{"report_id":"96034cb0-65df-4aba-88eb-931e6cd56ec9","version":6,"status":"done","tags":[],"date":"2025-07-14T18:41:41Z","url":{"schema":"https","addr":"caratsite.cc/#/login","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"caratpro.cc/#/login","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"title":"Anmelden"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T18:41:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-07-09T15:48:19.123056Z","alert_count":0,"request_count":4,"received_data":81376,"sent_data":2002,"comment":"","tags":null,"fingerprints":null},{"fqdn":"caratpro.cc","ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-07-14T18:41:42.129469Z","last_seen":"2025-07-14T18:41:42.129469Z","alert_count":0,"request_count":24,"received_data":1321443,"sent_data":10723,"comment":"","tags":null,"fingerprints":null},{"fqdn":"caratsite.cc","ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-07-14T18:41:42.131708Z","last_seen":"2025-07-14T18:41:42.131708Z","alert_count":0,"request_count":8,"received_data":1186294,"sent_data":3626,"comment":"","tags":null,"fingerprints":null},{"fqdn":"carat.feweevwva.com","ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-01","domain_rank":0,"first_seen":"2025-07-14T18:41:42.128286Z","last_seen":"2025-07-14T18:41:42.128286Z","alert_count":0,"request_count":4,"received_data":4096,"sent_data":2016,"comment":"","tags":null,"fingerprints":null},{"fqdn":"carathex.cc","ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-07-14T18:41:42.133196Z","last_seen":"2025-07-14T18:41:42.133197Z","alert_count":9,"request_count":9,"received_data":221397,"sent_data":4059,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v4fuwb.com","ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-14","domain_rank":0,"first_seen":"2024-10-13T12:49:32.510762Z","last_seen":"2025-07-03T10:35:41.67535Z","alert_count":0,"request_count":2,"received_data":1352,"sent_data":952,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mwqyejli.com","ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-09","domain_rank":0,"first_seen":"2024-08-10T00:00:59Z","last_seen":"2025-06-22T12:07:23.205527Z","alert_count":4,"request_count":4,"received_data":1896,"sent_data":2109,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"caratpro.cc/assets/login-270603f7.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa19b6d9ffa21f4296d37796ab2e21b","sha1":"1a48b73721f488e2dcc0a69ee17c0aeac08a7ff4","sha256":"5940ed764314a7b0e4382b4325833b0c4c0a00ea04cb3f12edfd0b61fc01657d","sha512":"edc3099c81099031bfcf4c1be4a51b232a2f3f8c2e889bb4f15812b1336e1d3355477c2c741304fa261d30e564f6f1bb7af48a45e5c7e2cdb686781fa6a878bd","ssdeep":"96:qO19H1pSGFbSslf7i5YQ0nEmhT7eP+IBkBkm/W8qUTlNTXUNQnZr+BVCPYcvKNtJ:qq9H1ptF2slziunEkT7eAkYfqUTzTkN3","tlshash":"5d918329d02a8afac5670aa6795654d0f02c7bbac226c904f3bd09133fd7cf9cb55720","size":4360,"data":"","first_seen":"2025-07-14T18:41:47.880853Z","last_seen":"2025-07-14T18:41:47.880853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-9d2cd837.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cecc00a23123d7b24d7dbd04f838333c","sha1":"267220ac070413bc126fbc842094a38b613046b4","sha256":"a424a96b1b5a2e0469865bad02cfd7c1cf9d15f5c61d5ac6564083949cb9b567","sha512":"bcfe945258c9b92f88170dfcb6c423f64fd6890fa0736709da6bcc2485103b826a0aab7b9309595685955f9d128b164e76818a74133c043b6251f95ddd2244af","ssdeep":"192:0wZB/qgFKp//uSVlkkUzjzsyM22wn8LNoC/7M4S3+8pm2Bz3:VCgFU3VlvUzjzsyMY8RT/7Md+8pmu3","tlshash":"2d12c6c4b5c2a6759beba4c6b0e59021e51c5b44f50e90e2e03f8d102baedc4b96df3d","size":9051,"data":"","first_seen":"2025-07-14T18:41:47.921536Z","last_seen":"2025-07-14T18:41:47.921536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/use-id-b1cd250d.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7defdf566c1fd979d77167a84601c7c5","sha1":"d78f6f148b56a3ecdf31040d3072c4c5bbe8526d","sha256":"04c2c4684f0d387f9bcc454b6a913971598a2696bbf53e632e05de25126d0da7","sha512":"a29add60f498b95ff657673db8d0617467383347b7099fd86bb638294550db9cb90fe4401038cd73cd99d6c4587bc2c6d8af926acc8769002bb8eaca06f6ae51","ssdeep":"","tlshash":"06c08c89745c11f02a0908eae226076a812a7c20232aa9f0f168072705b226a47bae55","size":152,"data":"","first_seen":"2025-07-14T18:41:47.893647Z","last_seen":"2025-07-14T18:41:47.893647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/#/","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d38f284260e382ce5cc08a2185c8e79e","sha1":"b9f96a244cbb8b61d68973bfde209554400ab1a7","sha256":"ee8aecba59146b42d51a5e8846bdbba276d8583ff80270256f754af6e78b1c4e","sha512":"8624673790c02d8da204e2e54f9c2ca9850ffa7941e4f18624fa9f14dc90fda2ed238ebc2a306bc1f1ce8586e5a023af2df69fac87481e0576eaab6be59dbbf2","ssdeep":"","tlshash":"5ef0278a11a3281464f3a0bd4dcf9018b1b9805b254cdf2cbd2d6311ff4561e86fafc5","size":595,"data":"","first_seen":"2025-06-14T07:56:12.305917Z","last_seen":"2026-05-04T16:28:44.401912Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/#/login","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d38f284260e382ce5cc08a2185c8e79e","sha1":"b9f96a244cbb8b61d68973bfde209554400ab1a7","sha256":"ee8aecba59146b42d51a5e8846bdbba276d8583ff80270256f754af6e78b1c4e","sha512":"8624673790c02d8da204e2e54f9c2ca9850ffa7941e4f18624fa9f14dc90fda2ed238ebc2a306bc1f1ce8586e5a023af2df69fac87481e0576eaab6be59dbbf2","ssdeep":"","tlshash":"5ef0278a11a3281464f3a0bd4dcf9018b1b9805b254cdf2cbd2d6311ff4561e86fafc5","size":595,"data":"","first_seen":"2025-06-14T07:56:12.305917Z","last_seen":"2026-05-04T16:28:44.401912Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/assets/index-9c3ecda9.js","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0583b16da785fa363ea16e828f1b1a4e","sha1":"216f0c255d091abc07420fe4574c01e3314f3139","sha256":"e5eb9bcd8fc6ed76d0bd0e453b1026663ea21d6705466ad27a6c2221e2b73b35","sha512":"1157c0bdf22e2c4c2468427372298398ba3e8826fb4cf88792136f00f85ecc9a882b87efec2a0cdcaac71ac75ea02d15d689050d40ec2bc25c1af8ee9f3924e0","ssdeep":"6144:VJ5HCXnVrdgNpyVdtBuUs1mpuIc6XksqISkaMFg2Fx1bKvgKCk9JwE:VzugNpS9uUVc60sqbkazS1bDKCk9JwE","tlshash":"a6a484a4b4c7f4918bc8959524ab2090f2584e833059a5a3dcfccc6bbdf2976c5b7f18","size":478244,"data":"","first_seen":"2025-07-14T18:41:47.910542Z","last_seen":"2025-07-14T18:41:47.910542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1077041ffd72153295301c70bfa43ee","sha1":"176f0fba72a4b910d75185e49f9aa20124fa0ec5","sha256":"9a998ad0f598883d15d1b9093576fa4d667a07224da599dbe248675eb084b719","sha512":"5a2c6034fe1439f14886dfeca2671bf5f72e69edd91f2ea5024d2b4cce6e2691cedb824a92023f7eb9401e4ad0be5068ead63fe6332bae11ab4665b0a45bf5a7","ssdeep":"","tlshash":"86b002f71901456107cf4b653565c39f7d71014f6382600df33c059c8594d715502c75","size":98,"data":"","first_seen":"2025-03-03T03:20:33.945333Z","last_seen":"2026-04-28T17:23:00.622904Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/index-b999148a.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5c15e325f4a67db6cac2e2d4c2d77d8","sha1":"19e1dfd663dc91871ad031ef3d1a2bbae8620899","sha256":"b684223bb53bbf298d784a651ac5b9dc36e61810e82611b0a8b6afdb77e052e5","sha512":"1aba407f3adbe20504e20b5c225f04528a1e7b89dcca24312045cdca4b335451d1e19748c4aa7fdc2a3f6f575fd090736b541497e8746dd768d87d5d21960e21","ssdeep":"768:X+XYSWd2cAKpAZin5y3ozC7Qc5p+pLS5XUahJtphWUCWHGTL0nytWFD+n1UDhR8P:XJNyAEJkP","tlshash":"89d2f9c5b6d2b06243aa20f5407b4806f3399a25748d44e4f16c9cdb3cb650a97bbfbd","size":30410,"data":"","first_seen":"2024-05-15T00:53:40Z","last_seen":"2026-04-28T17:23:00.590185Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/loading-79ceab2b.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"125d2f28c698984b905ae47d871c1de3","sha1":"6392467b94aa096dfff86880216b5ccfb3cdb19b","sha256":"3693965abc5ef4f20dad9072bd427153e842b6b3e34d4da7c35a896953567751","sha512":"4c8873cc9fa7ee2112e236ce44eabee5b193a5159bc3594db040d77a4a973ff033c667856f4b80286003cabf4d04b70ada79d158fafe2d41f98a1ba87218ffa6","ssdeep":"","tlshash":"f0e0684e6481f9fda11b0c4820a9a802a06829f0b3bce888a45d846b729b069924eb20","size":374,"data":"","first_seen":"2025-02-26T18:09:28.956048Z","last_seen":"2026-04-28T17:23:00.598586Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/index-d0961c08.