{"report_id":"a6e2f195-958e-4963-891b-d2d117dd0160","version":6,"status":"done","tags":[],"date":"2026-04-04T20:37:14Z","url":{"schema":"http","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.210","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"title":"Register Kointoto | Daftar Judi Togel Aman dan Terpercaya","dom":{"size":6414,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4968)","md5":"3bfe7a576d0b9a3bc17a51de1ad4d065","sha1":"bc880edf73c74c2bf0b66c7f6f7f08fbea20d6a2","sha256":"5e4e3fd77cc72b1f758708dd449bfa47123b94d3e84cea262473ce385b679035","sha512":"5e090afc8e92ee8fa7825211e0a0dda606f21f7194d49573a735442688e645b217a7f12818de24d102881d5b4e5d2c280327522c16c11060480d2012c1fa17ce","ssdeep":"192:bmC2vs2FucIg+R7Vdh95HjLMHOghjOz8mWfwhp+p:4o3V7jLGOkOz8mWfwhp+p","tlshash":"50d1233f412127299027ed6c4bf467138178e466bc6977fe29126a29c7cbb4254f338b","dom_hash":"domhashc825ac7342d34e339c870e8a2e1df67d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.210","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T20:37:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"premicloud.net","ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":48055,"first_seen":"2025-04-16T14:37:33.865637Z","last_seen":"2026-03-30T07:01:38.716054Z","alert_count":0,"request_count":48,"received_data":2089595,"sent_data":23590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.livechat-files.com","ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-02-13","domain_rank":159656,"first_seen":"2020-04-22T09:40:29Z","last_seen":"2026-04-03T19:19:18.526246Z","alert_count":0,"request_count":1,"received_data":11142,"sent_data":498,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-03-30T10:48:29.74947Z","alert_count":0,"request_count":14,"received_data":1065734,"sent_data":6716,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":1,"received_data":17662,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2026-03-30T12:46:11.562517Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":1,"received_data":468774,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2026-03-30T15:10:45.702935Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kointt-alt.xyz","ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2426963,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":36,"received_data":1992477,"sent_data":48215,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"landingsplash.xyz","ip":{"addr":"104.21.19.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-09","domain_rank":97769,"first_seen":"2016-04-22T01:18:08Z","last_seen":"2026-04-04T16:26:42.708256Z","alert_count":0,"request_count":3,"received_data":10371,"sent_data":1387,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shareservice.net","ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":67609,"first_seen":"2025-04-16T23:26:46.438114Z","last_seen":"2026-03-29T19:59:23.236839Z","alert_count":0,"request_count":6,"received_data":208984,"sent_data":2900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"object-d001-cloud.cloudstoragesharingservice.com","ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":197194,"first_seen":"2023-06-28T19:31:32Z","last_seen":"2026-03-31T14:18:02.586533Z","alert_count":0,"request_count":4,"received_data":420613,"sent_data":1978,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":6679,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-03-30T22:51:33.359044Z","alert_count":0,"request_count":4,"received_data":26795,"sent_data":2566,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=13527582\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fkointt-alt.xyz%2Fpromotion%2Fwl\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__ogfwz478e9","