pMVAxMLv8VWb0sLo","tlshash":"b5051ac871c2f099479376b5807f140ff33e2da9a80dd510ea62d4c6bc799899237f6a","first_seen":"2026-01-04T01:11:05.448701Z","last_seen":"2026-03-08T04:25:51.718082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LZEZMZDYEY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-LZEZMZDYEY HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\nexpires: Sun, 04 Jan 2026 01:10:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137605\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406661,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"caba28e4b1d937a7542a20bedd5ed826","sha1":"0b2cc6d7cd58b03bd8003aba2f1cdead819d9d65","sha256":"67d2e43e552806cddf0a25f3acb6ed384b718a46410dece7410f213f6a95205b","sha512":"3f61474469d3d6b8b2b42d5ecc494b0b939d3e38afe64f0c98531df5508affe6d353ec814220cea870e59c6847e43e602446804771ee03fa93f268e99e3e7b6d","ssdeep":"6144:lIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNu6JWoNPad4FpC1PF:2Cpbu7/1mbrnsRWbMpA","tlshash":"948419ce73c674668396a078503f118ba57b29e2f44cc895f189cce42d74aaa4277f7c","first_seen":"2026-01-04T01:11:05.449606Z","last_seen":"2026-01-04T01:11:05.449606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":234,"dns":1,"connect":14,"send":0,"wait":60,"receive":45,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/pages/_app-f597dbae3d1820139060.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-f597dbae3d1820139060.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"d7cb3-19a016c51fe\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2noocF9TUPZ1RzGSX62n71r9IoWqeEhEC%2FxGcJJJqfjPdpEK%2BkRWqKeTUn%2BTw%2FEaaCVp3GRq0aUSTNwqqaeCmYc74GJuysu3koq\"}]}\r\ncf-ray: 9b86db4c2b7c7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":883891,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff031c981a38272ac89abfdf74046fde","sha1":"44c8325cb7c76476135d25fb2601da677b2768cd","sha256":"b2fa97c2ba94ba9c638b636851f001cd00ce27746f27a77628a65272dbcaab8d","sha512":"20e44b5b95379ed8d6e9c41221a03adcba61f4c799e560f2767931b42b0c8f8a00f9f0c768fb715669485302e0433e0c2573f5f9b4614a34b40bfb7dd5b564c6","ssdeep":"12288:EVoFb/uAF25FGbzoEF1+IzZrvCkhpRVDkjc99:/b/K5oF1+IzZrJRVDkjc99","tlshash":"9715c7d9b0d7f29e16c231e2c13bbd8ef1a46900e018e727dd3ad6c7d810556a1b379a","first_seen":"2026-01-04T01:11:05.450372Z","last_seen":"2026-01-04T01:11:05.450372Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/favicon.ico","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 24 Jul 2024 12:59:21 GMT\r\netag: W/\"3aee-190e4d32526\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNMxZbKzMitdBx8M3WTZ%2FDciKJiCioElSFlvOkyid9%2FsAUU3%2BkH85BecO6mVOxbGsx%2BJXO7pbbQWlWHJwMswi6gCGoExJbu8Caax\"}]}\r\ncf-ray: 9b86db4dfca77130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"39f19106e389e06b1462f1320c0e84df","sha1":"f77221d933a43c96d123451138505b4552dc916a","sha256":"27a8bd1323e23fbdbdeee0cf11959f5e0b76f3bdc99d90c81fa0dc8b3cb13bf5","sha512":"ea78c883d3c52a811041d5398094df000715e255d909073113459c022b70a3e911b392f80679f1f3e8ca75f0acd390a99765aafcd1b6826c14322eafb6b9306f","ssdeep":"192:jc43+2M+FYFEFxFEFSFv8J4FF3CW/r1bFcYFeFCF0FRSUz/tZfcUx:j1HFFyb","tlshash":"7f62d6265691e992dbe70071ce90899b07be0d4e5f53f122627f790ae73e94d0f706e0","first_seen":"2025-11-11T18:22:40.875725Z","last_seen":"2026-03-08T04:25:51.759681Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/b581ddd9e73b87fc72a5bc8d22cb2e3be63e6f0d.bdcb4a8cf40120a17efc.