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"137b3aeafeb202e8d2ca33d53613e44b","sha1":"dcc6ebb10e632740e7b7c8a215844e004996593d","sha256":"508de462990aeee01ebc18135a36cb57ea02f83f97bbbde8de2ca052e0dfe91a","sha512":"12b312e4e6225250fd0d9848a40c9a32b7df272b98c8002102f67556658839270bfdf4a25a797f9504190bef910c2459f36d5ba177437a5cbedb095d534384e6","ssdeep":"1536:qKcS3kN2SA8AM0K/6lTIIdFOVhNmupgHCTUejnBVBuu7FlJzytkCFLWha/9NiIus:q83m2j20KSlTdgVTm0fx5V7A8IaFagvG","tlshash":"0a0429e47192746613ba19e6507b000af33e2919380ed4d8f06deceb3e6685941bbf7d","size":173133,"data":"","first_seen":"2024-05-15T00:53:40Z","last_seen":"2026-04-28T17:23:00.610461Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/default-1717d27a.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c4b0d57e52b3fc7b490765de48b9081","sha1":"40162686db14e2a2ccbfebbf9934684606ff4929","sha256":"fa80b0c48928003d2991e14d7ced48b67fc381f324f753be22420b20b8630331","sha512":"d0987d49f0d71cb1f3a24defb04bc5f1e31d90076b71fbf419b7a4ae1122d35053ea103d7e00fcbd1e5408597b8eac028ac42e8e072a57589b70b12cb3c0e401","ssdeep":"","tlshash":"ff01fe9e3081ac779bcf289a21268b82b4551fc57734b88894ac8871b21a90cc19db60","size":684,"data":"","first_seen":"2025-03-03T03:20:33.954636Z","last_seen":"2026-04-28T17:23:00.600481Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-e6bb5d2d.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5c045dd82fde860ca251b8dde48384ff","sha1":"9a5c4b8d89d33570e86477831b9471aea36382f6","sha256":"837ae29a440986b15bbf0340c46cf9da754d34be2dacf551020403cd61aea0a6","sha512":"8586ff8297229fe2d244fcd87d65b3e626d61d425c2d7fe93e8a65008ca8e4ce76cb523f7fc7484d1df2cf52b63b5c3aaa9854d5f81657a7c705355fd9be35ea","ssdeep":"","tlshash":"ae11049d242f53b08953056d2964400af1095bbce26fea91b68f153335e343a5b9f248","size":911,"data":"","first_seen":"2025-07-14T18:41:47.900218Z","last_seen":"2025-07-14T18:41:47.900218Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/assets/loading-cba8aee5.js","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7df34967ad67b9dd1b44a8b5d143450","sha1":"b0817ae81a507646acf42c8710ee866ba62803da","sha256":"f3d466bed714cd037589b623021233b5be1a5a39d3394faf53b87ad3fdeb0cda","sha512":"54a635e1f30deed433d032a675ca4d03026acca7c1dc7257f43625e07271dc7d43a9336bbeb3b1ad6dda3a873fd14c7767382d3281eb826c1c9eb2e67fea3a9a","ssdeep":"","tlshash":"bae0688d2449f8f9a557189830a45a03a0583de537bcf8caa44e803ba5db029924db20","size":380,"data":"","first_seen":"2025-07-14T18:41:47.884325Z","last_seen":"2025-07-14T18:41:47.884325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/?code=YXRmUlkyRnlZWFF1Wm1WM1pXVjJkM1poTG1OdmJRPT1YWFhYWFhYWA==","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d38f284260e382ce5cc08a2185c8e79e","sha1":"b9f96a244cbb8b61d68973bfde209554400ab1a7","sha256":"ee8aecba59146b42d51a5e8846bdbba276d8583ff80270256f754af6e78b1c4e","sha512":"8624673790c02d8da204e2e54f9c2ca9850ffa7941e4f18624fa9f14dc90fda2ed238ebc2a306bc1f1ce8586e5a023af2df69fac87481e0576eaab6be59dbbf2","ssdeep":"","tlshash":"5ef0278a11a3281464f3a0bd4dcf9018b1b9805b254cdf2cbd2d6311ff4561e86fafc5","size":595,"data":"","first_seen":"2025-06-14T07:56:12.305917Z","last_seen":"2026-05-04T16:28:44.401912Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-9c3ecda9.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0583b16da785fa363ea16e828f1b1a4e","sha1":"216f0c255d091abc07420fe4574c01e3314f3139","sha256":"e5eb9bcd8fc6ed76d0bd0e453b1026663ea21d6705466ad27a6c2221e2b73b35","sha512":"1157c0bdf22e2c4c2468427372298398ba3e8826fb4cf88792136f00f85ecc9a882b87efec2a0cdcaac71ac75ea02d15d689050d40ec2bc25c1af8ee9f3924e0","ssdeep":"6144:VJ5HCXnVrdgNpyVdtBuUs1mpuIc6XksqISkaMFg2Fx1bKvgKCk9JwE:VzugNpS9uUVc60sqbkazS1bDKCk9JwE","tlshash":"a6a484a4b4c7f4918bc8959524ab2090f2584e833059a5a3dcfccc6bbdf2976c5b7f18","size":478244,"data":"","first_seen":"2025-07-14T18:41:47.910542Z","last_seen":"2025-07-14T18:41:47.910542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-16331651.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"10e631ee5b30295a32e425eaad4bf268","sha1":"2090a136cfbd59fd2e571bcb5f19b07870bb780d","sha256":"be5e1e25fed0bab3705a5667bb8c75401817d35dc9283819ac094af6dab4c589","sha512":"e3cde714c080bb4a754f9a43811e44fa736c5ad06ae681ad9c4e99ab007cab1045059c2f900aa8fbb5ccdb5e1c2e0cd56a22e1feba8dedcf3285967f0e9096eb","ssdeep":"","tlshash":"18f00e7d700cf7b224470c6cf214d10352051b8c0b3ae0e0e262803a07c60ffb22db98","size":518,"data":"","first_seen":"2025-07-14T18:41:47.902286Z","last_seen":"2025-07-14T18:41:47.902286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"carathex.cc/cdn-cgi/rum?","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:22.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 658\r\nOrigin: https://carathex.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\naccess-control-allow-origin: https://carathex.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 95f327638be256be-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v4fuwb.com/d.json?time=1752518479093","fqdn":"v4fuwb.com","domain":"v4fuwb.com","tld":"com"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v4fuwb.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 20:45:35 GMT","end":"Mon, 29 Sep 2025 20:45:34 GMT"},"fingerprint":{"sha1":"CA:70:87:F9:BE:AC:46:27:E0:8A:FE:CC:9D:53:37:7C:5A:EE:FF:DD","sha256":"75:AB:62:56:10:B0:B0:93:DB:FD:41:5E:17:E4:18:6F:0A:BB:96:8B:BE:1C:94:A8:23:8B:B0:D9:C9:07:F6:EC"}}},"request":{"raw":"GET /d.json?time=1752518479093 HTTP/1.1\r\nHost: v4fuwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://caratsite.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:19 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 09 Aug 2024 03:55:47 GMT\r\netag: W/\"66b59343-116\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f3274f4f8e56c9-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"56fc7eb82f81d0b4b3365764b78de40a","sha1":"2891e19c1439f7d18168da78a72e7963c423b6e3","sha256":"3c865442a40cb2d25a44158f9471d8d5b4dde1962c20f52b268f2c32e76b588c","sha512":"58be9b2eaaf067ec3aa917acf5642e3ffa95882c2f4167d2837d2a432985e1e07bea166bb9ca29247c7cd76bb6f63ad46db34560b4e2bc7c79d29a2e1f94941b","ssdeep":"","tlshash":"c1d02beb3b0c8780b709b3f87044b008ff245558b4740a661021814f818b1e1b243a69","first_seen":"2025-02-26T18:09:28.94746Z","last_seen":"2025-08-08T14:43:12.908894Z","times_seen":41,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":132,"dns":101,"connect":1,"send":0,"wait":213,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwqyejli.com/api/get_entrance_url","fqdn":"mwqyejli.com","domain":"mwqyejli.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwqyejli.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 May 2025 08:41:36 GMT","end":"Fri, 29 Aug 2025 09:41:33 GMT"},"fingerprint":{"sha1":"7A:B5:E5:C2:FE:D5:0C:D1:AC:6C:76:58:88:38:9A:24:96:77:26:FE","sha256":"80:41:80:6A:CB:5B:99:65:3D:0C:AE:0A:E5:0F:2A:6D:7D:67:C7:78:6C:7C:13:35:0E:58:10:D4:60:C4:1F:81"}}},"request":{"raw":"OPTIONS /api/get_entrance_url HTTP/1.1\r\nHost: mwqyejli.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://caratsite.cc/\r\nOrigin: https://caratsite.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:19 GMT\r\ncontent-type: text/html\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f32751c87456b4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":140,"dns":106,"connect":4,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"mwqyejli.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/?code=YXRmUlkyRnlZWFF1Wm1WM1pXVjJkM1poTG1OdmJRPT1YWFhYWFhYWA==","date":"2025-07-14T18:41:22.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327640b6f7129-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/login-12152a3b.css","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/login-12152a3b.css HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-1b6\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327682822b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":438,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (437)","md5":"3e4c55af6178f13e9fcba010809a4174","sha1":"6b461a6b81c38c2bd54d990c02b0f852b6b13d3f","sha256":"12152a3bc77fa814349516ca4b8a6b1c5b76691b3e35c9300b2a589f489b5968","sha512":"098e70ac03c048efec70b45f70159a4cc4af15a431f665075dbd85f80b2087c0c3628731652d21606ef9d5c60b4c554777e0c5be81038085b21a738fba3016f8","ssdeep":"","tlshash":"39f05c57f9cd21904533d3e46960f6bc5d29f39287050f31f700ba710ea20d31226d46","first_seen":"2025-07-14T18:41:47.878413Z","last_seen":"2025-08-03T01:12:44.265927Z","times_seen":4,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/login-270603f7.