{"report_id":"94409874-d28c-4d6b-8020-4d39231948c7","version":6,"status":"done","tags":["phishing","tycoon","aitm"],"date":"2026-03-07T03:31:39Z","url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//selz.com/\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20selz.com.","fqdn":"","domain":"","tld":""},"title":"Server Not Found","dom":{"size":7937,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (500)","md5":"cc08b945b80734290c68f8024430208e","sha1":"98b7a3cb86956221817351c6ce2540865d9c54b1","sha256":"0008820d9784861bb7e6eac2e3443bac241fab98bc40bc206233fac7f0cb8d45","sha512":"6fb93a747b0c23df9f38eb702926ca94ec2b07af00eae972931c8609b24612ed78298a74ae8dbe7b6d7ed34ff21b203945ae1418abf633419d10205e89429ca0","ssdeep":"96:rIPfVVItARPy48S8k45USz+45RaIkata89+RzydNAIl9+kex8KdRonI7B1g/M:rIlieRPyfS8LUSZRa2b9wm7I98IT","tlshash":"6ff162a862fa0d2b819386e938db7409bd01d297d35c24e5bf6d44f10fc7d61980f19b","dom_hash":"domhashc59d69afccb598c37df8c553a509577e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T03:31:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]},"summary":[{"fqdn":"link.kiweastu.vision","ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-07T03:31:39.793507Z","last_seen":"2026-03-07T03:31:39.793507Z","alert_count":5,"request_count":5,"received_data":45935,"sent_data":5595,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"selz.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2003-07-25","domain_rank":359667,"first_seen":"2013-08-02T08:25:09Z","last_seen":"2026-02-22T06:16:57.015787Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":517,"comment":"","tags":null,"fingerprints":null},{"fqdn":"middle.frachaijohouyea.pics","ip":{"addr":"172.67.212.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-24","domain_rank":0,"first_seen":"2026-03-07T03:31:39.796184Z","last_seen":"2026-03-07T03:31:39.796184Z","alert_count":0,"request_count":1,"received_data":589,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe3963c9601cb725d5b7a20f20d65605","sha1":"7d8d52c701eeda65238eb927e573bc6ad42d1229","sha256":"c79fefb677396cdcbd70f56851331decc5dca904c07dcaa8e627cf5df78a0f2d","sha512":"fa54e596950131b5a431d57acb17bce6e025d07614253fac4d9543dee9a256da038146058ae2fa3a8ff3dd73df0f238461a3a86d911d689643b37b82456cc352","ssdeep":"","tlshash":"8b41102b614a0c3206da68f374b6b286bd3c690875c0ac548c8c9c4d40ebf85c9ff9c5","size":1968,"data":"","first_seen":"2026-03-07T03:31:44.087566Z","last_seen":"2026-03-07T03:31:44.087566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"421e13ac4174adda6b24e9c36d4d87fa","sha1":"9d817459584b682b14b006b991ee510808015c87","sha256":"fce1e978dae86ddd25332842c791e93ea300bfa23c6d13337caa5b1231ff1acf","sha512":"ea8ccefa8385d34ce6e07a9079e669780e0a95879db790036249626dbff6897f1bc8a1f416c48ab3cf803f9cc253f289b9