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bbcccf9bc8fe83bb2bb3cb46e5fef45","sha1":"6b03e68452ef73224a81edc16edc5034b088e13c","sha256":"a1142330d726e1eda6b394191fd02b5520bb3ed0c7a37055dafe4bc9f6f34f02","sha512":"b4347c9199a6900bf929785d875d470ea65f8135ce476bcd4d1500e43a2cadb07fac104f9014f55779bc4ff51e4c1eb133f2c43e812b4010372dc6b4a9b7b8cd","ssdeep":"","tlshash":"bbe06833e60a5831b5c697f5d8003a03a93442b2a446e9f8f0690210535f3cd9320717","size":389,"data":"","first_seen":"2026-04-04T20:37:24.640399Z","last_seen":"2026-04-04T20:37:24.640399Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.DDJgJSMw.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"08183989d9bc505e82215b96d1581512","sha1":"1c0eab7cbf49c114ba686578f1fc1e6a32fa68b4","sha256":"30f5c6a4e57eae1f47d3c20ddc27f78d616094e519d1ded2eea87106fe08b34e","sha512":"3ff2c6ed74f219c420e45447b522a7155ec27f869fbb273ba1a1406400192e596da71dc5e5ab60910c447eada553545a96a0d1dd57cf7c6c307a7cc57ee5b01b","ssdeep":"","tlshash":"602121d91dc3d430d33c48e902e5889e697c8ea4e1ee01e0d9946dc67f20960667fead","size":1189,"data":"","first_seen":"2026-03-19T10:33:28.754436Z","last_seen":"2026-04-05T07:28:09.863297Z","times_seen":1121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-04-05T07:54:59.870163Z","times_seen":23466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82c7fbb723d2615d2f0fc9ce02907946","sha1":"d5c8a56933b7b6c8d0f0db9df1b9f67ccdecb7ce","sha256":"350933ad5399678d5461aace406f8858b5e74173a12341db2ad1e46e1c9cf108","sha512":"27cbab2972fb079f77fec337a60116976dfb01e33253bbbc528c9fca7ff005914c97d86e7ea0934920d066685bcd9bdb6b88fcbae11b9613913e57293c62954e","ssdeep":"","tlshash":"01f0234c3ca2b02337f93634c223cf6f3352070135c35524c705cc2428549c61886c4d","size":445,"data":"","first_seen":"2025-11-15T10:50:44.160934Z","last_seen":"2026-04-04T20:37:24.65273Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/js/custom/floating_icons.min.js?v=1775335011","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f9706eeee7690ce0fb65264290a61d","sha1":"f47499adeca0a42d73894a8424a5dc65e1c8cde4","sha256":"afbf313c9cd8546932da922fcd36f00f9e0787370ac0d46ca82d3cb31d15d0ea","sha512":"99830735da3f51fcb6510a5f682638c2ded1a875790cdc5ed9eb928decf8d744a48e107d92af6db421b666a86cc88542c187c2d2a0c86535937143bbe898e15a","ssdeep":"","tlshash":"0f2186a083a6d43d83809166c37493097854302efe529640fdfc8a8b1ba9d4c6c23efa","size":1172,"data":"","first_seen":"2025-03-20T08:45:19.929797Z","last_seen":"2026-04-05T04:44:51.214101Z","times_seen":1472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7844ba8829055b719dce8b3e3f4a18de","sha1":"64a2533042c61c89bf8b7d6ca225ccfb09154266","sha256":"e72630d0b55e3f715f097607631de66c8cbb4386f53e67cfbd6e5b9ad8d8f5d0","sha512":"e32c6774fd5d5e2de55dc88872f6eec55d6ce302fb108bd6bf8c6f55fcf84fdc2f32585d8fb259d7defd3924f2c68c624107dac5e0c75bf070f11bf7df367a2c","ssdeep":"","tlshash":"16f0a35d3c56f05737f93675c2239b6f3355074175836524c645cc2478549865847d4d","size":445,"data":"","first_seen":"2026-04-04T20:37:24.653613Z","last_seen":"2026-04-04T20:37:24.653613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.DazHfinG.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2d77a6aa353e00f553a63318304ed405","sha1":"79829fe224284805c193a91d2fd444f246271fe0","sha256":"f068996cda742dd6fdb0e857c16b010966bf690480381465595e2b22935de2cb","sha512":"8a7fdf55c616c0d7f3f6d03d2196d7c4d82cb385c2dc73ba36ab9a08ac2f43cbee752de0e10302fda3277fa54813cad993b838b0ae98ac1f17e3d5001a67a228","ssdeep":"","tlshash":"fcf08bc53592f5ea02ab59c548379003f3298818b4baf580e614c5f12493057471ab27","size":546,"data":"","first_seen":"2026-03-18T09:33:42.028688Z","last_seen":"2026-04-05T07:28:09.617507Z","times_seen":1181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BxxwxD7y.