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/login-270603f7.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/assets/index-9c3ecda9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-1108\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 95f32768c927b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4360,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4351)","md5":"8fa19b6d9ffa21f4296d37796ab2e21b","sha1":"1a48b73721f488e2dcc0a69ee17c0aeac08a7ff4","sha256":"5940ed764314a7b0e4382b4325833b0c4c0a00ea04cb3f12edfd0b61fc01657d","sha512":"edc3099c81099031bfcf4c1be4a51b232a2f3f8c2e889bb4f15812b1336e1d3355477c2c741304fa261d30e564f6f1bb7af48a45e5c7e2cdb686781fa6a878bd","ssdeep":"96:qO19H1pSGFbSslf7i5YQ0nEmhT7eP+IBkBkm/W8qUTlNTXUNQnZr+BVCPYcvKNtJ:qq9H1ptF2slziunEkT7eAkYfqUTzTkN3","tlshash":"5d918329d02a8afac5670aa6795654d0f02c7bbac226c904f3bd09133fd7cf9cb55720","first_seen":"2025-07-14T18:41:47.880853Z","last_seen":"2025-07-14T18:41:47.880853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/assets/loading-cba8aee5.js","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"GET /assets/loading-cba8aee5.js HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/assets/index-9c3ecda9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-17c\"\r\nexpires: Tue, 15 Jul 2025 06:41:19 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f3274e7a4d0b55-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":380,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (379)","md5":"e7df34967ad67b9dd1b44a8b5d143450","sha1":"b0817ae81a507646acf42c8710ee866ba62803da","sha256":"f3d466bed714cd037589b623021233b5be1a5a39d3394faf53b87ad3fdeb0cda","sha512":"54a635e1f30deed433d032a675ca4d03026acca7c1dc7257f43625e07271dc7d43a9336bbeb3b1ad6dda3a873fd14c7767382d3281eb826c1c9eb2e67fea3a9a","ssdeep":"","tlshash":"bae0688d2449f8f9a557189830a45a03a0583de537bcf8caa44e803ba5db029924db20","first_seen":"2025-07-14T18:41:47.884325Z","last_seen":"2025-07-14T18:41:47.884325Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-14T18:41:20.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 14 May 2024 04:01:47 GMT\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=1,cfEdge;dur=199\r\nserver: cloudflare\r\ncf-ray: 95f32755af1a56be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1247,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (495)","md5":"41dca3b82c1b2f2fffc3fad5a1fb43c9","sha1":"05977e3ae703cc44561fac14872845b0837262c2","sha256":"3880e5d21254f0ab3bc4d202c6a255d8fe84abd1572ef50ead304deab7b07d4b","sha512":"79d236ad04645342725084b52245c9a48ca1f4440e7c1c9b7c70dd59d84fd593339fabfc8fa707acfdd87a75433cea5553d895e4b8f05f7e402b2930894e0f35","ssdeep":"","tlshash":"9b21749b4c61441a9356035864f0fa0d3ea69267c30aed807baea0b98f84fd94457a55","first_seen":"2025-07-14T18:41:47.886241Z","last_seen":"2025-07-14T18:41:47.886241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":135,"dns":117,"connect":1,"send":0,"wait":202,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/index-77c92c5a.css","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET /assets/index-77c92c5a.css HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 May 2024 04:01:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6642e22b-2f88\"\r\nexpires: Tue, 15 Jul 2025 06:41:20 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f32757aa4856be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12167)","md5":"363de45a85dffa2f08f15ea3bad3c8f4","sha1":"1411f00c84cc4054aa29809ba7c98c4da14e5601","sha256":"77c92c5a1a825d3cfc9b86175a90ee296e7d02cd466042ba427abaec3de1ec85","sha512":"35640e1a0e63545f7591cbe8fcce6e24b6655b03f24ec87a592969dbef7d2ecec6836745ef038ad87ce1114d671c564864808382e167c315afe3399a3e099939","ssdeep":"192:vbdW9QyQ9QyANTql2sfKZzZLZp3ZDZBZjZrZbZ3ZzZnZ3ZzZjZXZlZvZLZXZXZrY:zQFlFz3V7dVdZ1BRVlZfJ9h597vFVNDO","tlshash":"7d42ca545ba921af7d1bc4f2f97ee349b50f1dc6d231cf6aae2e32b181594d920b3014","first_seen":"2024-04-29T04:15:39Z","last_seen":"2026-04-28T17:23:00.583439Z","times_seen":142,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/favicon.ico","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\nexpires: Mon, 14 Jul 2025 21:41:20 GMT\r\ncache-control: public, max-age=10800\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327591c7656be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-22T23:58:26.548482Z","times_seen":315743,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carat.feweevwva.com/api/business_config","fqdn":"carat.feweevwva.com","domain":"feweevwva.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feweevwva.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 22:17:39 GMT","end":"Fri, 10 Oct 2025 23:17:35 GMT"},"fingerprint":{"sha1":"AE:A3:A2:61:F1:CD:C4:30:0A:C0:E3:99:7C:E3:62:90:49:99:4D:42","sha256":"F8:C3:0E:7C:58:39:0C:AF:69:04:1E:D9:93:E4:65:8D:29:0D:34:6B:18:52:89:78:A1:EB:BC:13:A4:9E:B6:88"}}},"request":{"raw":"OPTIONS /api/business_config HTTP/1.1\r\nHost: carat.feweevwva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://caratpro.cc/\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: text/html\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=GZp.SAZ3AWM5eSkUaPS2uhQngz4kp52CTJuM5gSDKek-1752518483547-0.0.1.1-604800000; path=/; domain=.carat.feweevwva.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 95f32768fd690b61-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":139,"dns":103,"connect":1,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/images/login/login_bg.png","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /images/login/login_bg.png HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/assets/index-281f5186.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-62fd7\"\r\nexpires: Wed, 13 Aug 2025 18:41:23 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f327681ff8b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":405463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 390 x 1823, 8-bit/color RGBA, non-interlaced","md5":"1ebc91230187906c80a1f8796a34f45e","sha1":"fd1d46c579d045cc7632f41d5ab96915bd682a81","sha256":"624300c90b49e4f6bff5fb56b08513e1d2b2df8fa050927bb110d012655c1b04","sha512":"8ed467b4d91cc47a3b44ee893f5b6d1a7a98d50c106b3168a145a72ad36525591f65ae5a95dae0eb31f8cede4bec4a1e24226dd457cca9bda66708034681f1d3","ssdeep":"6144:tE5QNCtJTCO+2G/bw7NXKFtaDqNackU35JoGB/y9L0ipsSEyZ7HuCwOYvWn:C59D+9w7N6COHkUpJD0TZzub3vWn","tlshash":"3e8423fc25d91b8afd41f0ca1679488c1596f65738861d775becb1310bc881aa2ff706","first_seen":"2025-06-15T10:57:14.274964Z","last_seen":"2026-04-10T12:19:58.765637Z","times_seen":15,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/use-id-b1cd250d.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/use-id-b1cd250d.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/assets/login-270603f7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-98\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nage: 0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f32769ead7b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"7defdf566c1fd979d77167a84601c7c5","sha1":"d78f6f148b56a3ecdf31040d3072c4c5bbe8526d","sha256":"04c2c4684f0d387f9bcc454b6a913971598a2696bbf53e632e05de25126d0da7","sha512":"a29add60f498b95ff657673db8d0617467383347b7099fd86bb638294550db9cb90fe4401038cd73cd99d6c4587bc2c6d8af926acc8769002bb8eaca06f6ae51","ssdeep":"","tlshash":"06c08c89745c11f02a0908eae226076a812a7c20232aa9f0f168072705b226a47bae55","first_seen":"2025-07-14T18:41:47.893647Z","last_seen":"2025-07-14T18:41:47.893647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwqyejli.com/api/get_entrance_url","fqdn":"mwqyejli.com","domain":"mwqyejli.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwqyejli.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 May 2025 08:41:36 GMT","end":"Fri, 29 Aug 2025 09:41:33 GMT"},"fingerprint":{"sha1":"7A:B5:E5:C2:FE:D5:0C:D1:AC:6C:76:58:88:38:9A:24:96:77:26:FE","sha256":"80:41:80:6A:CB:5B:99:65:3D:0C:AE:0A:E5:0F:2A:6D:7D:67:C7:78:6C:7C:13:35:0E:58:10:D4:60:C4:1F:81"}}},"request":{"raw":"POST /api/get_entrance_url HTTP/1.1\r\nHost: mwqyejli.