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/b581ddd9e73b87fc72a5bc8d22cb2e3be63e6f0d.bdcb4a8cf40120a17efc.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"4022-19a016c51e7\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BffkbadFXe56ZdbQlw2rfr9shqxmsCcIISiMoKOKxlRhRDcDi0%2BBcV%2BavJw7caVNWoAWFXhVMRe0iLFm0CQCDEjUc7Wmbqeg4WIl\"}]}\r\ncf-ray: 9b86db4c1b767130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16418), with no line terminators","md5":"16eeabde594720808b68612f086cbfa9","sha1":"a507d81bc43d36a02441032fbcead708b31cebd5","sha256":"5272817ec7c5c95bdadae7669a25ab355571ab8f936dc6d978bd9923235b6001","sha512":"c250c9cd3d5004841d567d59bfcda51a237eb387386d9ff89d0c3750344f3cdf718faae28130dd4a867cd762c08022d8dcd808093979f0f8e213062557ee72ec","ssdeep":"384:+VpP2ylguV4tPr8aYc8v0yrnw338aDZtRDp:+Vp1lguy3CjrnGjDp","tlshash":"db7232c6b2c96f9a3f5712e4c07a602972f7d582cbba58b0d17ae4f63de08049733525","first_seen":"2026-01-04T01:11:05.451804Z","last_seen":"2026-03-08T04:25:51.761647Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/a492a227a655ceddd21e6e6842496dffa0e35e67.19a25adb5a3c133ba5a9.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/a492a227a655ceddd21e6e6842496dffa0e35e67.19a25adb5a3c133ba5a9.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"b1f5-19a016c51f1\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m91ZgvAlglzICoPBXgk4%2B5QDjNHGkn5rS3Ka0iW%2FKvLJxpk2WhFtPcCCC8HF0E5LKpnBN82uMJOOgCfo3kr2ohGAjcW7B2HxlHQJ\"}]}\r\ncf-ray: 9b86db4c2b807130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":45557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (45557), with no line terminators","md5":"7eff336fc87a7a9393916d49734c0c1a","sha1":"11fa336de7992d081545716ce5cfdb716b5b8d73","sha256":"6fd71a42cf316efdc94602be28c06e70f2dad574cc120b42d0dc96a36e0e6b6a","sha512":"1168083b0791e994873b89d47706f695f93ce1c7a9a000df391ff820586277ce10633bd3738e861c7530ccf71cf24985a44e1c6ea69ea38ec3d3c930da47bc37","ssdeep":"384:w7zQeftO/bG1KyY3O1ep9v4z4s8R2De9EFaRu/ll5R1JhjZw7DC7lI:kztO/qAj3Zp9zs8sDmEFaRE5R1JRZF2","tlshash":"cb13c78c79c3f0a996536bf142ff060de33e3b41652de110da81e0da695859ce632f6e","first_seen":"2026-01-04T01:11:05.452599Z","last_seen":"2026-01-04T01:11:05.452599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/KslTE9ffYhV73QO4Mmr67/_buildManifest.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/KslTE9ffYhV73QO4Mmr67/_buildManifest.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"1353-19a016c5207\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRb4%2B7A5y5Gu0JoQ3UMvC6pa4ALwQrZllYZRnVgdmNDbIHGN%2B8vtpaUp4RAX9vvTJf8rxvdKTH5HRG1f63NrNdvfrZK86EkZDnFU\"}]}\r\ncf-ray: 9b86db4c2b837130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4947,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4947), with no line terminators","md5":"3ce797b62d29f426e753fd4813a19024","sha1":"c9d61b5dac756c962993204c39216ca782ea211f","sha256":"45aa95d9d2dd8f6dccb2b9888fff8caf0847b95c4cf62b08516e99dfe101f412","sha512":"b10559e70e16a45d2666dc9c1749d0044ee5b1cbe6a839ad06681352e1a45b86042d03be7eba82001e2b14a4ac1661b9e72bb2ff75a716808ab49849e416104b","ssdeep":"48:n8D49NbAj8cfsSgQWL8M3afYuiWSESbNBi50oG07Q+5mhSPyQ8woIwPiSK:8MEj8tKTJYnqGoVZyQ87IZ","tlshash":"0da1bed3395af92c0b7affc43fb97f296b941020e3ed297b425e54a90990530cda4715","first_seen":"2026-01-04T01:11:05.453529Z","last_seen":"2026-01-04T01:11:05.453529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T01:10:30.