f21c218ca439fd23c46102e0ba0eff","ssdeep":"","tlshash":"6461f99ff1122636927273b99bb77205ef37853b40c0d628bdac10802fb72992251edc","size":3426,"data":"","first_seen":"2026-03-07T03:31:44.089776Z","last_seen":"2026-03-07T03:31:44.089776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"middle.frachaijohouyea.pics/bytecore~cwmn","fqdn":"middle.frachaijohouyea.pics","domain":"frachaijohouyea.pics","tld":"pics"},"ip":{"addr":"172.67.212.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","date":"2026-03-07T03:31:33.117Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /bytecore~cwmn HTTP/1.1\r\nHost: middle.frachaijohouyea.pics\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://link.kiweastu.vision/\r\nOrigin: https://link.kiweastu.vision\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 03:31:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aO%2BWy2Qz7ATJjN3DtRzKQis0c4lcNE5pOpAVv8yxJFyPGKNziufFa9m7lSfuHdMNpYybcs%2FpP0pfdKPynafQ4Nbl5gvDRpXcn7RxWJHDENhLbNJDoiMC1M3OBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d8687246f52c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T03:31:17.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiweastu.vision","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 14:05:45 GMT","end":"Wed, 20 May 2026 14:05:44 GMT"},"fingerprint":{"sha1":"56:19:41:6D:56:C3:10:01:C2:C0:F0:9F:7E:F1:79:A2:0E:A4:5D:94","sha256":"12:3B:D6:55:01:84:62:9B:74:E8:AE:7A:6D:98:63:88:40:9F:85:04:60:A7:14:5D:F7:A2:5C:84:B4:E6:23:95"}}},"request":{"raw":"GET /pXrOtgm8CsWlBtS8!Z/ HTTP/1.1\r\nHost: link.kiweastu.vision\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 03:31:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUBqW8L1oJeds5%2BkF45IAaBEb%2FEkKz30SYSRkU16Nqk8iS5q%2FcoSZXOjXEnKhTwrXz0z5IaiidB%2B2eELdxfSup4Bi%2FcXankybls%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlBmeXpQYUdEL01uOXlteVFJTU85dlE9PSIsInZhbHVlIjoiWFhLNWVxUXprZWhkNWgrVXBWTjl3N3V1T24wTzM2clhraHFvM3FnTHd2VldKV3FBbjFVMm5Nb09Cb1BWZWtyMGhnUFlLS21UTWV3cG5BbzN0UDBtWlBjQjJlS01ocjdRaWV5TVN4WXRPZ2FjYlZJK2R5eE8veXF0OEJjY01vOXIiLCJtYWMiOiJmNjg1NDU2ZmMxNmE2Y2FjNTVlMWJlMTY4NThmNmFlYmZiODJhMmM3NWRmYjI0NGRjMTE0ZDY1ZDkxYzExMmRiIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:20 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IlQvY1BnSmFVVFhpZW5KQ3E4b0xva0E9PSIsInZhbHVlIjoiUEI1aDVVZklWY0dnblRwYjNXSUFIR2trUkhRS2duWXo4RCtOK0xkYkNFeTJBNVo1SVB5M3VQMG1LWnVzS3FFb3BuR3ZJRkxwQkZ2YUN3ZXkrVkh6b0l4aFFZSUpIVUNXR3EzdVU2OTNqRkNYd2xpMk96QWVnVVBBUU5WMG5EaDEiLCJtYWMiOiI5OTczODI1YTM1ZjY2YWIyZmE0ZTc2YWNmNzQ1YmU0Y2NjMGE4NjlkNWZjYzJjNzIwOGViMzc1ODc1OTQyN2MwIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:20 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9d8686c0d8f132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4698), with no line