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: de\r\nContent-Length: 25\r\nOrigin: https://caratsite.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: application/text;charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f327532ab856b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7651e46a12423ad7f21ddfa7fd8776d0","sha1":"bcd93e665abd51e1db6f7ef18b7e44ca0994a5df","sha256":"59f87cfd1b173cd5ad4bfc038a64fa29a3c921de92b9ddbeed72629bdbaf1746","sha512":"3defae038590664b2b663333aa9fa8dacea928c2bf292d06d7f6266774638c2e1ddaa3b5f6b5f213d20513b1f5b1255b8b6cc5ef1550060e5e0de87954ddd0ec","ssdeep":"","tlshash":"4ba022a30fcca3f03338b382000080cc323c8a300eb088ec02b08ee0200fee0238b220","first_seen":"2025-07-14T18:41:47.89605Z","last_seen":"2025-07-14T18:41:47.89605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"mwqyejli.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/cdn-cgi/rum?","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:20.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 639\r\nOrigin: https://caratsite.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\naccess-control-allow-origin: https://caratsite.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 95f327572d900b55-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://carathex.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f32757ca4a5699-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-281f5186.css","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:22.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-281f5186.css HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-3a671\"\r\nexpires: Tue, 15 Jul 2025 06:41:22 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 95f327667d5db4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7fce4be8afe21c0c0bc13a853a0bc3b1","sha1":"86ee416e2e02d3a8f0effb77cabfe2de42524adc","sha256":"281f518648744167146110e7cbe28cc3e00e3f1eb6b4c35af02e563dccada07d","sha512":"58b82d8b5372205a8f47db794793334d0f21d0ae4058c5e86defc5bdbad47ce9fb03dc68b492af4bbed9015bec431cf5a99ec58ae2e20e860dc2c72a0b2cd958","ssdeep":"1536:EzBRXlpVwwsgiOz4lRN5J+jOkiHcplpVwwsgiOz45qGObEZ1Ab5a4zxTVqVoIs:6XX5w9szw+5w9szZnpEs","tlshash":"1834e669aa9091bd7f17f175eb8b96dcf23cf960ed01caa4f10051184ec7bf50623a1a","first_seen":"2025-07-14T18:41:47.897927Z","last_seen":"2025-07-14T18:41:47.897927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carat.feweevwva.com/api/webConfig","fqdn":"carat.feweevwva.com","domain":"feweevwva.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feweevwva.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 22:17:39 GMT","end":"Fri, 10 Oct 2025 23:17:35 GMT"},"fingerprint":{"sha1":"AE:A3:A2:61:F1:CD:C4:30:0A:C0:E3:99:7C:E3:62:90:49:99:4D:42","sha256":"F8:C3:0E:7C:58:39:0C:AF:69:04:1E:D9:93:E4:65:8D:29:0D:34:6B:18:52:89:78:A1:EB:BC:13:A4:9E:B6:88"}}},"request":{"raw":"OPTIONS /api/webConfig HTTP/1.1\r\nHost: carat.feweevwva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://caratpro.cc/\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: text/html\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=LsaVfV3J.TR8NGDY9NCR7xwLUn59xSaMiatdhsj6XJ4-1752518483551-0.0.1.1-604800000; path=/; domain=.carat.feweevwva.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 95f32768fd6c0b61-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":147,"dns":106,"connect":1,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-e6bb5d2d.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-e6bb5d2d.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://caratpro.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-38f\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327683828b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":911,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (910)","md5":"5c045dd82fde860ca251b8dde48384ff","sha1":"9a5c4b8d89d33570e86477831b9471aea36382f6","sha256":"837ae29a440986b15bbf0340c46cf9da754d34be2dacf551020403cd61aea0a6","sha512":"8586ff8297229fe2d244fcd87d65b3e626d61d425c2d7fe93e8a65008ca8e4ce76cb523f7fc7484d1df2cf52b63b5c3aaa9854d5f81657a7c705355fd9be35ea","ssdeep":"","tlshash":"ae11049d242f53b08953056d2964400af1095bbce26fea91b68f153335e343a5b9f248","first_seen":"2025-07-14T18:41:47.900218Z","last_seen":"2025-07-14T18:41:47.900218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/assets/index-281f5186.css","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:18.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"GET /assets/index-281f5186.css HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-3a671\"\r\nexpires: Tue, 15 Jul 2025 06:41:18 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f3274b0d710b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7fce4be8afe21c0c0bc13a853a0bc3b1","sha1":"86ee416e2e02d3a8f0effb77cabfe2de42524adc","sha256":"281f518648744167146110e7cbe28cc3e00e3f1eb6b4c35af02e563dccada07d","sha512":"58b82d8b5372205a8f47db794793334d0f21d0ae4058c5e86defc5bdbad47ce9fb03dc68b492af4bbed9015bec431cf5a99ec58ae2e20e860dc2c72a0b2cd958","ssdeep":"1536:EzBRXlpVwwsgiOz4lRN5J+jOkiHcplpVwwsgiOz45qGObEZ1Ab5a4zxTVqVoIs:6XX5w9szw+5w9szZnpEs","tlshash":"1834e669aa9091bd7f17f175eb8b96dcf23cf960ed01caa4f10051184ec7bf50623a1a","first_seen":"2025-07-14T18:41:47.897927Z","last_seen":"2025-07-14T18:41:47.897927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-16331651.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-16331651.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://caratpro.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-206\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f32768382ab4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (517)","md5":"10e631ee5b30295a32e425eaad4bf268","sha1":"2090a136cfbd59fd2e571bcb5f19b07870bb780d","sha256":"be5e1e25fed0bab3705a5667bb8c75401817d35dc9283819ac094af6dab4c589","sha512":"e3cde714c080bb4a754f9a43811e44fa736c5ad06ae681ad9c4e99ab007cab1045059c2f900aa8fbb5ccdb5e1c2e0cd56a22e1feba8dedcf3285967f0e9096eb","ssdeep":"","tlshash":"18f00e7d700cf7b224470c6cf214d10352051b8c0b3ae0e0e262803a07c60ffb22db98","first_seen":"2025-07-14T18:41:47.902286Z","last_seen":"2025-07-14T18:41:47.902286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/null","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:24.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /null HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 14 Jul 2025 18:41:24 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f3276d2895b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":58288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"b6305f53b4d3432d561eb748f4af25fd","sha1":"e01e5117f6fa0d6b1a82ae3c45839d8097d119b5","sha256":"dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a","sha512":"18f3435e92ce082fc5d52e8c8b3e3186c86bd499afdf405b842d1b0aef771a4d14359bf39d142b591469cc4c4a2016c2f4c6fd646662318cee2ad0f966470b83","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdomx:cmDD6oeFUycwpk06hWp1b99c7Vz","tlshash":"0443021803de40a2cd9978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1ea","first_seen":"2024-05-06T13:26:20Z","last_seen":"2026-07-21T04:42:45.386411Z","times_seen":1913,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/?code=YXRmUlkyRnlZWFF1Wm1WM1pXVjJkM1poTG1OdmJRPT1YWFhYWFhYWA==","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-14T18:41:22.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /?code=YXRmUlkyRnlZWFF1Wm1WM1pXVjJkM1poTG1OdmJRPT1YWFhYWFhYWA== HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=1,cfEdge;dur=192\r\nserver: cloudflare\r\ncf-ray: 95f32761bca8b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1817,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (495)","md5":"425613731788bee7e0616a6bfc862506","sha1":"4e1622ac1531f8395e40bb5cb294c4502d206c89","sha256":"9af23a30ba61f1c213fc3530d8f3f40342830f7abffe52a4165e278ad709c6d6","sha512":"a977f6e6f0417e5da53491dc6e2b633bfa0c40704e4a8b2d5d0d15b4c74e35ed39d6759e717659aa7433e0e0ecbc3896037071078a529ba36adf56aef9a6e882","ssdeep":"","tlshash":"4b31a88b04f21819d162516c58eae5043aea41634208de583e6ea335cf4074dc8fbb85","first_seen":"2025-07-14T18:41:47.904993Z","last_seen":"2025-07-14T18:41:47.904993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":100,"dns":108,"connect":1,"send":0,"wait":195,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/loading-79ceab2b.