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"483068e13644dc2df2d5d6d608e64856","sha1":"31488a07ab29377ecb476fcea7945fd6d4ff15ac","sha256":"32477580d5675e52d0d14b10152a579081e64a2857aa254d904fca4cc7497743","sha512":"82e9e3fd2d0df5f13aa6484b21497f57c770d860c31860c8fd68468aca9198b54e2dcfe2fb10d1cb169972d200759a137823c965be39b6922c063352f293d3dc","ssdeep":"1536:qsu7fSLmtQZaHlfKYPQvC9nEm9vzM4soA2PsuMIY:qLSLmtMaHli29rzM4soPtMIY","tlshash":"85732ae2f686f4399be7a4e555384003fa3a7958781cc270f31cce20619e58661b7f6b","size":79005,"data":"","first_seen":"2026-04-01T07:22:48.551198Z","last_seen":"2026-04-05T07:54:59.854262Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026version=4940c52ca0caf914a8b155bf4411bbe5_f2967fe76a09af13bbecef55e9c3b2f4\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1fe85c408b9620f5e85f5ee7f7cbe6a","sha1":"19a412d75e7a8d4d105cf86452e65fd6778854e7","sha256":"2835ae4f104ce386677740362ee587d1b3079530566ca333a9499aadbdad20db","sha512":"53b26feccdefe8de34d0a9b79691e21fb55dc34ab3e392a257e8d262cd7bfde14b06dd9d7c9ee094942046235d58873388d5ca5f14c6eea2647655331ac0b0b9","ssdeep":"384:k8DgODwsFJMKlFZmERbP1DQCBuLdAeAHMGdQNJ0L:siVFACHuJALMUL","tlshash":"2862fa640daa79aa0b2753d6f5db5d1e38ec3368ab451a2fdd884f3042807c1735be39","size":14605,"data":"","first_seen":"2026-04-04T20:37:24.620611Z","last_seen":"2026-04-04T20:37:24.620611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-04-05T07:54:59.900274Z","times_seen":21016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.CmDDbhqB.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c3bc63875af35e6419ebf4990e9a1291","sha1":"0e0b7d2dd95abd8f282c722fe3fa4c4c90a275da","sha256":"a9162f8842f5d0b7554ee148f946446e6acbadcb40a2f232c828681a9685582a","sha512":"db8e5b7f70baab09bbd380fc701424bb71a75dd65599fa995333474df2ea5d69baa52da9e4ea25b04c02ca63b6ce80ba5e7467a99c8534719ccfcd45a23cffac","ssdeep":"1536:VgZQ8kK8O9hbCvSPT/FyXb+BzpHxQwXzmyU9zP+M3jYPuCoOTAjyp5pmLWqVWM:VgK8kKB9hbCWBswEwDm93j+tUWbAWqVP","tlshash":"d9d3f9e83951f9626bf312a710af5807b33c192b280c4950a211fdddb9b845eb17bf9d","size":138079,"data":"","first_seen":"2026-03-18T09:33:42.057685Z","last_seen":"2026-04-05T07:28:09.74025Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9ba5cc0ea22a1954c1506ea09930b24","sha1":"f2f347855ff034dd0a5c7b0ed633bbb6b2d17e4e","sha256":"2bd027c0a4aabf9db40784a395bc6fcd14d00ff612dc2427375c8509c6d36579","sha512":"480c537692efb37b4c362a382004003b54aed237b387b2d4208e15e8bfddc2afbeee9fcb98bbc14484d9a3c7ee510e88ba02e9d40b5effa32ac3aa4dc83c77f3","ssdeep":"","tlshash":"a1011699fc42707696963228763bfa0751631225184464335efdc36fef32d87c11368c","size":844,"data":"","first_seen":"2025-11-15T10:50:44.163192Z","last_seen":"2026-04-04T20:37:24.654998Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a3250fb37e761ba06fd94d1f273503","sha1":"a174f988e328f7d5eec88789ee111fff3a317541","sha256":"7969f3a31b11be109b37766c98b323236bdbda1786516b9f9d65fb87b9856242","sha512":"706952a68b095a6f5bb6899772c9a427d6263c9f5066d337a8553c771dde25ae4766c6200fe11dfedf78c75be38f55a43fcd4861250c45f38738f677cbce639d","ssdeep":"","tlshash":"56c02bcc610e0c7052f72b008b3ff600b002321494e06932481973484d30f07d7c4850","size":153,"data":"","first_seen":"2025-11-15T10:50:44.165089Z","last_seen":"2026-04-04T20:37:24.655929Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8G2GK6T5T5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9341a0b82ecc5f99bb15efee2cb7609a","sha1":"1c3856e63db82d5192460a81bd144a3a579e6c5e","sha256":"eae8c2c2718be29a5ef02429827267ae8a1ac99acf80a60334734bdf7ca27934","sha512":"e178dae5d626a0bc3581121cdc814118c9b9359dd741e2d1db0165071492c6f8436bfa7c4c928bd1442330c14a66af1e3ca2be61bcb9e8ca824e18c40f34cdfa","ssdeep":"6144:Cz3eqQGzLr8DP9aGb/F8x/OW+/5EiWz1SoRSLrgqz+:azH8IGbt8vci","tlshash":"57a4f9ceb3d674225396f478903f018ba57b29e2b448c8a5f189cce41e7469a4277f7c","size":468170,"data":"","first_seen":"2026-04-04T20:37:24.638129Z","last_seen":"2026-04-04T20:37:24.638129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/js/auth/login.js?v=1775335011","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a4b15ed3f06513dae99cc4235a6ec08","sha1":"cb40060815eb3dbf9447f934cadd04bcb859474d","sha256":"4d83408d7af18fde2333ba7cb69812fcbe1a7ee412514d12f51edc5055a03e08","sha512":"a052e76051b1e017563a96a5ee7f9fa80e86055cf81895cd0097321e076514075399ec1a6d2ebef927c124bafb647c34dd21eb38b596b9c842a6d695ccf76962","ssdeep":"1536:pJbZ8DgaIucWkVQfRVeiLxHg1SFkQr+X5grRaL8sMw+pN:pJzWkVaVeiRg1SFk6Hr8L8j","tlshash":"cab38b84b182743757eb44a960aad208f2655405fc234c54f72cc9d19fabd8fa1b3fba","size":108139,"data":"","first_seen":"2025-12-18T02:47:54.07807Z","last_seen":"2026-04-05T08:07:25.146684Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.BiAqLpKb.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"cae27db7c103141be0db8df3f0342336","sha1":"74c6b90121e16d3a64b7947fd67a8f18eb2f6fb5","sha256":"2ed539b8fdebd2ae0cb024e433b97cdc20d620e85ef28917dcad1ee6b5ed3d06","sha512":"3fdcc0f61481efe71ee09876a778ad02b28937532ce359e8753b7533bcbb4c3f49fbacc050372392a9cc122bd2503b85c81cc31f272e2b563b3e4fd6fa451a29","ssdeep":"1536:GVWF5ZLaCvFh+E3v/NqlfutxglhX7AaR3b93w/Dz:8khNhpEfTlhXcaRr9MP","tlshash":"21434ccef181753157e311f2b06f9106b73a2a2d385c80b0f629dd9925de04ba26bf6d","size":55843,"data":"","first_seen":"2026-04-01T07:22:48.474798Z","last_seen":"2026-04-05T07:54:59.899086Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026version=1623.0.1.789.64.1670.2.1.3.214.3.13.5\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"aff8f0bed51704d6024eb1fa96792527","sha1":"4c1961118efd56f09f993b7114132f2a2b293a07","sha256":"bed02f5e6eac8792be99d493a2eb8c86eb67da9b6490ffe8709cc904b1d0114c","sha512":"88d9146c450939219aae893813efee2074dd52b1afd4e9dd6e81da9f48acb23c405ec77e794c032c041f507626161c22d3209be35fb9c28caa97ace471a0f381","ssdeep":"192:ebGwGfGsXGAMjDGdUef2NxFFnwcKrRRawxTeHzxtB+NBVo6wmNe7xK2:UGwGfGsXGA3qef2B5UyOBVLwmNe7xB","tlshash":"9422741587c78c7e62f7c2c5f2db7a0d61d8203abddb6a3be4d0d63031582469d11a6b","size":10565,"data":"","first_seen":"2026-04-04T20:37:24.619848Z","last_seen":"2026-04-04T20:37:24.619848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/bootstrap.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f827fe484ec04346553202782b0664b","sha1":"a9465bbb5a0aef24f9b25184e3da3637634635f1","sha256":"a65d5b4abb65aad37f302c96f1751362e2422a8869f7f889112556d77e384813","sha512":"b0bdd14fd41e96eea34eaa16515cc602e9896b26a48743fa59e988fe05dbb10c457f92f426a17832fa9179e7e126a1d2e535c926a53fc1a41d1eaebb9c00f38c","ssdeep":"1536:5ZMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:J59siWFUOvhMEq1rdK","tlshash":"2fd3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":131637,"data":"","first_seen":"2023-03-07T12:09:05Z","last_seen":"2026-04-05T08:29:58.63083Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d5980cdf93b6940dc32bf8a8d8e0635","sha1":"ba968464868ef2715439d17fd205027e6f11f62e","sha256":"32d11d4c2e63e077128c333b831b3ed29366760bbfe601360ee286872d6107ea","sha512":"d45e5103f2aeaabb59ed21462a3a43933911f87f2e5bb48c16437dbee7571e60246078056703f9e2e6e92597a7c1fc12ce16ae978239f406b2b1f249834fd176","ssdeep":"","tlshash":"7581233530e272350317d065b31b5254fee1a047da91d812796dcb8cafe196394a33ed","size":3936,"data":"","first_seen":"2025-11-15T10:50:44.166615Z","last_seen":"2026-04-04T20:37:24.656824Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-04-05T07:54:59.89031Z","times_seen":24338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.D8au6i5G.