terminators","md5":"593539c4c6f4d9fa6d6e2e22df0a4b18","sha1":"a1c7109da92618024c74e735a4fc78ad038cc0ec","sha256":"b749f1775e8ba038669f9a564cd315b5e78f4ea8ed77cd3a42fc6473779763c0","sha512":"a4e76e7ad047a38d01ce83108986364219b196190e4979bbf8866c53d8f3f37c4999e50086e1debe68b1e6443b9a4337be1a2b49008dcf85b865cace253735be","ssdeep":"96:1RyaqyLaR3XWV67SfiU2Y8WcDlv0MYSdPiNz:1Ryfu0WV67SJGWcRsMtd2","tlshash":"8ca1c8235311083661dba5e17de1a38af06cc944f9829d6558dc992cc0dff95c9ffac4","first_seen":"2026-03-07T03:31:44.076629Z","last_seen":"2026-03-07T03:31:44.076629Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3594,"timings":{"blocked":35,"dns":26,"connect":1,"send":0,"wait":3517,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"link.kiweastu.vision/favicon.ico","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","date":"2026-03-07T03:31:20.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiweastu.vision","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 14:05:45 GMT","end":"Wed, 20 May 2026 14:05:44 GMT"},"fingerprint":{"sha1":"56:19:41:6D:56:C3:10:01:C2:C0:F0:9F:7E:F1:79:A2:0E:A4:5D:94","sha256":"12:3B:D6:55:01:84:62:9B:74:E8:AE:7A:6D:98:63:88:40:9F:85:04:60:A7:14:5D:F7:A2:5C:84:B4:E6:23:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: link.kiweastu.vision\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBmeXpQYUdEL01uOXlteVFJTU85dlE9PSIsInZhbHVlIjoiWFhLNWVxUXprZWhkNWgrVXBWTjl3N3V1T24wTzM2clhraHFvM3FnTHd2VldKV3FBbjFVMm5Nb09Cb1BWZWtyMGhnUFlLS21UTWV3cG5BbzN0UDBtWlBjQjJlS01ocjdRaWV5TVN4WXRPZ2FjYlZJK2R5eE8veXF0OEJjY01vOXIiLCJtYWMiOiJmNjg1NDU2ZmMxNmE2Y2FjNTVlMWJlMTY4NThmNmFlYmZiODJhMmM3NWRmYjI0NGRjMTE0ZDY1ZDkxYzExMmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlQvY1BnSmFVVFhpZW5KQ3E4b0xva0E9PSIsInZhbHVlIjoiUEI1aDVVZklWY0dnblRwYjNXSUFIR2trUkhRS2duWXo4RCtOK0xkYkNFeTJBNVo1SVB5M3VQMG1LWnVzS3FFb3BuR3ZJRkxwQkZ2YUN3ZXkrVkh6b0l4aFFZSUpIVUNXR3EzdVU2OTNqRkNYd2xpMk96QWVnVVBBUU5WMG5EaDEiLCJtYWMiOiI5OTczODI1YTM1ZjY2YWIyZmE0ZTc2YWNmNzQ1YmU0Y2NjMGE4NjlkNWZjYzJjNzIwOGViMzc1ODc1OTQyN2MwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:31:22 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxsS90lnth1XBXm49a1%2BvoN9%2Frsiwfyqlx5tiVUezC36qK094dQ%2BcBfJLesdAe5Crhk4R0LMhP1rKPMiYeWTVJ1Ych%2Be91YwZ14%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InJIY3dVL3hCN1Y3Y3N4RDBNQXB2VVE9PSIsInZhbHVlIjoiRGFNSU4vMFUvYzV5OVhidDR2a2pQZVFNMmQweGwxWUlVc2NwUUFFZ0VpUmtYWTJrVzJQTzlRNUJSN2tmU0lZZHR6YUxkSDhuKzRxeVJiSHNodTdVRGRkcmRkYkNqRmhrUlBQTFBKWTVHUmNTMWU1TWk3Y2dCTWd6allPL080TmEiLCJtYWMiOiI5MTIwMzBlNDYzNmQ3ODM2YmY5NDgzZGI2YTMwZWJlYTRjNGNmZmQ2YjU1MDBmMTJhNWU2ZDFiZjQ0ZTljOWQ3IiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:22 