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET /assets/loading-79ceab2b.js HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/assets/index-d0961c08.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 May 2024 04:01:47 GMT\r\netag: W/\"6642e22b-176\"\r\nexpires: Tue, 15 Jul 2025 06:41:20 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327593c9b56be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":374,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (373)","md5":"125d2f28c698984b905ae47d871c1de3","sha1":"6392467b94aa096dfff86880216b5ccfb3cdb19b","sha256":"3693965abc5ef4f20dad9072bd427153e842b6b3e34d4da7c35a896953567751","sha512":"4c8873cc9fa7ee2112e236ce44eabee5b193a5159bc3594db040d77a4a973ff033c667856f4b80286003cabf4d04b70ada79d158fafe2d41f98a1ba87218ffa6","ssdeep":"","tlshash":"f0e0684e6481f9fda11b0c4820a9a802a06829f0b3bce888a45d846b729b069924eb20","first_seen":"2025-02-26T18:09:28.956048Z","last_seen":"2026-04-28T17:23:00.598586Z","times_seen":108,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/#/","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-14T18:41:22.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/?code=YXRmUlkyRnlZWFF1Wm1WM1pXVjJkM1poTG1OdmJRPT1YWFhYWFhYWA==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=1,cfEdge;dur=191\r\nserver: cloudflare\r\ncf-ray: 95f32764faffb4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1817,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (495)","md5":"a38211cd87c340b7bc1cce3fff52f8fe","sha1":"fce7fc508bf1e1ee1cc9d6d6d3984d55bfa3e66e","sha256":"a3744aece7780daaa3f781a43aafb5a4426fbb3efcc834d66cea33efa9fa9474","sha512":"6d9fc917388a7b036025b8d2e5780af9d6283885e154d5cbd986d012a63ca0c55b8d9b1ab4a524fd6e7af49ef4ea170de1178e480793877ce433f3ee8f2bfb3c","ssdeep":"","tlshash":"c431868b04b25819d262516c58ebe5043aea91635208de587eaeb375cf4074dc8fbb85","first_seen":"2025-07-14T18:41:47.908671Z","last_seen":"2025-07-14T18:41:47.908671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-9c3ecda9.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:22.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-9c3ecda9.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-74c24\"\r\nexpires: Tue, 15 Jul 2025 06:41:22 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 95f327667d5bb4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0583b16da785fa363ea16e828f1b1a4e","sha1":"216f0c255d091abc07420fe4574c01e3314f3139","sha256":"e5eb9bcd8fc6ed76d0bd0e453b1026663ea21d6705466ad27a6c2221e2b73b35","sha512":"1157c0bdf22e2c4c2468427372298398ba3e8826fb4cf88792136f00f85ecc9a882b87efec2a0cdcaac71ac75ea02d15d689050d40ec2bc25c1af8ee9f3924e0","ssdeep":"6144:VJ5HCXnVrdgNpyVdtBuUs1mpuIc6XksqISkaMFg2Fx1bKvgKCk9JwE:VzugNpS9uUVc60sqbkazS1bDKCk9JwE","tlshash":"a6a484a4b4c7f4918bc8959524ab2090f2584e833059a5a3dcfccc6bbdf2976c5b7f18","first_seen":"2025-07-14T18:41:47.910542Z","last_seen":"2025-07-14T18:41:47.910542Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-e6bb5d2d.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-e6bb5d2d.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/assets/login-270603f7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-38f\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nage: 0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f32769dacfb4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":911,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (910)","md5":"5c045dd82fde860ca251b8dde48384ff","sha1":"9a5c4b8d89d33570e86477831b9471aea36382f6","sha256":"837ae29a440986b15bbf0340c46cf9da754d34be2dacf551020403cd61aea0a6","sha512":"8586ff8297229fe2d244fcd87d65b3e626d61d425c2d7fe93e8a65008ca8e4ce76cb523f7fc7484d1df2cf52b63b5c3aaa9854d5f81657a7c705355fd9be35ea","ssdeep":"","tlshash":"ae11049d242f53b08953056d2964400af1095bbce26fea91b68f153335e343a5b9f248","first_seen":"2025-07-14T18:41:47.900218Z","last_seen":"2025-07-14T18:41:47.900218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/assets/index-9c3ecda9.js","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:18.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"GET /assets/index-9c3ecda9.js HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-74c24\"\r\nexpires: Tue, 15 Jul 2025 06:41:18 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 95f3274afd6a0b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0583b16da785fa363ea16e828f1b1a4e","sha1":"216f0c255d091abc07420fe4574c01e3314f3139","sha256":"e5eb9bcd8fc6ed76d0bd0e453b1026663ea21d6705466ad27a6c2221e2b73b35","sha512":"1157c0bdf22e2c4c2468427372298398ba3e8826fb4cf88792136f00f85ecc9a882b87efec2a0cdcaac71ac75ea02d15d689050d40ec2bc25c1af8ee9f3924e0","ssdeep":"6144:VJ5HCXnVrdgNpyVdtBuUs1mpuIc6XksqISkaMFg2Fx1bKvgKCk9JwE:VzugNpS9uUVc60sqbkazS1bDKCk9JwE","tlshash":"a6a484a4b4c7f4918bc8959524ab2090f2584e833059a5a3dcfccc6bbdf2976c5b7f18","first_seen":"2025-07-14T18:41:47.910542Z","last_seen":"2025-07-14T18:41:47.910542Z","times_seen":1,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/images/kf.png","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /images/kf.png HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-75f\"\r\nexpires: Wed, 13 Aug 2025 18:41:23 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f3276bce62b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a0d9bdc3d18c893890c3a827c8df2a6d","sha1":"8f63c684a08b36add6052d340cfabfe9e877ed9d","sha256":"4e82f7bf1fb2374f73c1626c28dc3c6209b73889d1d2cfd4872b6930d455ae29","sha512":"2b346a4f420e707c56dff1e1a97f8bbd97baad6435f31029f87f00c57cf6abd7cdd05ecbbef625fa9bb78009bbaa20f267762c955dfe1a4d5f0ba1c10b0c63bb","ssdeep":"","tlshash":"bf41f9d47eed159bf1a93fd3405801e2482121832189fa49fcca8ec917b8569db95517","first_seen":"2023-11-10T15:57:53Z","last_seen":"2026-03-04T19:07:47.519148Z","times_seen":36,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/cdn-cgi/rum?","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1159\r\nOrigin: https://caratsite.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 14 Jul 2025 18:41:19 GMT\r\naccess-control-allow-origin: https://caratsite.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 95f3274f1b030b55-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-13f30faa.css","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-13f30faa.css HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-38\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327682814b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"530517d28320158ac524ffb0d755e106","sha1":"d6396158c9fbdcfec36e8137d0670e2361524e04","sha256":"13f30faadcbc95fea984cb5c889e3dee8c31eff5b0b7784a074f92ba21444cfc","sha512":"163c2ba217fdc80fb807be96b9a16d0e1f0255c4a8d5e30c6668c21a3a38cb2a122044ae013d9cfa3ec1893ef1e54f7eea62f597c7b7dedeea107eac6c65d682","ssdeep":"","tlshash":"d7900292b08a505a2137d1b8955112b829293145d2444fb8541862f01a421955616414","first_seen":"2025-07-14T18:41:47.915099Z","last_seen":"2025-08-03T01:12:44.236066Z","times_seen":4,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/images/login/logo2.png","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /images/login/logo2.png HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-26b9\"\r\nexpires: Wed, 13 Aug 2025 18:41:23 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f3276bde74b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced","md5":"5b158be31028fb27797d6b6f071c47e9","sha1":"6148f7a1fb6a72ae2caa738f6b2ae14679e92f4b","sha256":"5589361347ff2bc60db14ad919a79dddc204a87c721e40b7da77f7a0dc2b55e9","sha512":"a14ec845f78e9aca5fac802c49be62778923a4af6c9e34b6a8d5d791736f64874fa4310a7f73640712b5d57b87847cd2b2368862c6df6a6feb63f210967d7963","ssdeep":"192:Pr1Wnh1+KxnwVxpDtEIPlh30m5gjLrNRff4i9YxEdtLbb0SiQm:T81+OwVXBEIf0Fj3LffHFboSU","tlshash":"8b12aef6b9391475c06c9e7540847c0b0d93fdf98e005becba1f2463648aab1995e35b","first_seen":"2025-07-14T18:41:47.917671Z","last_seen":"2025-07-14T18:41:47.917671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwqyejli.com/api/get_url","fqdn":"mwqyejli.com","domain":"mwqyejli.com","tld":"com"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:21.