{"report_id":"9ea9608f-b508-4879-839c-7913ef1e24f3","version":6,"status":"done","tags":[],"date":"2025-09-12T05:54:53Z","url":{"schema":"http","addr":"el2.convertkit-mail2.com/c/27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8=","fqdn":"el2.convertkit-mail2.com","domain":"convertkit-mail2.com","tld":"com"},"ip":{"addr":"18.220.225.51","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"app.kit.com/404","fqdn":"app.kit.com","domain":"kit.com","tld":"com"},"title":"The page you were looking for doesn't exist (404)"},"submit":{"url":{"schema":"http","addr":"el2.convertkit-mail2.com/c/27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8=","fqdn":"el2.convertkit-mail2.com","domain":"convertkit-mail2.com","tld":"com"},"ip":{"addr":"18.220.225.51","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-17T05:54:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-12","alert":"Phishing - Generic/Spear Phishing","trigger":"click.convertkit-mail2.com","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-10T15:14:38.264059Z","alert_count":0,"request_count":2,"received_data":11146,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-10T15:11:19.040403Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"click.convertkit-mail2.com","ip":{"addr":"3.18.56.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-11-19","domain_rank":699662,"first_seen":"2020-09-04T12:09:55Z","last_seen":"2025-09-05T20:26:19.689185Z","alert_count":1,"request_count":1,"received_data":4124,"sent_data":647,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"app.convertkit.com","ip":{"addr":"18.116.110.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-01-16","domain_rank":153594,"first_seen":"2013-12-25T17:54:04Z","last_seen":"2025-09-10T01:19:24.709312Z","alert_count":0,"request_count":1,"received_data":3840,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-10T15:53:58.845852Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"el2.convertkit-mail2.com","ip":{"addr":"18.220.225.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-11-19","domain_rank":0,"first_seen":"2016-11-22T09:43:36Z","last_seen":"2025-09-07T01:16:50.930222Z","alert_count":0,"request_count":1,"received_data":4281,"sent_data":647,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"app.kit.com","ip":{"addr":"104.18.38.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-11-29","domain_rank":106493,"first_seen":"2021-12-07T17:05:43Z","last_seen":"2025-09-07T01:16:50.899718Z","alert_count":0,"request_count":5,"received_data":163913,"sent_data":3067,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-05T00:43:53.100769Z","times_seen":330282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"el2.convertkit-mail2.com/c/27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8=","fqdn":"el2.convertkit-mail2.com","domain":"convertkit-mail2.com","tld":"com"},"ip":{"addr":"18.220.225.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-12T05:54:25.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.convertkit-mail.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:D7:3C:94:EE:75:54:CF:6D:1D:72:4B:5B:9E:FD:D9:04:99:65:51","sha256":"4B:FD:68:76:D8:88:63:F0:62:4B:5B:5A:87:21:33:17:DB:D6:30:FB:C8:91:2B:24:AF:3D:B1:DD:E2:F9:CD:13"}}},"request":{"raw":"GET /c/27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8= HTTP/1.1\r\nHost: el2.convertkit-mail2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.18.0\r\nDate: Fri, 12 Sep 2025 05:54:26 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlocation: https://click.convertkit-mail2.com/27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8=\r\ncache-control: no-cache\r\nx-request-id: 4c3b4606-3379-42d4-8488-8427a4894d2b\r\nx-runtime: 0.001922\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":366,"dns":39,"connect":107,"send":0,"wait":114,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.kit.com/404","fqdn":"app.kit.com","domain":"kit.com","tld":"com"},"ip":{"addr":"104.18.38.