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Next.js\r\nvary: Accept-Encoding,Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiPC1yld9%2FICNE58w3jvlbxfNNPvHfW%2FdqSP9aDs2twNhGpMdTNSgNz02ACNbYC7%2BsOOYH%2Bdp%2Bji9SG2i2dMIVxcV%2B%2B8rtGR%2BmRY\"}]}\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b86db4a0aa77130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":10870,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8605)","md5":"b0348b94b97bec4b6f9068fece1ee6b1","sha1":"739cc6df85c78ac348533fb3523636007dc93812","sha256":"77fd8819e89eb79a5e89b5071ce51e2bb9f7d48adc61dc009afd6dbe0feeb947","sha512":"e15c308db8d94666b5a69458725adab7e2f7ad45898f79aa09cad2e9eed0b90ee8c470576cdfaf22c1364fc867ded8cf6ee823af025be8b5ed711e40204f05e4","ssdeep":"192:hjcRcbCtJn+ZbbbmRSwzITH4eKUvBFjwqPxEmpqzLE1QT3NUgS5tWmSRmwKHDm9I:lqETCqPxEmELE1QT3NUT5tWmSRXoSa","tlshash":"cc2230164e85c7442332bd0ab9d967296eedd436e823c58d734ca90f9f43eb98394e07","first_seen":"2026-01-04T01:11:05.454197Z","last_seen":"2026-01-04T01:11:05.454197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":99,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/996731563352964f7a067178f446c2b1aae7c9df.6357db7bef7a1eced876.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/996731563352964f7a067178f446c2b1aae7c9df.6357db7bef7a1eced876.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"bf8d-19a016c51e8\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ei1cxLXz%2B5MI7M1lmosSo8d0ewi9uF0yQg%2FoOICIfzHtTvJuXjE%2BMPvpu1Mxu4fYD0Adph06SbuHW2kjdtvXUJMRcgNrIUGKtG4\"}]}\r\ncf-ray: 9b86db4c1b797130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":49037,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49037), with no line terminators","md5":"9d019cd109833e7a75ea26d932f4af84","sha1":"ef1954826d026f061f337a63d51e76ef7532eec1","sha256":"32fda594140b788782e596f2fd21fd0d829bdcb67099e51c02d1b30e58dc0933","sha512":"f7eabbe9426b0f7938a3824415aca3c985cc7eea1c8adec7229c5ce96c53db39e80ea8f6e0223f6aed6f2715acdb54bbcfb8e1122b2317ef4b1f4bc3e8c8d633","ssdeep":"768:9Ynfqmf2EmYQtQOkn5wLSzTDen+FbHBf2b/oIeSRSFvr8dkCZK50gJkWl:9YnfqxEmPMwmzTDenAbhfq/oIFer8dkB","tlshash":"97233a8d71c5f0a00b936bf546ff244af33a2919d50aa450f796c4ca3f6968c6223f5e","first_seen":"2026-01-04T01:11:05.455002Z","last_seen":"2026-03-08T04:25:51.705305Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/media/CorsicaLX-Regular.e232be33b6505e8db81d2330e6451dbd.otf","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/media/CorsicaLX-Regular.e232be33b6505e8db81d2330e6451dbd.otf HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay.kassa.shop/_next/static/css/b1056ee1c97241406247.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: font/otf\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"2983c-19a016c51d6\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUNz4k%2BCWPtQFvGrsxw9cf8rBOtaByP66DxIED8T%2Bb59ZsNDPaJJWuDK%2Bgq5%2BYrM3Qe4OsmdpqmJanidkhCv2zFBadXIx6uzx2oB\"}]}\r\ncf-ray: 9b86db4cfc057130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170044,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"6abd826b4aa924ad5ea38bd5228760a7","sha1":"e0fbff5d61825ff3e5cd85b39d43c935c0d3366e","sha256":"6a090d2d9e8a187777b168ffb25202ada2d1c27a5315f79b6a77ce71745b762c","sha512":"b0eaa12de8f2d08270fb8d975e3d98cbafba04e658bf635f69bc2ce980e8d6161527ae26c1977271fe67b771e2a6f69a3e3ac520b030acbd1e6eab9df3628c9c","ssdeep":"3072:y0QvC4scEp8l6DE1IeYebF7hBpfffDGGj5oAnsRFAS5lVbN:y0QvC/cpIE1IeYOLBJnsrASD/","tlshash":"a9f36b30305be7a1cac6aa7bd4b6cb22e566b81e5bd70c4073b39b498423dd51e47cc6","first_seen":"2025-10-07T15:57:51.913049Z","last_seen":"2026-03-08T04:25:51.691976Z","times_seen":6,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmw.freekassa.net/js/user.min.js","fqdn":"fmw.freekassa.net","domain":"freekassa.net","tld":"net"},"ip":{"addr":"94.228.127.52","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmw.freekassa.