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IitQdWpNRkg0MkNXVXR1Rit6UHhRYnc9PSIsInZhbHVlIjoiZHI0ZERUV1hpaG5xb2VJbXZLMitMbXlvT1YvdVNwWUxIS3Z2cVc1MnFxQlIvSjJrNThMNkFEY3dBRTAvdmhFZUt2WEtQdS91RkI5RlQ0clRod3dySU9UTW9ia0JBMXFnRlZ2bDk0RUpiTERvcmVYb21tQ1E5WmVueHBvYmlBRlMiLCJtYWMiOiJkZDJmNGE5MDIzZjY4YjA3MzM3ZDY1ZmMyYjlhZGM5MGM0MjJjOTZlNGU3Zjc1MTRhNmQ5M2MxNTE1Zjc3ODdmIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:22 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9d8686d7d8ef76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12780,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (325)","md5":"9f540512f6984caa9a1d67638ea7e70b","sha1":"adba7728d23148c6d28d1023cd8a2855ec140a38","sha256":"7a047dae2b5c66aa2bc542162371129e0a983d073c8d06d20c25c2367f785017","sha512":"aab7e1e6112370a979d38e945d0e7bffd52f3ddc604d1ae0418daad5826bd2e26002fe7f214a1d7f8954f27f645f9d934009f099f81f3603e76ba5508b1e1f7c","ssdeep":"96:7dwbYQr14x1addOkX4OdleisaEZuJGPuItrwt5vuf0tFYnasftsLncDWeHhja/5U:hQGCpxBWsD4asf8cDWeHhjGcdzaP4","tlshash":"ea42b62664f0301355c7c1d07ab2ab4aafb1c207d9078664b7ad1bf2dfa6e44c4b754d","first_seen":"2026-02-10T18:06:35.818173Z","last_seen":"2026-03-07T03:31:44.079934Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T03:31:31.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiweastu.vision","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 14:05:45 GMT","end":"Wed, 20 May 2026 14:05:44 GMT"},"fingerprint":{"sha1":"56:19:41:6D:56:C3:10:01:C2:C0:F0:9F:7E:F1:79:A2:0E:A4:5D:94","sha256":"12:3B:D6:55:01:84:62:9B:74:E8:AE:7A:6D:98:63:88:40:9F:85:04:60:A7:14:5D:F7:A2:5C:84:B4:E6:23:95"}}},"request":{"raw":"POST /pXrOtgm8CsWlBtS8!Z/ HTTP/1.1\r\nHost: link.kiweastu.vision\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 5\r\nOrigin: https://link.kiweastu.vision\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/\r\nCookie: XSRF-TOKEN=eyJpdiI6InJIY3dVL3hCN1Y3Y3N4RDBNQXB2VVE9PSIsInZhbHVlIjoiRGFNSU4vMFUvYzV5OVhidDR2a2pQZVFNMmQweGwxWUlVc2NwUUFFZ0VpUmtYWTJrVzJQTzlRNUJSN2tmU0lZZHR6YUxkSDhuKzRxeVJiSHNodTdVRGRkcmRkYkNqRmhrUlBQTFBKWTVHUmNTMWU1TWk3Y2dCTWd6allPL080TmEiLCJtYWMiOiI5MTIwMzBlNDYzNmQ3ODM2YmY5NDgzZGI2YTMwZWJlYTRjNGNmZmQ2YjU1MDBmMTJhNWU2ZDFiZjQ0ZTljOWQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitQdWpNRkg0MkNXVXR1Rit6UHhRYnc9PSIsInZhbHVlIjoiZHI0ZERUV1hpaG5xb2VJbXZLMitMbXlvT1YvdVNwWUxIS3Z2cVc1MnFxQlIvSjJrNThMNkFEY3dBRTAvdmhFZUt2WEtQdS91RkI5RlQ0clRod3dySU9UTW9ia0JBMXFnRlZ2bDk0RUpiTERvcmVYb21tQ1E5WmVueHBvYmlBRlMiLCJtYWMiOiJkZDJmNGE5MDIzZjY4YjA3MzM3ZDY1ZmMyYjlhZGM5MGM0MjJjOTZlNGU3Zjc1MTRhNmQ5M2MxNTE1Zjc3ODdmIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5,"data":"zone="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:31:32 