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-12T05:54:27.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 21:23:55 GMT","end":"Sun, 09 Nov 2025 22:23:47 GMT"},"fingerprint":{"sha1":"7F:F5:35:5E:B6:DF:F3:CF:8C:DC:F1:24:2B:FC:B5:43:CF:81:D5:4F","sha256":"0C:72:AB:A0:1B:6E:F9:A7:FB:15:B1:2F:60:A1:E9:E3:56:CE:E1:1A:63:51:D8:AB:9B:91:BD:2A:B5:A0:43:43"}}},"request":{"raw":"GET /404 HTTP/1.1\r\nHost: app.kit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Sep 2025 05:54:27 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Sep 2025 01:46:06 GMT\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=pEsZAQvHnG.MLLqELKUNVFaeD5MTI.kcMDbpdVHzfMM-1757656467-1.0.1.1-rlzimjWp4Ysa_EQma2YViATCg5SIbqNK4PnPQl_.aaeMJQYR_tMchM0Lmyomxy3FvHCl6v4deKntkEf6XRMUOB1r3Gy7vTsuqkc3q0Vg8fI; path=/; expires=Fri, 12-Sep-25 06:24:27 GMT; domain=.kit.com; HttpOnly; Secure; SameSite=None\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=520,cfEdge;dur=16\r\nserver: cloudflare\r\ncf-ray: 97dd267889ef0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (497)","md5":"28d64abbfe7c430354a8b51c341e6881","sha1":"da64203ed45ea31771038bd852262e062e2c9c44","sha256":"ba925b81298603cc992bcd1db4f6c395b1007367185ba3615aa4e25c7f2f1ef0","sha512":"4e737344f429bf2f62489ec07d0c28267be7f388d8e67a814f387811d1c39c285998a71d2ae44efaca3be3f1276785a20f79371423d9274e646e17283e606d0e","ssdeep":"","tlshash":"7f71334f9df30105b807e49977e77b427e568053c60ad92a3a9c6228cf884fa819374d","first_seen":"2025-09-12T05:54:53.818448Z","last_seen":"2025-09-12T05:54:53.818448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":40,"dns":23,"connect":1,"send":0,"wait":538,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Sep 2025 05:54:28 GMT\r\ndate: Fri, 12 Sep 2025 05:54:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-04-05T01:03:25.673687Z","times_seen":11179,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":83,"dns":1,"connect":20,"send":0,"wait":20,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.kit.com/icon-fade-bg.png","fqdn":"app.kit.com","domain":"kit.com","tld":"com"},"ip":{"addr":"104.18.38.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 21:23:55 GMT","end":"Sun, 09 Nov 2025 22:23:47 GMT"},"fingerprint":{"sha1":"7F:F5:35:5E:B6:DF:F3:CF:8C:DC:F1:24:2B:FC:B5:43:CF:81:D5:4F","sha256":"0C:72:AB:A0:1B:6E:F9:A7:FB:15:B1:2F:60:A1:E9:E3:56:CE:E1:1A:63:51:D8:AB:9B:91:BD:2A:B5:A0:43:43"}}},"request":{"raw":"GET /icon-fade-bg.png HTTP/1.1\r\nHost: app.kit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/404\r\nCookie: __cf_bm=pEsZAQvHnG.MLLqELKUNVFaeD5MTI.kcMDbpdVHzfMM-1757656467-1.0.1.1-rlzimjWp4Ysa_EQma2YViATCg5SIbqNK4PnPQl_.aaeMJQYR_tMchM0Lmyomxy3FvHCl6v4deKntkEf6XRMUOB1r3Gy7vTsuqkc3q0Vg8fI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Sep 2025 05:54:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 103673\r\ncf-ray: 97dd267e9b3b0883-OSL\r\nlast-modified: Fri, 12 Sep 2025 01:47:41 GMT\r\netag: \"68c37bbd-194f9\"\r\ncf-cache-status: HIT\r\nexpires: Fri, 12 Sep 2025 09:54:28 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 882, 8-bit gray+alpha, non-interlaced","md5":"41a798ab771730850fca532cb802c271","sha1":"a50fc8ceb844e4b3db2242500cf09149b771167a","sha256":"94329f689936ff7aad0c05aa3ee20eb6b5711ad6073fa90ed946803ed4508590","sha512":"bd83f34f56471766bdb4fdbd025c3affc6fbe7be62d01775adf8188c1ca64f5b6a495bf393d59bd0352c81647db21eaec9d69e63e4f76c5a93a5997a141175f6","ssdeep":"3072:r5PanTt5IhfWgZ/QCUiBZTEmdcLn/Mbk5:5STt5Ihek/QC5fdcb95","tlshash":"3ca31262933fc1ac9a41fa370a989b33cf07ded88ef445ec95e5d6444c6ca876a44f90","first_seen":"2023-08-13T11:28:17Z","last_seen":"2026-04-03T20:01:32.692338Z","times_seen":140,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app.kit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Sep 2025 17:23:21 GMT\r\nexpires: Thu, 10 Sep 2026 17:23:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 131467\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-04-05T00:38:14.459763Z","times_seen":18568,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":9,"receive":16,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.kit.com/cdn-cgi/rum?","fqdn":"app.kit.com","domain":"kit.com","tld":"com"},"ip":{"addr":"104.18.38.