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 02:44:36 GMT","end":"Fri, 20 Feb 2026 02:44:35 GMT"},"fingerprint":{"sha1":"E5:19:7E:05:7E:99:2A:CF:25:4E:AB:44:D5:EE:57:B9:DA:E2:A4:6F","sha256":"B1:34:25:1F:1B:86:34:E8:65:D6:14:8B:71:8F:E2:E9:64:34:8A:75:51:EB:4D:27:11:79:A8:64:9F:E8:9F:D3"}}},"request":{"raw":"GET /js/user.min.js HTTP/1.1\r\nHost: fmw.freekassa.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 04 Jan 2026 01:10:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34991\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nEtag: \"687a3829-88af\"\r\nLast-Modified: Fri, 18 Jul 2025 12:03:53 GMT\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, GET, POST, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: *, Content-Type, Authorization, x-public-key\r\nAccess-Control-Allow-Credentials: true, true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34991,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34990)","md5":"237d30925a4733e83a82317750a63742","sha1":"fabc4d695bbb7367caf52c706818959ed2c36da4","sha256":"feba227b6883348e8bb769ac396b1c0660252d02eb477d5c9cf417186a7ce053","sha512":"c0ee87f64430a4a03cc8e83c62eed18cf35c370d793d32825422a02c816fe5f4c0ac1bfae8bb6f65b87a2f96c7aa004b1ba96e63516fb80a2a26696be4f163d0","ssdeep":"768:UGIt8PDOGsuxdS71CdArt47JmY/3/yCOAJpSmvFSg5NG0VkdIdALR04aCo/rV/cp:A6AtSJRiXheJEoy","tlshash":"9bf20898b193b065527328ea403ba101f13a6d64341ac493e27e5dd73c77a6b9237fbc","first_seen":"2025-09-30T17:46:06.761759Z","last_seen":"2026-04-14T05:10:05.50375Z","times_seen":12,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":97,"dns":4,"connect":40,"send":0,"wait":78,"receive":3,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fmw.freekassa.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:32.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pay.kassa.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402947\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-04-20T13:13:16.47381Z","times_seen":49372,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":123,"dns":2,"connect":15,"send":0,"wait":16,"receive":72,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08","date":"2026-01-04T01:10:33.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 08:14:23 GMT\r\nexpires: Sat, 02 Jan 2027 08:14:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 147370\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T15:09:29.251043Z","times_seen":756669,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":77,"dns":0,"connect":28,"send":0,"wait":28,"receive":35,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08","date":"2026-01-04T01:10:33.