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9404262567c5392f0b3616c6ccec61d","sha1":"6c521021fabce32ca848e5c16b1d28eaf8bf1dae","sha256":"813ff4536b4089189d3d10e0f4cb4404579e6fce59cec959aae0ed0e430014e9","sha512":"d2157c4d7be10122134254cde74eecacf5216df8646252f16f0206e0fb8e51ac93f1c63de3918ce93a5172e20e643c788079d066c640eceeea2bf7c65fdbcc87","ssdeep":"","tlshash":"57e0caca97013de2f5cacdf8c420e4e55af253aa47f083b0c4ce13310311162ee05542","size":401,"data":"","first_seen":"2026-04-01T07:22:48.400576Z","last_seen":"2026-04-05T07:54:59.855569Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"499fc467a9efb9a4015a4e86b1b54767","sha1":"b20daeb9ada82d4b3f2e6939166c20193cc449c2","sha256":"877eb6255eea2cbee78c0eea4480c2d033a3fceba73f1c36c66569e3c40a48bf","sha512":"e96f3978084f72a4b83998f8e83abcd221b87235a7200ad1482f709b5b3bb068404ce9e50cace486a00d99ef7f6335f6d7bc7482eb0839a4a6888ba6d29154b2","ssdeep":"","tlshash":"bb112b191f742432e033a46f97cb91843e21e18b8545ad1637ecd2885fd0858a6735ec","size":925,"data":"","first_seen":"2024-05-27T04:55:09Z","last_seen":"2026-04-05T01:11:48.715476Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-04-05T08:32:06.774746Z","times_seen":10731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.DHRz0lt6.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"387632d9a6a69753ccfee0908fb8ba8d","sha1":"1412fdcbab5d336073a3c5ec215e3306d3f43c6f","sha256":"dd8a501df61c89d0de30f15d8aa68d6a21f6779c3fabbd849b3bcfd15301fb01","sha512":"ee0a1d9ab22b56b349ec45b3a3db9baa313204e9d0ad957a249c149db3ae4cfbbdf785bd60dbb586448cf57d269b741ebe4d7353badbda8c84c0e64e26bf3a60","ssdeep":"6144:1tMuoTGhHxd+olP5nZfpUqa8wrrLIgXs4y:rMuoTGh/+olP5fUqa8wrrLIg84y","tlshash":"a9245bc4b18af53887eb34e6547e2002f63d6d18784c8564f75cdeb63da85899233f2a","size":221034,"data":"","first_seen":"2026-04-01T07:22:48.458243Z","last_seen":"2026-04-05T07:54:59.878329Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/js/vbulletin_md5.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","size":5689,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-04-05T08:07:24.982012Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ceecd336fcdb65dbce96a07b2dd4165f","sha1":"bb0b1a42ef8fafea97c31a298f33007254fbf41c","sha256":"3a0f8da9631f0fa66179f3a197d074b19ea767911e204f2e034f285558fb6118","sha512":"5ed09f520845aa082eed759785cbda6b01d2746677e7fa78607886459b19d3ddde106dbd089174c34e3e01591c6a90f787c3dc05ed6c4afb95d59ea0061a956b","ssdeep":"","tlshash":"80119e65b0e248c090bfa17b8b6b2a1536115c17d442c60cbb7c9b992f2505bf667fcf","size":1057,"data":"","first_seen":"2026-04-04T20:37:24.658765Z","last_seen":"2026-04-04T20:37:24.658765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/jquery-3.4.1.min.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-05T07:47:20.476063Z","times_seen":115193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/13527582/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-04-05T07:54:59.911506Z","times_seen":21940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/lazyload/lazyload.min.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b146e6b18fcc9e31420381cbb45f3ffc","sha1":"ad6f489d6d0023081a2764ec325748fe44b28308","sha256":"cb6c4b3798c87dfc7047631020f67f717645017f2651a3f2d5541572a1dd56c1","sha512":"d4d1a4f89354add25a329fa716ab055fb19559f33bebe180dabf9c95672459f78fe3e848bbf24c303d6c49af1d67d813d1e858d47d76f98176a602d1af985015","ssdeep":"","tlshash":"e6e07d828409243f6593447734560250a9680116305dc23616be64ab409bc234ea3416","size":302,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-04-05T04:15:33.661343Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.jvSlFlyI.