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwqyejli.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 May 2025 08:41:36 GMT","end":"Fri, 29 Aug 2025 09:41:33 GMT"},"fingerprint":{"sha1":"7A:B5:E5:C2:FE:D5:0C:D1:AC:6C:76:58:88:38:9A:24:96:77:26:FE","sha256":"80:41:80:6A:CB:5B:99:65:3D:0C:AE:0A:E5:0F:2A:6D:7D:67:C7:78:6C:7C:13:35:0E:58:10:D4:60:C4:1F:81"}}},"request":{"raw":"OPTIONS /api/get_url HTTP/1.1\r\nHost: mwqyejli.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://carathex.cc/\r\nOrigin: https://carathex.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:21 GMT\r\ncontent-type: text/html\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f3275b089c0b06-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":31,"dns":2,"connect":1,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"mwqyejli.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/favicon.ico","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nexpires: Mon, 14 Jul 2025 21:41:23 GMT\r\ncache-control: public, max-age=10800\r\nserver: cloudflare\r\ncf-ray: 95f3276bbe4db4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":58288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"b6305f53b4d3432d561eb748f4af25fd","sha1":"e01e5117f6fa0d6b1a82ae3c45839d8097d119b5","sha256":"dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a","sha512":"18f3435e92ce082fc5d52e8c8b3e3186c86bd499afdf405b842d1b0aef771a4d14359bf39d142b591469cc4c4a2016c2f4c6fd646662318cee2ad0f966470b83","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdomx:cmDD6oeFUycwpk06hWp1b99c7Vz","tlshash":"0443021803de40a2cd9978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1ea","first_seen":"2024-05-06T13:26:20Z","last_seen":"2026-07-21T04:42:45.386411Z","times_seen":1913,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carat.feweevwva.com/api/business_config","fqdn":"carat.feweevwva.com","domain":"feweevwva.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feweevwva.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 22:17:39 GMT","end":"Fri, 10 Oct 2025 23:17:35 GMT"},"fingerprint":{"sha1":"AE:A3:A2:61:F1:CD:C4:30:0A:C0:E3:99:7C:E3:62:90:49:99:4D:42","sha256":"F8:C3:0E:7C:58:39:0C:AF:69:04:1E:D9:93:E4:65:8D:29:0D:34:6B:18:52:89:78:A1:EB:BC:13:A4:9E:B6:88"}}},"request":{"raw":"GET /api/business_config HTTP/1.1\r\nHost: carat.feweevwva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: de\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/text;charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=OQ2L8AFUOjja0KaZubZUH5NPGccEV47ND7SvpkYy8vM-1752518483749-0.0.1.1-604800000; path=/; domain=.carat.feweevwva.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 95f3276a3f0f0b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1304,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (1304), with no line terminators","md5":"786c567af261654b663b21f0bc138271","sha1":"be8b12354e67e2c00a209bdce2229c65857815f2","sha256":"7f97ec6798e6e0c56921f024ab01b219f958638d262e2714358be0245ff4227c","sha512":"f2401ced01af036aed895c4d453c8c8978775b5ab7930be46b0a22963075e4aa4cdf9f44f89243ccf591db16dadca1bdcb72c83859791c237148df03c24bbdaa","ssdeep":"","tlshash":"89215ac353dc7b41fa3e3194d01b36cc8e046889a73405c477da586f576aae24dee228","first_seen":"2025-07-14T18:41:47.919675Z","last_seen":"2025-08-03T01:12:44.24488Z","times_seen":4,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/login-270603f7.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/login-270603f7.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://caratpro.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-1108\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 95f327683825b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4360,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4351)","md5":"8fa19b6d9ffa21f4296d37796ab2e21b","sha1":"1a48b73721f488e2dcc0a69ee17c0aeac08a7ff4","sha256":"5940ed764314a7b0e4382b4325833b0c4c0a00ea04cb3f12edfd0b61fc01657d","sha512":"edc3099c81099031bfcf4c1be4a51b232a2f3f8c2e889bb4f15812b1336e1d3355477c2c741304fa261d30e564f6f1bb7af48a45e5c7e2cdb686781fa6a878bd","ssdeep":"96:qO19H1pSGFbSslf7i5YQ0nEmhT7eP+IBkBkm/W8qUTlNTXUNQnZr+BVCPYcvKNtJ:qq9H1ptF2slziunEkT7eAkYfqUTzTkN3","tlshash":"5d918329d02a8afac5670aa6795654d0f02c7bbac226c904f3bd09133fd7cf9cb55720","first_seen":"2025-07-14T18:41:47.880853Z","last_seen":"2025-07-14T18:41:47.880853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-9d2cd837.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-9d2cd837.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://caratpro.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-235b\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 95f327683831b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9051,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9050)","md5":"cecc00a23123d7b24d7dbd04f838333c","sha1":"267220ac070413bc126fbc842094a38b613046b4","sha256":"a424a96b1b5a2e0469865bad02cfd7c1cf9d15f5c61d5ac6564083949cb9b567","sha512":"bcfe945258c9b92f88170dfcb6c423f64fd6890fa0736709da6bcc2485103b826a0aab7b9309595685955f9d128b164e76818a74133c043b6251f95ddd2244af","ssdeep":"192:0wZB/qgFKp//uSVlkkUzjzsyM22wn8LNoC/7M4S3+8pm2Bz3:VCgFU3VlvUzjzsyMY8RT/7Md+8pmu3","tlshash":"2d12c6c4b5c2a6759beba4c6b0e59021e51c5b44f50e90e2e03f8d102baedc4b96df3d","first_seen":"2025-07-14T18:41:47.921536Z","last_seen":"2025-07-14T18:41:47.921536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/#/login","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-14T18:41:18.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:18 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=1,cfEdge;dur=196\r\nserver: cloudflare\r\ncf-ray: 95f3274879d20b55-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1817,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (495)","md5":"13fc526ff391d1674b60fe01e21aae6e","sha1":"08d1388d70eea2516bb99b78bfc0336d4cb41d1b","sha256":"c1bde542e178d556d60a635ff91b8b7ef1d4df4172a91b130b293de8bd3871eb","sha512":"8bc9ab75567a863b89c730d3fa3c3ae0ca97b3a79d3931c930aa1ae7ab31f11636ced90d8f1c21d03fc9799e8e6dc209463d90ab930c35e0e941bcf7e2a0a531","ssdeep":"","tlshash":"c631888b04f25819d263516c5ce6e5043aea41735208de587eaea375cf4078dc8fbb85","first_seen":"2025-07-14T18:41:47.923439Z","last_seen":"2025-07-14T18:41:47.923439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":64,"dns":40,"connect":1,"send":0,"wait":198,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-9d2cd837.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-9d2cd837.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/assets/login-270603f7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-235b\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 95f32769dad6b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9051,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9050)","md5":"cecc00a23123d7b24d7dbd04f838333c","sha1":"267220ac070413bc126fbc842094a38b613046b4","sha256":"a424a96b1b5a2e0469865bad02cfd7c1cf9d15f5c61d5ac6564083949cb9b567","sha512":"bcfe945258c9b92f88170dfcb6c423f64fd6890fa0736709da6bcc2485103b826a0aab7b9309595685955f9d128b164e76818a74133c043b6251f95ddd2244af","ssdeep":"192:0wZB/qgFKp//uSVlkkUzjzsyM22wn8LNoC/7M4S3+8pm2Bz3:VCgFU3VlvUzjzsyMY8RT/7Md+8pmu3","tlshash":"2d12c6c4b5c2a6759beba4c6b0e59021e51c5b44f50e90e2e03f8d102baedc4b96df3d","first_seen":"2025-07-14T18:41:47.921536Z","last_seen":"2025-07-14T18:41:47.921536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/favicon.ico","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 14 Jul 2025 18:41:19 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nexpires: Mon, 14 Jul 2025 21:41:19 GMT\r\ncache-control: public, max-age=10800\r\nserver: cloudflare\r\ncf-ray: 95f3274fdbf60b55-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":58288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"b6305f53b4d3432d561eb748f4af25fd","sha1":"e01e5117f6fa0d6b1a82ae3c45839d8097d119b5","sha256":"dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a","sha512":"18f3435e92ce082fc5d52e8c8b3e3186c86bd499afdf405b842d1b0aef771a4d14359bf39d142b591469cc4c4a2016c2f4c6fd646662318cee2ad0f966470b83","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdomx:cmDD6oeFUycwpk06hWp1b99c7Vz","tlshash":"0443021803de40a2cd9978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1ea","first_seen":"2024-05-06T13:26:20Z","last_seen":"2026-07-21T04:42:45.386411Z","times_seen":1913,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v4fuwb.com/d.json?time=1752518480821","fqdn":"v4fuwb.com","domain":"v4fuwb.com","tld":"com"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v4fuwb.