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Dec 2025 08:03:23 GMT\r\nexpires: Mon, 05 Jan 2026 08:03:23 GMT\r\ncache-control: public, max-age=604800\r\nage: 493630\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-23T15:08:32.486657Z","times_seen":567687,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/css/b1056ee1c97241406247.css","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/css/b1056ee1c97241406247.css HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"2baf-19a016c51f5\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRVhBl%2F%2Fffh21DfSm3g%2BVjEEJpoLpk4XFWEnlSJWxsnFuQJN9IjeJF%2FFu6Ld5vr6U5aigAp94ScuPghmrC4r8K7E2YiglHImf0fe\"}]}\r\ncf-ray: 9b86db4c0b697130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":11183,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11183), with no line terminators","md5":"6f3555a0a62b7cfbca06eb888e4eeb87","sha1":"d67540812dbf835bc12a2a36a563c06fe56f8594","sha256":"dc029a62a7c26d487c0f644726baa3a5ca3ad4cf1b18c0ef3a612bbed3bc6f48","sha512":"dd3943e7243c454d03880d2142a7914537751fb5bfc69d7af476cb33e20fead75c01d7cf229f4f536381835cc6dd2a4d2d1d5f5b41f60a708a93edd2d6015ac0","ssdeep":"48:CEi6X6/666D6CA6CBRKM0i6EirwliCuT6q6C6Rga6CRN616wauLGSAA4hu2ZmpX4:CaoOufR26e4h8RU4/zRt17xQ0pJ6","tlshash":"7e3282205349301ae837cc666dd0bbc67078b035f46abf26f46951198dcf0293bdda96","first_seen":"2025-11-11T18:22:40.843243Z","last_seen":"2026-03-08T04:25:51.726647Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/8050e1a2.d528938cd932329180ae.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/8050e1a2.d528938cd932329180ae.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"23496-19a016c51e6\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2B1Fk2j1XBZ4wMsmj8fG8WE2xYXgoPRd%2B0UuMDJiY7co4Rs0dksxdD%2FVzl1U8xjb9Pfga1Hgickw9KklsFP9mIQx67UHuUqejVZu\"}]}\r\ncf-ray: 9b86db4c1b707130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":144534,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e6ab8b65be0a5760f6e53e10953260f9","sha1":"db4d5f332b6d97bcaaff74b5b2cb1c25f3b832a9","sha256":"019202a9efef2c8d132240d8dcd45a66f4e9452a06e094b732fe7bf5032b9723","sha512":"80e161e23ed7739f0aa15640cb565a1386868633cbf4c24adf779751a09c5a88fa24a7beaecf7cf4c7cff9f72a28b1f0a97eede265b885f216bd8eae311269bc","ssdeep":"1536:Ttffm8642Wo2bBGrcjZxckvKlF6ht1f48OFOwvvtUKpw3FsptCQP11RJqsbRPXoR:5RKlF6ht1fiNbC","tlshash":"15e354f374175df28faaa16fdf41b6e4a279001ae5c46c0ffaad9489032127d170299f","first_seen":"2026-01-04T01:11:05.460291Z","last_seen":"2026-03-08T04:25:51.751147Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/2654ee894080236e322bc999fe5c9fa24702d621.cf3866627fa6bdd6d649.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/2654ee894080236e322bc999fe5c9fa24702d621.cf3866627fa6bdd6d649.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"13b3b-19a016c51ef\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOLDSEcNx7%2FYdiozUIW7ZCxFvuImZrCyJGeuYI2xKzKpeD38UsGjG016PJpvYhDPGGxyykzrZ8YOg9C87VexfBR%2BFu%2FGamaNBgdL\"}]}\r\ncf-ray: 9b86db4c2b7b7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80699,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1ae8a7741143c5d7a748a728e6c3354e","sha1":"20d1941692937ccb9bf5d9ce38c3dd3f2d6c8f35","sha256":"61c40f04ef2f25d328678bd6c20d4256580dd904cf00d3442e90fd28e087f9c8","sha512":"3f64c26b670063ca566aea45c2c1b326263355c7fb68b766e3d8e52fcc6407cc16f26147115a0f150dd91c32277de8d010b98c9ffe53bfaad4fc7a03d45c8799","ssdeep":"768:teOTxKXSgVZ30AhsmulwlsQulcoEFeCRovCb+Msb0jebCRjA3kHqJ/+Smi5HxoRE:tPxo4zb0bRjA3kHS/ZjOQYaIU","tlshash":"1c73078c71c3b1854f8362a610bf220ef33a6946544ce414e972e9c5bda4e9da3b7f35","first_seen":"2026-01-04T01:11:05.461141Z","last_seen":"2026-03-08T04:25:51.699461Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08","date":"2026-01-04T01:10:32.