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"aa2c6658f352637692ea6e1777149a45","sha1":"a3030810c807764b9cfbf723f92872796bcedfb1","sha256":"bd90d8518757fc4dff0e1890fbce3e0e8d0be0fd23e1398d96310f95cd6550db","sha512":"f7a805b0c2b0e533ca2efcc8c0129b04894c1efaad4045d834830b2e97dd21cf1446d289b939a8d413c9ca74a3b781afec0923099111dac1f132ba8d3131d708","ssdeep":"12288:3YfiJ1jPkC8nMQviHXnK1rhNhQO/tWXEoSQXGtMf0Fem1D9ZBcF4/uMdWoK5ATEr:3YfiJ1mNh6XGi","tlshash":"c1946bd07242b938dbe7c19b90bb1609f73d3d09b42e9660f1ade85e33944489277fa4","size":446604,"data":"","first_seen":"2026-04-01T07:22:48.511782Z","last_seen":"2026-04-05T07:54:59.889634Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"784bd10a444f28f4e0d17ed51508d4bd","sha1":"6e3b2ce84f636803ccd7ff700ef2babc23e1895c","sha256":"ab6038f80b207a0ee9bdc1c367b9205eabda74d0e4d6cc79213d4672cacf7e31","sha512":"15ed181669ad09339a8383c16ef2a209d31abc87f459b7f90bdb0c2814155810f686646460ef03f96da51793a36c38989230345d74d8df98fea242b5c5e02332","ssdeep":"","tlshash":"84b01200322374a06067082ec1f900c00f4c1387c609d05276fea5cd0f001d17432c4f","size":115,"data":"","first_seen":"2026-04-04T20:37:24.660102Z","last_seen":"2026-04-04T20:37:24.660102Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a34107bc739bb81d06f7db6afb333038","sha1":"20bb592771e40219a7dda6d2b4cc282cee8f9e40","sha256":"9425d68313193308ca41f1add499ad9e42795a203939eff76ec2260920ad9c66","sha512":"8f61e2dcee5b7de5c5f09306163a4ecc1115ab0e64b7b96f89fbab4e7cd8541e5dd5df136c59540fbc7fafdafc2abd1ba7030cc2d34376b14d251c9744e38acc","ssdeep":"1536:E5ybuRri7PfJcgIckNmeuRnbyusirwpDwLCPoR3CRM6fpN:E4buRu73iXuRbyT83CDfX","tlshash":"9da338d67282b03493f785e7a17fa216b73a191c740d8410f17cec6a396a9878177f2e","size":102822,"data":"","first_seen":"2026-04-01T07:22:48.430783Z","last_seen":"2026-04-05T07:54:59.898486Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c847fc9226fb8b71fe0e45af2b6f51c","sha1":"272d5cb2464b5eadc37667c723dddc5053363078","sha256":"16cfb38c2adc0f2d9f310d2d7ea8f7c172b5476a12d531f86ae7fa7ef9e48dd3","sha512":"d288615e957710198e19968733a5b54cc11595257e24888d7151e470aad3892a097ddb66be629d8a5ea3a0925cbdebda47d9a31b557863f34fb5f2b3b2114a43","ssdeep":"","tlshash":"1f01f928b5f98194115b326dfeefd1891f5e610bd109cc00b6dcacde0f1262891173de","size":845,"data":"","first_seen":"2026-04-04T20:37:24.660933Z","last_seen":"2026-04-04T20:37:24.660933Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","size":74,"data":"","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-04-05T08:23:15.275149Z","times_seen":13024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.gAo1PSuk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4512d73fcca614136d66a7535721fc9b","sha1":"d6cebe661a1b23bb8330af3128595430da107322","sha256":"5210823be06a6d8fa27f7034243a82b169002d5790143d9ae2cc7de4f194e9e1","sha512":"4d6b04cdb3e5aebdb0f44b325a5aa44eee550fdcaa03bfe39427c701a04789e47d29f2d5c14bba323af9774c121ad83e3a0bc1b5d271f655832c249f93d18e4e","ssdeep":"192:ObZtPuLpcfXjyJzCgvNtUpPJmrkZYfnwS1fl3XXJWXzqdByyYYiktwbaQ4BM:sZtbjyJDvNtUpPJM1p3JXdByy3RtwuS","tlshash":"d9f109bff741e4b0e3eb48e1991a0113aa3a1754755d8070fa2c8d10a15aac4b277ffb","size":7870,"data":"","first_seen":"2026-04-01T07:22:48.562707Z","last_seen":"2026-04-05T07:54:59.897179Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/mdb.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"adadabaf88882592fbb1eec2f54d797d","sha1":"db91f69dc3c1e9657115cfdad1973df45cfa2990","sha256":"1abed5fba7967a53bcf6a7ec734bba40714661be6e4695fed9adbfb4e7a2f542","sha512":"86d1233e65d59b746385c9102af327e827f78a4e22e7d330f75678c181b44bba89939fdd28d1eaf52de9f8b2863baa31b1954a36f2b76a7b95478c16d43a1f5b","ssdeep":"12288:3uFmFn4+YqN7Bjb5WoFU7BMS6k1DEq3Pvg4g:3LbvSrg","tlshash":"04a40898f7ac212682273259ad1f11cda23d90325905dc69bc6ce5a42fd4c3d53fbfa8","size":482972,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-04-05T04:15:33.689715Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/popper.min.