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 21:23:55 GMT","end":"Sun, 09 Nov 2025 22:23:47 GMT"},"fingerprint":{"sha1":"7F:F5:35:5E:B6:DF:F3:CF:8C:DC:F1:24:2B:FC:B5:43:CF:81:D5:4F","sha256":"0C:72:AB:A0:1B:6E:F9:A7:FB:15:B1:2F:60:A1:E9:E3:56:CE:E1:1A:63:51:D8:AB:9B:91:BD:2A:B5:A0:43:43"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: app.kit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1174\r\nOrigin: https://app.kit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/404\r\nCookie: __cf_bm=pEsZAQvHnG.MLLqELKUNVFaeD5MTI.kcMDbpdVHzfMM-1757656467-1.0.1.1-rlzimjWp4Ysa_EQma2YViATCg5SIbqNK4PnPQl_.aaeMJQYR_tMchM0Lmyomxy3FvHCl6v4deKntkEf6XRMUOB1r3Gy7vTsuqkc3q0Vg8fI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 12 Sep 2025 05:54:28 GMT\r\naccess-control-allow-origin: https://app.kit.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 97dd267faca00883-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.convertkit-mail2.com/27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8=","fqdn":"click.convertkit-mail2.com","domain":"convertkit-mail2.com","tld":"com"},"ip":{"addr":"3.18.56.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-12T05:54:26.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.convertkit-mail.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:D7:3C:94:EE:75:54:CF:6D:1D:72:4B:5B:9E:FD:D9:04:99:65:51","sha256":"4B:FD:68:76:D8:88:63:F0:62:4B:5B:5A:87:21:33:17:DB:D6:30:FB:C8:91:2B:24:AF:3D:B1:DD:E2:F9:CD:13"}}},"request":{"raw":"GET /27u9xg79e9ioh2drv5t3/qgi8h7h4x8o5pl/QHNsdXJwbWFpbC5uZXRodHRwOi8vamRkYWFqanNzLnZpZXdkbnMubmV0LzM2NUxvY2thbGxPdGhlcnMvYWxpaGFzc2FuQHRhbWVlbi5hZS9uby1pcC8= HTTP/1.1\r\nHost: click.convertkit-mail2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.18.0\r\nDate: Fri, 12 Sep 2025 05:54:26 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlocation: https://app.convertkit.com/404\r\ncache-control: no-cache\r\nx-request-id: 69bd4982-af6a-4bac-be69-49a606f71f5e\r\nx-runtime: 0.002421\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":369,"dns":40,"connect":107,"send":0,"wait":118,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-12","alert":"Phishing - Generic/Spear Phishing","trigger":"click.convertkit-mail2.com","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.convertkit.com/404","fqdn":"app.convertkit.com","domain":"convertkit.com","tld":"com"},"ip":{"addr":"18.116.110.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-12T05:54:26.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.convertkit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Fri, 02 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:9B:67:1D:59:0F:29:4E:12:BA:49:69:7E:A6:E8:38:15:20:FE:D5","sha256":"B4:40:A5:8F:A8:1F:CF:45:70:08:34:9F:58:C8:C2:65:77:B6:CC:89:53:88:9A:20:82:1B:AF:93:FC:B9:D1:1E"}}},"request":{"raw":"GET /404 HTTP/1.1\r\nHost: app.convertkit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: awselb/2.0\r\ndate: Fri, 12 Sep 2025 05:54:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://app.kit.com:443/404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":395,"dns":71,"connect":105,"send":0,"wait":105,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app.kit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Sep 2025 05:54:28 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97dd267d7c37b505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-05T00:43:53.100769Z","times_seen":330282,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":17,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Sep 2025 05:54:28 GMT\r\ndate: Fri, 12 Sep 2025 05:54:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-04-05T01:03:25.673687Z","times_seen":11179,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":83,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.kit.com/fonts/KitSansBold.woff","fqdn":"app.kit.com","domain":"kit.com","tld":"com"},"ip":{"addr":"104.18.38.