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42555\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:30:09 GMT\r\nexpires: Wed, 30 Dec 2026 09:30:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402023\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e1e7ef5663f5b92b4516b94446dde2c","sha1":"e986dbaced4170ab6fd5852aa806ba6ed1e8cc14","sha256":"f71a14f41c5875c258dcece1dddf55d50a26b8e5bfb626ea07b948551f40fcad","sha512":"5ef4991a1755e9cdc4d2497050219de08745fb473b7d945f52abf572ae921472a64cba48a5bcd590a0ed63f3f4ae9c456d77db584b8637b65b03a5b45fe5c7f8","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOuLX1","tlshash":"dc838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2025-12-11T19:34:34.541785Z","last_seen":"2026-04-20T08:16:14.603777Z","times_seen":44143,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfphFoaAAAAAEEmDvqIxq0DHDoQrIf-rQSa9nCB\u0026co=aHR0cHM6Ly9wYXkua2Fzc2Euc2hvcDo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=527mqk570r08","date":"2026-01-04T01:10:32.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402947\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-04-20T13:13:16.47381Z","times_seen":49372,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/framework.959af5fe4cd273f86223.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/framework.959af5fe4cd273f86223.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"20dca-19a016c51e5\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWgEg6hgvdr67SCCfQ%2BntGqpTut6mlA3Q2wdtwpRTa3SdxDLBE76YoApSmWQaWxI8L%2BUX5i8WW50fifDSj13LLY07F1PkyZuObt4\"}]}\r\ncf-ray: 9b86db4c0b6d7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134602,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a82d3e96be6dca7aed4a792c087b759d","sha1":"e878c79cebd6863dfcc4c5b28f27c41fd87a0567","sha256":"9ac69b51ece1a144d682c615213b974f93cdd042857006ba7eb3c433502cd461","sha512":"12057d2652af9770c5d59cbf1760c5b8473ab240b661e8955bdd0ab3b26e46c84a8a8ae3ba8bd045d51a1a9b90471966c3227d056e1f57aef9f6065effe2cfa9","ssdeep":"1536:zvnhef/ubIDJCZFqEKFSuSP19XzgMYi+Zjrzbzo61gug:zPhef6fXL+Rzbzo61+","tlshash":"0fd308d93992f5216bf311b7109f1807733d1a1b280c4960a212eedeb5fd45ea12bf9e","first_seen":"2026-01-04T01:11:05.462407Z","last_seen":"2026-03-08T04:25:51.722843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/cf6d1ced78dbe2671f35d2b3c9178c5bcc14e120.257c4ee0b00635143533.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/cf6d1ced78dbe2671f35d2b3c9178c5bcc14e120.257c4ee0b00635143533.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"f7d6-19a016c51e7\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwWuPujUUhZ5N5Ngxc2wtTJWdJ7Ke5kJoYXq3xYp6Knrm947e3cBXDuyQ83jgebyObUheGIfGptSIFCtcXWRik2U%2FfSe0%2FHuqG8Y\"}]}\r\ncf-ray: 9b86db4c1b737130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63446,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (63446), with no line terminators","md5":"6619fbfe9ff500d0eb27383c229bfce9","sha1":"9203dea0fd04c80a99664fd4bccab4d410b8860e","sha256":"a18364069829ffa8f4fc5db9595110d54d7105a4a52e4290c690c30cd1ccb61c","sha512":"a5ce58cda8399fc9a66d5bfd60f815d758184c9cc1fc66d0561fd46d863045a9b4f33fd76e1963fa92517f4e08ec19ab23dc2a7dca96f16eedfa988fc58917b5","ssdeep":"1536:QRvVQ1LpYUfdODvHyfkHzpBHyLaSKHBO1Wfjm:DYdyfMzpCaSKH4","tlshash":"5c5396c8b7c6f46953636460443f5407f2bb9ea8b04ec0d8e276d4dab8b954e9063f39","first_seen":"2026-01-04T01:11:05.463162Z","last_seen":"2026-03-08T04:25:51.730739Z","times_seen":2,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.kassa.shop/_next/static/chunks/pages/index-a3133b90d244d6053d25.js","fqdn":"pay.kassa.shop","domain":"kassa.shop","tld":"shop"},"ip":{"addr":"172.67.70.