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tCdqqaWaHauMEI%2FXym6gYXdzAhBgKcBOl87ED1waJF1nm5OVFXFfOsgsDqiAHE67s78hmnxepgML379kqL0mV2CpvynrTk8r1E%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjQvaEw2UisyRzZ1YStFMitWbldvSEE9PSIsInZhbHVlIjoiUmJQWkUrd1NWQnZUOEtRRnMxb3d0UzQ4Y29pTlJnUnRoRHpOaDN3VlpLa2FiMHVhZlp2V21hWjNhRnVzWnFsV05FOHBBdFRhVW5KcUh0VGxCTVp2TDR0M20wQThmOVczWDZwOTF4d1FzNmUxRWF4bmlqcXRDQkc3Q2hGSVBIKzEiLCJtYWMiOiJmYzQ1MjJlOTZkYzZmMDQwNTcwN2M2MWI1ODNhOTdlNTA2NmQ5NDk0OWI4NmE1NmRhM2VjZWMyNzQ5N2M3MWEzIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:32 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjdmUGxNRU5nTStYZGp2OGVLYlFYUnc9PSIsInZhbHVlIjoiUE9JRW1lakhWUnVtb1hEbkMyYktRYTQ4allBMUUxKzU0eXJwbnFTT1JmR0hLZk5qL3l4WDJ5cnk1bGg0eW5EUC9lZXNKWndJS21PcE1scnNuQ2kzUWd3QlV5UWt5UXJkOTNybjk2aVMzM2hvRzYyQTM0MXUyMktHaFFKWDNVRG0iLCJtYWMiOiIxMDViOTMzNDZjODA2ZTQ0YWI4ZDY2YjVjOWQxODg4NGFhMzI2NGQzYzI0ODUxYmJiODhjZmQ5NDY1ODU1ZjZhIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:32 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9d868719cf3476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"7828f7ae07241c0978ce44e5cc4a0a83","sha1":"a9c93817a15b03507c3c21021fba863d3ac62b7f","sha256":"a65713ab569fbcda76f7d8cd7827b5cc51b58eb5d1b03b50c91924ba9c785fd9","sha512":"3bb6311f102cc50b6e8f2d2739185b17fb0715f94d0100cb7636c76e59e79dd2bbb58046e0e13679efc7c1b92696e68b09354010992d96af34399577f443ab39","ssdeep":"","tlshash":"69b002df0c4182453af211129a537359357350eb1804f05255515510756cb8f972fdde","first_seen":"2025-06-23T00:01:47.918545Z","last_seen":"2026-04-04T03:19:30.938476Z","times_seen":40963,"resource_available":true,"data":null}},"time_used":1119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T03:31:32.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiweastu.vision","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 14:05:45 GMT","end":"Wed, 20 May 2026 14:05:44 GMT"},"fingerprint":{"sha1":"56:19:41:6D:56:C3:10:01:C2:C0:F0:9F:7E:F1:79:A2:0E:A4:5D:94","sha256":"12:3B:D6:55:01:84:62:9B:74:E8:AE:7A:6D:98:63:88:40:9F:85:04:60:A7:14:5D:F7:A2:5C:84:B4:E6:23:95"}}},"request":{"raw":"GET /pXrOtgm8CsWlBtS8!Z/ HTTP/1.1\r\nHost: link.kiweastu.vision\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjQvaEw2UisyRzZ1YStFMitWbldvSEE9PSIsInZhbHVlIjoiUmJQWkUrd1NWQnZUOEtRRnMxb3d0UzQ4Y29pTlJnUnRoRHpOaDN3VlpLa2FiMHVhZlp2V21hWjNhRnVzWnFsV05FOHBBdFRhVW5KcUh0VGxCTVp2TDR0M20wQThmOVczWDZwOTF4d1FzNmUxRWF4bmlqcXRDQkc3Q2hGSVBIKzEiLCJtYWMiOiJmYzQ1MjJlOTZkYzZmMDQwNTcwN2M2MWI1ODNhOTdlNTA2NmQ5NDk0OWI4NmE1NmRhM2VjZWMyNzQ5N2M3MWEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdmUGxNRU5nTStYZGp2OGVLYlFYUnc9PSIsInZhbHVlIjoiUE9JRW1lakhWUnVtb1hEbkMyYktRYTQ4allBMUUxKzU0eXJwbnFTT1JmR0hLZk5qL3l4WDJ5cnk1bGg0eW5EUC9lZXNKWndJS21PcE1scnNuQ2kzUWd3QlV5UWt5UXJkOTNybjk2aVMzM2hvRzYyQTM0MXUyMktHaFFKWDNVRG0iLCJtYWMiOiIxMDViOTMzNDZjODA2ZTQ0YWI4ZDY2YjVjOWQxODg4NGFhMzI2NGQzYzI0ODUxYmJiODhjZmQ5NDY1ODU1ZjZhIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:31:32 