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 21:23:55 GMT","end":"Sun, 09 Nov 2025 22:23:47 GMT"},"fingerprint":{"sha1":"7F:F5:35:5E:B6:DF:F3:CF:8C:DC:F1:24:2B:FC:B5:43:CF:81:D5:4F","sha256":"0C:72:AB:A0:1B:6E:F9:A7:FB:15:B1:2F:60:A1:E9:E3:56:CE:E1:1A:63:51:D8:AB:9B:91:BD:2A:B5:A0:43:43"}}},"request":{"raw":"GET /fonts/KitSansBold.woff HTTP/1.1\r\nHost: app.kit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/404\r\nCookie: __cf_bm=pEsZAQvHnG.MLLqELKUNVFaeD5MTI.kcMDbpdVHzfMM-1757656467-1.0.1.1-rlzimjWp4Ysa_EQma2YViATCg5SIbqNK4PnPQl_.aaeMJQYR_tMchM0Lmyomxy3FvHCl6v4deKntkEf6XRMUOB1r3Gy7vTsuqkc3q0Vg8fI\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Sep 2025 05:54:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 39068\r\ncf-ray: 97dd267ecb6f0883-OSL\r\nlast-modified: Fri, 12 Sep 2025 01:46:06 GMT\r\netag: \"68c37b5e-989c\"\r\ncf-cache-status: HIT\r\nexpires: Fri, 12 Sep 2025 09:54:28 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39068,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 39068, version 0.0","md5":"f3ec0cf003a350ea42f6ced7a20c37ef","sha1":"392599ffdc66a13012cc013f644f6cebe816c5bd","sha256":"1776e48930670d75e595a98b9d6653937a51e2596442dc9efb113d5257617c1e","sha512":"b01417e2eb8a217f1b01a4b0fe7e7e5e613322fcf4ca6fdecdbb4334155b31867c93a0f65507afa441a924389b4c30ddc2a25af33dedfe36f430722edd0e7d92","ssdeep":"768:8jCLfZWkNP3oL087ymM1rUjckMCm9Vza9h3KpP6DjTgpM/yj+qv7:8jaX+Y878s1xaza9YrM0l7","tlshash":"4403f1ee3777063e7cc2d2b595416bfdbc47900026d79caae3aa806a63712f11c0c0e9","first_seen":"2024-11-08T19:37:32.60752Z","last_seen":"2026-04-03T20:01:32.677328Z","times_seen":143,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.kit.com/favicon.ico","fqdn":"app.kit.com","domain":"kit.com","tld":"com"},"ip":{"addr":"104.18.38.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.kit.com/404","date":"2025-09-12T05:54:28.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 21:23:55 GMT","end":"Sun, 09 Nov 2025 22:23:47 GMT"},"fingerprint":{"sha1":"7F:F5:35:5E:B6:DF:F3:CF:8C:DC:F1:24:2B:FC:B5:43:CF:81:D5:4F","sha256":"0C:72:AB:A0:1B:6E:F9:A7:FB:15:B1:2F:60:A1:E9:E3:56:CE:E1:1A:63:51:D8:AB:9B:91:BD:2A:B5:A0:43:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app.kit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.kit.com/404\r\nCookie: __cf_bm=pEsZAQvHnG.MLLqELKUNVFaeD5MTI.kcMDbpdVHzfMM-1757656467-1.0.1.1-rlzimjWp4Ysa_EQma2YViATCg5SIbqNK4PnPQl_.aaeMJQYR_tMchM0Lmyomxy3FvHCl6v4deKntkEf6XRMUOB1r3Gy7vTsuqkc3q0Vg8fI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Sep 2025 05:54:29 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Sep 2025 01:46:04 GMT\r\netag: W/\"68c37b5c-3c2e\"\r\ncf-cache-status: EXPIRED\r\nexpires: Fri, 12 Sep 2025 09:54:29 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97dd267f8c780883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a836e54d31cb91dc0185aa00333ba8fb","sha1":"6f787500d3cc1437f563162d2030bc480e90ebbe","sha256":"fec1de03350a05b77c95fef9235c9a7a8c096ae4ff9992a0f2ee2d90115aa705","sha512":"80904ead451da08f7d54e597f7cb7e35167ba8b0c12c94a0214d96184bf1094dbe895cdf870c04ae5764f128eb834ef2a736ee5be2153d1bc5baaf0b141b8809","ssdeep":"96:zRLYh2RCQZhp1aavPMErZIsmJm++z5r8cJnnnnnm++jA4xWiCatF07HwwwwwwFGk:zV5TTpUonnnnnm++jIgNH","tlshash":"a162482ccdf89bace46fc731d4ad2b59929e4c284152e5c1ef0b73a0b79e97490b9704","first_seen":"2024-11-08T19:37:32.602363Z","last_seen":"2026-04-03T20:01:32.68579Z","times_seen":188,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}