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 20:45:35 GMT","end":"Mon, 29 Sep 2025 20:45:34 GMT"},"fingerprint":{"sha1":"CA:70:87:F9:BE:AC:46:27:E0:8A:FE:CC:9D:53:37:7C:5A:EE:FF:DD","sha256":"75:AB:62:56:10:B0:B0:93:DB:FD:41:5E:17:E4:18:6F:0A:BB:96:8B:BE:1C:94:A8:23:8B:B0:D9:C9:07:F6:EC"}}},"request":{"raw":"GET /d.json?time=1752518480821 HTTP/1.1\r\nHost: v4fuwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://carathex.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:21 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 09 Aug 2024 03:55:47 GMT\r\netag: W/\"66b59343-116\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f327595b1b5688-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"56fc7eb82f81d0b4b3365764b78de40a","sha1":"2891e19c1439f7d18168da78a72e7963c423b6e3","sha256":"3c865442a40cb2d25a44158f9471d8d5b4dde1962c20f52b268f2c32e76b588c","sha512":"58be9b2eaaf067ec3aa917acf5642e3ffa95882c2f4167d2837d2a432985e1e07bea166bb9ca29247c7cd76bb6f63ad46db34560b4e2bc7c79d29a2e1f94941b","ssdeep":"","tlshash":"c1d02beb3b0c8780b709b3f87044b008ff245558b4740a661021814f818b1e1b243a69","first_seen":"2025-02-26T18:09:28.94746Z","last_seen":"2025-08-08T14:43:12.908894Z","times_seen":41,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":200,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-16331651.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-16331651.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/assets/login-270603f7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-206\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nage: 0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f32769dad3b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (517)","md5":"10e631ee5b30295a32e425eaad4bf268","sha1":"2090a136cfbd59fd2e571bcb5f19b07870bb780d","sha256":"be5e1e25fed0bab3705a5667bb8c75401817d35dc9283819ac094af6dab4c589","sha512":"e3cde714c080bb4a754f9a43811e44fa736c5ad06ae681ad9c4e99ab007cab1045059c2f900aa8fbb5ccdb5e1c2e0cd56a22e1feba8dedcf3285967f0e9096eb","ssdeep":"","tlshash":"18f00e7d700cf7b224470c6cf214d10352051b8c0b3ae0e0e262803a07c60ffb22db98","first_seen":"2025-07-14T18:41:47.902286Z","last_seen":"2025-07-14T18:41:47.902286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/cdn-cgi/rum?","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1221\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\naccess-control-allow-origin: https://caratpro.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 95f3276a2b49b4f4-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/images/home/lang.png","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /images/home/lang.png HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-4edc\"\r\nexpires: Wed, 13 Aug 2025 18:41:23 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f3276bde70b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 16-bit gray+alpha, non-interlaced","md5":"c3a04428c28357adf638a9200198e98f","sha1":"c744606c35f02f27203e36c43bd6224c0977710d","sha256":"85244ed861f70db2c4ae45de55c5d365a649fd3e3f58b437aec81dc69f036cb0","sha512":"04e736f5de493b58bd9e58ddfb795312f1f31bd23112180401864e55c8b41b66019b517dda7023b825afb9c25500d972f6d655e657e1f01feb05e93701198736","ssdeep":"384:cFpve/38+P49B88MerzT8blcqH6zPzxfUKWVGidnNZl8rV:Uv6C9BhX0lcqGVidNIrV","tlshash":"d092e0b3da7ae6f8ad372ac1fce3001bb9140720d66514727520b77336ac56de637980","first_seen":"2023-11-10T15:57:53Z","last_seen":"2026-05-03T10:23:48.673793Z","times_seen":34,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratsite.cc/images/login/login_bg.png","fqdn":"caratsite.cc","domain":"caratsite.cc","tld":"cc"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:19.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratsite.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:24 GMT","end":"Tue, 09 Sep 2025 18:04:23 GMT"},"fingerprint":{"sha1":"3D:10:B3:DF:40:57:00:F3:FC:F2:7F:1E:D1:78:95:9D:6B:40:DD:02","sha256":"43:0F:FC:B4:28:D4:0E:2B:0C:36:CE:25:BD:F0:CE:75:F7:8A:C3:CD:EA:75:36:97:3B:75:5D:F6:BE:88:5E:5F"}}},"request":{"raw":"GET /images/login/login_bg.png HTTP/1.1\r\nHost: caratsite.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/assets/index-281f5186.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-62fd7\"\r\nexpires: Wed, 13 Aug 2025 18:41:19 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f3274e7a460b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":405463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 390 x 1823, 8-bit/color RGBA, non-interlaced","md5":"1ebc91230187906c80a1f8796a34f45e","sha1":"fd1d46c579d045cc7632f41d5ab96915bd682a81","sha256":"624300c90b49e4f6bff5fb56b08513e1d2b2df8fa050927bb110d012655c1b04","sha512":"8ed467b4d91cc47a3b44ee893f5b6d1a7a98d50c106b3168a145a72ad36525591f65ae5a95dae0eb31f8cede4bec4a1e24226dd457cca9bda66708034681f1d3","ssdeep":"6144:tE5QNCtJTCO+2G/bw7NXKFtaDqNackU35JoGB/y9L0ipsSEyZ7HuCwOYvWn:C59D+9w7N6COHkUpJD0TZzub3vWn","tlshash":"3e8423fc25d91b8afd41f0ca1679488c1596f65738861d775becb1310bc881aa2ff706","first_seen":"2025-06-15T10:57:14.274964Z","last_seen":"2026-04-10T12:19:58.765637Z","times_seen":15,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/index-27e78800.css","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/index-27e78800.css HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6862df91-1bae\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f32768281cb4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7086,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7085)","md5":"e8443f35ff17e36f333c4a1dac060c28","sha1":"13588ce1f36602f4b095f68b587c0b6d45b74c57","sha256":"27e788005b6e7838aa0a70c2596897dec75c9672b20b36b3c5055a19f4afce5d","sha512":"bef88b429b5f6101586f56b97ef66e93d10bc235d8a143a5c381771ca9a5549c3f8a3682f53890e2c2352b8ad14b3839bdeaaa4c26b228eec896f22dab653c18","ssdeep":"96:RCpwB02ULbIQ4MbBtqkB72APGReFyKYSge5ytJMkJMXp/MRI:nKF2kyTKYM50TG","tlshash":"b1e15d8eebe8a576df0a79e96746d1e8f278d730cd02d3a2f30055990bc3af61602535","first_seen":"2023-12-06T15:43:58Z","last_seen":"2026-05-04T16:28:44.376614Z","times_seen":51,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caratpro.cc/assets/use-id-b1cd250d.js","fqdn":"caratpro.cc","domain":"caratpro.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caratpro.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:05:17 GMT","end":"Tue, 09 Sep 2025 18:05:16 GMT"},"fingerprint":{"sha1":"74:E2:D8:FD:BC:DB:F5:0C:D6:BC:A9:18:17:D9:D5:99:89:E2:9B:7C","sha256":"AD:D4:F9:E2:49:E4:A0:02:14:0E:C2:A8:20:B9:31:97:5C:70:3A:5F:FD:81:58:50:3A:DE:EA:55:39:A9:69:87"}}},"request":{"raw":"GET /assets/use-id-b1cd250d.js HTTP/1.1\r\nHost: caratpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://caratpro.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Jun 2025 19:03:45 GMT\r\netag: W/\"6862df91-98\"\r\nexpires: Tue, 15 Jul 2025 06:41:23 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327683836b4f4-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"7defdf566c1fd979d77167a84601c7c5","sha1":"d78f6f148b56a3ecdf31040d3072c4c5bbe8526d","sha256":"04c2c4684f0d387f9bcc454b6a913971598a2696bbf53e632e05de25126d0da7","sha512":"a29add60f498b95ff657673db8d0617467383347b7099fd86bb638294550db9cb90fe4401038cd73cd99d6c4587bc2c6d8af926acc8769002bb8eaca06f6ae51","ssdeep":"","tlshash":"06c08c89745c11f02a0908eae226076a812a7c20232aa9f0f168072705b226a47bae55","first_seen":"2025-07-14T18:41:47.893647Z","last_seen":"2025-07-14T18:41:47.893647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carat.feweevwva.com/api/webConfig","fqdn":"carat.feweevwva.com","domain":"feweevwva.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:23.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feweevwva.