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c055b8c12988ec2b1f7238d85e79f4b4","sha1":"5958a52438c8d753d692b11b5419bd1490c2655b","sha256":"58cb6a78afc204b7165e947c965cbce6296ee0e587fbab3e12c0d2b6378e9004","sha512":"b8fce0655dc9e77b23efdcec09eba16234eb2e59067b182ada5d01d75fee0f0c02f423063d47720a928a58d2edcd61582ad0c70bfeda75b7d4a2f4387970f848","ssdeep":"384:fYhLSLf4UzgCyKnxRsyPMbOXrEQAkxHOxvqAQD75zfS5vIXm3YzGp/ARdOgHhgzX:ILSLAUzgCpRMbcxHOxvwD7pS5vezy/Ac","tlshash":"8292b3dc3294b0a647ab91a7a07f960eb2335875610e9410f19df2d97c30ef9a13bc79","size":20537,"data":"","first_seen":"2023-03-07T23:52:11Z","last_seen":"2026-04-05T04:15:33.65209Z","times_seen":634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/style.js?v=1.0","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","size":5854,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-04-05T08:07:25.117209Z","times_seen":1749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/addons/datatables.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e914d80b5ee6dae7d6cbf59e91fba3ff","sha1":"52d7c899ecc04cfe474d98fa901f34a20faf7562","sha256":"4b61717c531c14ac9d3d23166e3e92a8b8e63c70f1cf3c194e81e22d1042687c","sha512":"26a0b5856dfae6f5cdd1b1a90b0b375c94ebdfad883997f835bef3c8df4de11da282a1d4f29998fe769b31a7dada4b36f39a76134d0cb542015ac577a8846a5f","ssdeep":"6144:HaB4gqEH64Zs2JDK1LHZlSmsD1yz0amBUWjMLtWHZYDeX0:6B4gDH2M4dlSmMyWjoCmDeX0","tlshash":"f4a4b7c9f34c622a242670b0bd9e66d8a73c903956615cb97c5dc9683f40c3b93b9fd8","size":452722,"data":"","first_seen":"2023-04-13T17:56:30Z","last_seen":"2026-04-05T04:15:33.66631Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f020be84eb22823c19c6f0a251c027cd","sha1":"8367fd01ea4b359f8658c47ac940f3b44c144bda","sha256":"ef1f52f682f420507ebc8f5d0bf15b8983f60b7e7767b69122a36f66f78d59fb","sha512":"10e01a711cfa03529b88b92817e43cab8cc2c1f40142df4169727849b98787b5305f8b4f372dc6efdfdf64faac5c0e66cf9ea159fe95753ac8d93e90d76f335c","ssdeep":"","tlshash":"de510f30a0cc197a03535045a027a58a310fae37e856db5abbbf52826fd7d15e4072fa","size":3084,"data":"","first_seen":"2026-04-04T20:37:24.661692Z","last_seen":"2026-04-04T20:37:24.661692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"544bd1edc02cc6422d6025f16e41b59d","sha1":"7647a744e74820947a5286ef23921cd6770ff54a","sha256":"1c849b1f70e67a94bc9386db91246f05727a26c097d26de34bb7fe16a3385231","sha512":"20ea56ebf8fa44c1c38e208079802828cced793ba0ed814e7fc7586d493b45665b83970d79923504f5ef0905c67e21306fd909bf19487de398566c80abd7bb39","ssdeep":"192:TmC2vs2FucIg+R7Vdh95HjLMHOghfH/Oz8KHVhH6fwhp+V:wo3V7jLGOQOz8Agfwhp+V","tlshash":"f7d1333f412127299027ed5c4bf467138278e466bc6977fe29126a29c7cbb4254f328b","size":6721,"data":"","first_seen":"2026-04-04T20:37:24.662832Z","last_seen":"2026-04-04T20:37:24.662832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/tc/rules.png","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/tc/rules.png HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/assets/css/kt/custom.css\r\nCookie: laravel_session=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%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5042\r\nlast-modified: Thu, 21 Sep 2023 05:51:27 GMT\r\netag: \"650bd9df-13b2\"\r\nexpires: Mon, 04 May 2026 20:36:42 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Fn2Je92jxUaZ3s8HAiKDQI7niccP%2B91%2BcqwA2yeqBixDRPXELoDo0BFowju1QzwQmA7iiLgIiMVfHC8UD1BEHVjNzx2bu5TwWSLQvVo8Mp57hGubfJvrwixh%2B1jFVrjPA%3D%3D\"}]}\r\ncf-ray: 