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnfP7GdM36ZKafKAZXWnOC5txuxs%2B9nPTrEw4N0gEP1bwRkPe5%2F9EbV3N45iF6haLDpmDdH5hXod11uR7YqaLqDTSgma%2ByCNIG8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjFtWEpuV0F3Zlo3N21LaDMxays1NlE9PSIsInZhbHVlIjoib3A1RmdMYlhlR0lWdWNPWUN1WjFmZmpETHhFZFliR1JJb1ZDUmVTRS9hQS83M0JyV1NQRUY3ZENTcmNpNFBhSmhVZjJuMWlFcGh4ck9USkx3UVk4S2QyZUoyRzBlcmw2dzBkMFhpTWIzL2xON2c2djJtOEpXdUZOTlI1MnlTMHciLCJtYWMiOiI5YjAzN2ZhMWNiMmE0Y2IwN2VhYzk3MmMzNjM4OTI4ZDY3NjhjMTk3ZjcxMjZlODcxMjJkYjJlYjA4Nzg2OTAxIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:32 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImNNWkJoT1hjbTd5eUR0MDNrQ0hLZkE9PSIsInZhbHVlIjoiVHlOcVl1R3dqbFYwMlZXcTROb09NQXZXUkp4c1ZyZnNiMC9mM3BNazgxdC9iek1hSnJUZDFDUlZMOUZSSVdaZDhaeWpDdDRvZFI3b2EzdkJHd2pEVUVseVlUdXpPNkNpV01OcTYyVWxhQk9vZVpXSHNNOEZXMHUzbFFSZ0lLV0giLCJtYWMiOiJiYjE2MjRjNTI0YjRkMDAwYzExOTFlZTI2MWEyNmJmZmE3YTlhMDAxMmIxYWEzNWRmODc2ODg5YjcxMjMzN2FlIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:32 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9d8687210fd376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6006,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6006), with no line terminators","md5":"27a66a58059f1c98809c91f1a7b2a845","sha1":"4550e00f1ce73bae05973ef9e07482263f898e8b","sha256":"833cc71e7dd2126684686e0eb45362b5961b412cd1486ac17f4ea6a6dc226db2","sha512":"779b12db3c1d1a8a2dd9e0175150e0f031bbf4fb55542482b3a05dffa957d1c5d78eca840460e8a89c26712297ac5fd551222f4f5c481de9da90329d826943da","ssdeep":"96:sYdkuR+AS+xsKkm6ckMJaM2mKboFdwyLTSmgksXkkG1y9e9:T2uRo+OKWMUmKkiCgks0rSe9","tlshash":"03c17dcec1185471587a6ed12ea7a11258ffd0003114ecfea61f9d9404ada7ed09fafc","first_seen":"2026-03-07T03:31:44.083864Z","last_seen":"2026-03-07T03:31:44.083864Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"link.kiweastu.vision/favicon.ico","fqdn":"link.kiweastu.vision","domain":"kiweastu.vision","tld":"vision"},"ip":{"addr":"172.67.173.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/","date":"2026-03-07T03:31:32.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiweastu.vision","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 14:05:45 GMT","end":"Wed, 20 May 2026 14:05:44 GMT"},"fingerprint":{"sha1":"56:19:41:6D:56:C3:10:01:C2:C0:F0:9F:7E:F1:79:A2:0E:A4:5D:94","sha256":"12:3B:D6:55:01:84:62:9B:74:E8:AE:7A:6D:98:63:88:40:9F:85:04:60:A7:14:5D:F7:A2:5C:84:B4:E6:23:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: link.kiweastu.vision\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://link.kiweastu.vision/pXrOtgm8CsWlBtS8!Z/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjFtWEpuV0F3Zlo3N21LaDMxays1NlE9PSIsInZhbHVlIjoib3A1RmdMYlhlR0lWdWNPWUN1WjFmZmpETHhFZFliR1JJb1ZDUmVTRS9hQS83M0JyV1NQRUY3ZENTcmNpNFBhSmhVZjJuMWlFcGh4ck9USkx3UVk4S2QyZUoyRzBlcmw2dzBkMFhpTWIzL2xON2c2djJtOEpXdUZOTlI1MnlTMHciLCJtYWMiOiI5YjAzN2ZhMWNiMmE0Y2IwN2VhYzk3MmMzNjM4OTI4ZDY3NjhjMTk3ZjcxMjZlODcxMjJkYjJlYjA4Nzg2OTAxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNNWkJoT1hjbTd5eUR0MDNrQ0hLZkE9PSIsInZhbHVlIjoiVHlOcVl1R3dqbFYwMlZXcTROb09NQXZXUkp4c1ZyZnNiMC9mM3BNazgxdC9iek1hSnJUZDFDUlZMOUZSSVdaZDhaeWpDdDRvZFI3b2EzdkJHd2pEVUVseVlUdXpPNkNpV01OcTYyVWxhQk9vZVpXSHNNOEZXMHUzbFFSZ0lLV0giLCJtYWMiOiJiYjE2MjRjNTI0YjRkMDAwYzExOTFlZTI2MWEyNmJmZmE3YTlhMDAxMmIxYWEzNWRmODc2ODg5YjcxMjMzN2FlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:31:33 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PZDWXUFE5VNHmypzsyOZ8BrHYiBbqq8FlJrubxfVB8cpgTsapBcOv2v5lz%2FOA%2BDx4uZxgXPLEblcjE8c8uhOmD85LU6bDYiTVM%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ikw5Mm55bU9jM0ZqczUvZDF2TlRQU3c9PSIsInZhbHVlIjoiajQ1UFRZOVhUSU01dk5zWVRMOUtrN09kZmhycXZOVEZzdEhqamlqOE9KSHN2Rk1DSm5qTlhXOTdYYm5LU3g1K2pmcDlCbDZRZHBIU2RvWmxTS3hjZkxpT3pGQTZvM2krWnk4NWFiQzcxaDl1MEpKQTlsNjlpeGp4UmlzeTZTVWYiLCJtYWMiOiJjMTZhMDhhZmY5YTU0ZWNhMTIwODE1YTI1ZmJjNTUwZGNhYWI2MWNmMmJjMzcxOWJhNjJiZTgwZWIwZjc5YmE5IiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:33 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImZDZVRtMVhTS1RjNWlZYmNKaVVRQ2c9PSIsInZhbHVlIjoiZFRPMDRuL253enc2ZlVtWElvSVFNVWFSNGtVK2RpcjJrQXdFZHpwQnVWNXoxZEhWSlBwRktMUk5IRHN0cGc2ZXJpMmdhSHJWalFaZUJvQVRzcURyR0cxaDNzTjVXeVpiZFQzUVRYSTI2aWt5VW9TdkNyZWlKcXJteGQ1RTNzUmgiLCJtYWMiOiJkZmQxZmYyYTZmOWMwMDM5MjgwOTM1ZTljYjkzNmI1OTBhOWMxM2VlZThhNDVlNDc1ODgyNTJkZTI3MGYwYjZmIiwidGFnIjoiIn0%3D; expires=Sat, 07-Mar-2026 05:31:33 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9d868723081e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14789,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (328)","md5":"aff8b8dd098ed190d65eb695d5b61b36","sha1":"70194afeace5e0c8be9ebb8a76d13b84a4077268","sha256":"1c267714f730e576adba1dae63d27fb14dd3c652b92df091721286cc00193f04","sha512":"4ea779ad909fe13fce5ca89b53dfa2c1ef3439b82eef20ef6b8e0073cdd0ea32bb68be2b76a2ffb42dcd68f4fc8d35a74e056f2fc8413ce76fda5d68c99fa5df","ssdeep":"192:spQuLlcioV6EtcRtLxjjO4Jap6NfO90I+WhsnzjnTQlzHGdJ4:IRchdc/FjjOZIlO9XYnTQlzHAJ4","tlshash":"d462823674f5312381c381e0baa18b5b7f71c407c80b962176ad69e1df99d94cdbb60d","first_seen":"2026-02-09T15:38:30.979517Z","last_seen":"2026-03-07T03:31:44.086247Z","times_seen":4,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":603,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"selz.com/","fqdn":"selz.com","domain":"selz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T03:31:34.083Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: selz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://link.kiweastu.vision/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}