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 22:17:39 GMT","end":"Fri, 10 Oct 2025 23:17:35 GMT"},"fingerprint":{"sha1":"AE:A3:A2:61:F1:CD:C4:30:0A:C0:E3:99:7C:E3:62:90:49:99:4D:42","sha256":"F8:C3:0E:7C:58:39:0C:AF:69:04:1E:D9:93:E4:65:8D:29:0D:34:6B:18:52:89:78:A1:EB:BC:13:A4:9E:B6:88"}}},"request":{"raw":"GET /api/webConfig HTTP/1.1\r\nHost: carat.feweevwva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: de\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:23 GMT\r\ncontent-type: application/text;charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=pj7pQHa6mrEbTJ_4PcWU33grCPdTXPi.HI_jQZkIoDI-1752518483791-0.0.1.1-604800000; path=/; domain=.carat.feweevwva.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 95f3276a8f5c0b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":516,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (516), with no line terminators","md5":"95ee5c1e97c1130aa582260b1b594d00","sha1":"413bb3f76785ca88c252259e7a3b3d971e69cff8","sha256":"c3efc7abe3ba889752bfeff5ad39ee3ec00bcda6b6bdec20f3f309fe001f493b","sha512":"13be7dc492f2185c5b8b8d05775bc2b6e6a5aef8cef8d0ddb95128d74c38aeee16082273897350f2f5cfec8c1f46d49ae20b177f35add311e2c8dbf14ac7ad91","ssdeep":"","tlshash":"22f0e9c663cc1b40f235b255c166b5dd1e4449ad2b7804d537b7c42753ea4f44def425","first_seen":"2025-07-14T18:41:47.929672Z","last_seen":"2025-08-03T01:12:44.230665Z","times_seen":4,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/default-1717d27a.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:21.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET /assets/default-1717d27a.js HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/assets/index-d0961c08.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 May 2024 04:01:47 GMT\r\netag: W/\"6642e22b-2ac\"\r\nexpires: Tue, 15 Jul 2025 06:41:21 GMT\r\ncache-control: public, max-age=43200\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327601f1256be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":684,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (683)","md5":"6c4b0d57e52b3fc7b490765de48b9081","sha1":"40162686db14e2a2ccbfebbf9934684606ff4929","sha256":"fa80b0c48928003d2991e14d7ced48b67fc381f324f753be22420b20b8630331","sha512":"d0987d49f0d71cb1f3a24defb04bc5f1e31d90076b71fbf419b7a4ae1122d35053ea103d7e00fcbd1e5408597b8eac028ac42e8e072a57589b70b12cb3c0e401","ssdeep":"","tlshash":"ff01fe9e3081ac779bcf289a21268b82b4551fc57734b88894ac8871b21a90cc19db60","first_seen":"2025-03-03T03:20:33.954636Z","last_seen":"2026-04-28T17:23:00.600481Z","times_seen":102,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/index-d0961c08.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET /assets/index-d0961c08.js HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 May 2024 04:01:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6642e22b-2a44d\"\r\nexpires: Tue, 15 Jul 2025 06:41:20 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f32757aa4556be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":173133,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"137b3aeafeb202e8d2ca33d53613e44b","sha1":"dcc6ebb10e632740e7b7c8a215844e004996593d","sha256":"508de462990aeee01ebc18135a36cb57ea02f83f97bbbde8de2ca052e0dfe91a","sha512":"12b312e4e6225250fd0d9848a40c9a32b7df272b98c8002102f67556658839270bfdf4a25a797f9504190bef910c2459f36d5ba177437a5cbedb095d534384e6","ssdeep":"1536:qKcS3kN2SA8AM0K/6lTIIdFOVhNmupgHCTUejnBVBuu7FlJzytkCFLWha/9NiIus:q83m2j20KSlTdgVTm0fx5V7A8IaFagvG","tlshash":"0a0429e47192746613ba19e6507b000af33e2919380ed4d8f06deceb3e6685941bbf7d","first_seen":"2024-05-15T00:53:40Z","last_seen":"2026-04-28T17:23:00.610461Z","times_seen":137,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/assets/index-b999148a.js","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"GET /assets/index-b999148a.js HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/assets/index-d0961c08.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 May 2024 04:01:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6642e22b-76ca\"\r\nexpires: Tue, 15 Jul 2025 06:41:20 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 95f32758bbcf56be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15024)","md5":"a5c15e325f4a67db6cac2e2d4c2d77d8","sha1":"19e1dfd663dc91871ad031ef3d1a2bbae8620899","sha256":"b684223bb53bbf298d784a651ac5b9dc36e61810e82611b0a8b6afdb77e052e5","sha512":"1aba407f3adbe20504e20b5c225f04528a1e7b89dcca24312045cdca4b335451d1e19748c4aa7fdc2a3f6f575fd090736b541497e8746dd768d87d5d21960e21","ssdeep":"768:X+XYSWd2cAKpAZin5y3ozC7Qc5p+pLS5XUahJtphWUCWHGTL0nytWFD+n1UDhR8P:XJNyAEJkP","tlshash":"89d2f9c5b6d2b06243aa20f5407b4806f3399a25748d44e4f16c9cdb3cb650a97bbfbd","first_seen":"2024-05-15T00:53:40Z","last_seen":"2026-04-28T17:23:00.590185Z","times_seen":138,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carathex.cc/cdn-cgi/rum?","fqdn":"carathex.cc","domain":"carathex.cc","tld":"cc"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:20.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carathex.cc","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 18:04:12 GMT","end":"Tue, 09 Sep 2025 18:04:11 GMT"},"fingerprint":{"sha1":"D3:F6:08:0C:C4:AD:E4:F5:5B:83:D5:E6:B5:AE:C5:C1:02:D1:0D:26","sha256":"1A:3A:F0:2F:95:D2:67:78:6D:96:91:79:43:8E:4A:2C:20:8B:CE:47:CC:4D:70:39:81:DA:1E:D2:C2:DD:63:69"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: carathex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1165\r\nOrigin: https://carathex.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 14 Jul 2025 18:41:20 GMT\r\naccess-control-allow-origin: https://carathex.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 95f327597d0356be-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"carathex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mwqyejli.com/api/get_url","fqdn":"mwqyejli.com","domain":"mwqyejli.com","tld":"com"},"ip":{"addr":"104.18.21.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://carathex.cc/","date":"2025-07-14T18:41:21.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwqyejli.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 May 2025 08:41:36 GMT","end":"Fri, 29 Aug 2025 09:41:33 GMT"},"fingerprint":{"sha1":"7A:B5:E5:C2:FE:D5:0C:D1:AC:6C:76:58:88:38:9A:24:96:77:26:FE","sha256":"80:41:80:6A:CB:5B:99:65:3D:0C:AE:0A:E5:0F:2A:6D:7D:67:C7:78:6C:7C:13:35:0E:58:10:D4:60:C4:1F:81"}}},"request":{"raw":"POST /api/get_url HTTP/1.1\r\nHost: mwqyejli.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 24\r\nOrigin: https://carathex.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carathex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:21 GMT\r\ncontent-type: application/text;charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95f3275ebd280b06-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":212,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6e3d11a60e0cea7b67794d4eb4901a73","sha1":"76b70c365bd974596033aa66dd9ce0ce2ac39b5b","sha256":"32e5bb93b86e457c9a7cf1867039081408a31c4743f9162317ee21ef91362bf0","sha512":"bc26e8a6c6348ace41c30c575c4046ba643ecab1b5001363797265a41906f7a2982be90bcd084b40b513d03069893f01adfa0332d41b59f329a8d12d1e58118d","ssdeep":"","tlshash":"bad0238331cd03dd731432cc41cdf045163882541b61d14c2274c9750a1e094368f634","first_seen":"2025-07-14T18:41:47.939235Z","last_seen":"2025-07-14T18:41:47.939235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-14","alert":"Sinkholed","trigger":"mwqyejli.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratpro.cc/#/","date":"2025-07-14T18:41:22.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://caratpro.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratpro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:22 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f327667f087129-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://caratsite.cc/#/login","date":"2025-07-14T18:41:18.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://caratsite.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caratsite.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 14 Jul 2025 18:41:18 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95f3274b2ae57127-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-22T20:55:00.885767Z","times_seen":337590,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":19,"dns":1,"connect":2,"send":0,"wait":17,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}