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay.kassa.shop/","date":"2026-01-04T01:10:31.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kassa.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 00:51:49 GMT","end":"Mon, 30 Mar 2026 01:51:31 GMT"},"fingerprint":{"sha1":"7E:39:08:03:1D:FB:75:60:19:72:40:33:62:98:0C:50:4C:25:92:7D","sha256":"6E:3D:C5:05:92:A0:BD:AA:F4:69:DF:BF:15:2D:52:78:24:BC:0A:73:2E:A0:45:18:A2:F2:2F:AA:24:D3:AD:7D"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-a3133b90d244d6053d25.js HTTP/1.1\r\nHost: pay.kassa.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 01:10:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 211\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Oct 2025 11:41:07 GMT\r\netag: W/\"115-19a016c51ff-gzip\"\r\nvary: Accept-Encoding,Origin\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' *; default-src 'self' data: wss: int.freekassa.net fk.money mc.yandex.ru mc.yandex.com fpnpmcdn.net cdnwbstts.com *.hcaptcha.com *.fptls.com *.cdnwbstts.com *.fpjs.io *.fpapi.io *.youtube.com finana.io fokusdoom.ru pay.finana.io *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com freekassa.ru freekassa.com *.freekassa.ru *.freekassa.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src 'self' blob: mc.yandex.ru mc.yandex.com mzm.fk.money fmw.freekassa.net fmw.fmt.me fpnpmcdn.net fokusdoom.ru hcaptcha.com *.google-analytics.com *.google.com.ua *.gstatic.com *.googletagmanager.com *.google.com *.jivosite.com *.freekassa.ru *.freekassa.com *.googleapis.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *googletagmanager.com *.jivosite.com *.google.com.ua *.freekassa.ru *.freekassa.net *.freekassa.com; font-src 'self' data: *.gstatic.com 'unsafe-inline'; style-src-elem 'self' data: *.jivosite.com *.freekassa.net *.kassa.ai *.googleapis.com *.freekassa.ru *.freekassa.com 'unsafe-inline'; base-uri 'none'; form-action 'self' *; style-src 'self' *.googleapis.com *.freekassa.ru *.freekassa.com *.googletagmanager.com *.jivosite.com 'unsafe-inline' ; style-src-attr 'self' *.googleapis.com *.freekassa.ru *.freekassa.com freekassa.ru freekassa.com 'unsafe-inline'; connect-src 'self' data: wss: wss://cdnwbstts.com fmw.fmt.me mzm.fk.money newassets.hcaptcha.com checkout.paythrone.com mc.yandex.ru cdnwbstts.com openfpcdn.io api.fpjs.io tls-use1.fpapi.io *.fptls.com *.freekassa.net *.freekassa.ru *.jivosite.com *.google.com *.google-analytics.com\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://freekassa.ru\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBbb2ueC7UcUGAYIPogo2zvXc8tIoT%2B0V7cqlbeyzO7%2BwLK7BAd2lCvU%2FPl1grpzM9sSfHd1QVzALck2Hq5EyGPaGOTJWOLB0Zfu\"}]}\r\ncf-ray: 9b86db4c2b817130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"8135831f27bd26f8fe046aa4813cbf73","sha1":"1311019e27d163eb4ed7a6c8f5e05659f6a6278a","sha256":"54ed15c99adcce9ef5f169bff6f05babfb8faefddf8f655579c77a2251e09fa5","sha512":"95f17207c7f7e48f521ac86f432b2ca14e445f6096325979244d47c7fd615560933ccbffd48c85fed9fc2310708175d4055fde5fb4c3882bfcfb807c3047cf5c","ssdeep":"","tlshash":"edd0c27820a2b8b900ea17a422377ac434e544141d8cad764be090d17e3190fc8219c9","first_seen":"2026-01-04T01:11:05.46413Z","last_seen":"2026-01-04T01:11:05.46413Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}