9e731b934cc3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 42, 8-bit/color RGBA, non-interlaced","md5":"044e9037c9c7f47f4158d22be090e001","sha1":"dee10be71f6c6e44917f0c26f75bc664b685abe9","sha256":"ea942bb12b59cbb2ca610e16a408c0aad25dac71c6f551a8e8936ed77b92bdb8","sha512":"4ef3d74c8c7ac3bc30e0aadd6b3f528820cf72b8325cc53c9e0b6fac3da6fa4a98f9f4ad6a77df6f1b91dd5ff314430c79104bf90aa773a3018813e42a5c0b14","ssdeep":"96:odJmQE/H6epituiOrtvW1ip0vu9F1Et/1WOmXCBVJmJ/q5cDjqEgVjS:od4QEmDOrtvW1o93EtnmSB7mVXjqEajS","tlshash":"1fa17db4f58f1d22f7f532ae463f7d42ec618026e1a0e232f6822a84e873591345db75","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-04-04T20:37:24.565717Z","times_seen":13,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/kointoto_lucky-spin_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/kointoto_lucky-spin_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Dec 2021 06:18:54 GMT\r\ncontent-length: 82680\r\netag: \"61caac4e-142f8\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWmtcl6oDcpfVSGBxYh9LQ7crUvYK3tXPWmUVSCHyDIFBR1lbBrHpYOeaW20R%2BptTLwb5RMsLgKzKi1y2xrI42lNshbDbHwGU65DxYPOC0N%2BW%2BvEoEE6uuLWjkcR7GQ%2B4Q%3D%3D\"}]}\r\ncf-ray: 9e731b992d9156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d384d7715e355e9c8dd71d6db20c3607","sha1":"71dc6486387e05c52261ca7aed6b4354fa041421","sha256":"f246c7afbd867b11a1a4b3954530dc94bcfda0fe6948f1b60c2db0c21d5f0ff6","sha512":"4f0721f537fe52bcdd34540d963569c5912abfa388355bfdeaa1d251137b6c80624d05866bd91d6db6c95f737718a1ad0b96330c6e1b4ff7377ce5acdc640d91","ssdeep":"1536:1qaxZYcGu5VjOZF7+jbu3Js7XInn16wmoWRArRuQsrBuQVTk97wUQjKOMPT/X1T8:YIZYeVjUsjbu5szs1lpRuZ0Qe983xMPe","tlshash":"478312f4165d31718ab6ee00c0cb5698453a803ff47ceeb26f6a1907bbd58e70ab7854","first_seen":"2026-04-04T20:37:24.566902Z","last_seen":"2026-04-04T20:37:24.566902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/kointoto_lottry-jowopools_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/kointoto_lottry-jowopools_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Dec 2021 06:18:53 GMT\r\ncontent-length: 102912\r\netag: \"61caac4d-19200\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsgb6l7cNysqANgOvl%2FkDomg7g1TA3U8Db6WeBRVUKlpThjvVYKs9%2FtFdlU6gNkSL5f8TMcwMp%2F3Oio5kds0oSwY3Vu1jTUCLHHOfGTy%2FCsPXZn%2FkLBRih74pM%2BMKU9nNA%3D%3D\"}]}\r\ncf-ray: 9e731b992d9456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102912,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"966d8c2a002b4903752f819ec2d66eaf","sha1":"0bee19e49cc5db76392cfc83f275a68efe28e5ac","sha256":"b0bbbe029e9ccec56f4dcbc1b943475d03c1bf4ce09dea1daf1f1872e01849f6","sha512":"16ab0d180b019f4107594d1188ca193dcee9ae9ffdd02d75999fdfb2cb3e3192d0683513cfbfc72f58339caa9d0ae59abdb09dd486d4fd8a73e57847f4a05f0f","ssdeep":"1536:5jJtPhRvEUj1WErGkWvjadYWxN2pD1HXP6Eo78/lEL5FB09FA2dNHxezcsOX:5jJtPjFZWfkWvjiQRHJFWL5HmxwcsOX","tlshash":"d6a3120a50a021c9c6fdbc075b411b5840d7bd635aa6afd0c21853ece2ef6d7894cdb7","first_seen":"2026-04-04T20:37:24.567952Z","last_seen":"2026-04-04T20:37:24.567952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_123.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_123.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 03:43:23 GMT\r\ncontent-length: 22784\r\netag: \"69ba1f5b-5900\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IijR5b%2Bi7wLb8OkgyFLxHmH%2BPVT8DvQxw9HMAYGMlRh5iv2iNy8ToVySrg6rEJXD9Uagf0rSKX4ci60gVaB7woDf%2BZ1CW1urXaRgw6YwExJhBzNUgsRXj547%2FjcbSK%2B28g%3D%3D\"}]}\r\ncf-ray: 9e731b993da056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da7644fb5bcef199b849dc97f71ee804","sha1":"a700b72c8aeed46a82848cfaa9acf7fcd61a6318","sha256":"fcfb8008baabbe8ab4e518c29a284e5df9a37b339322e9a7cbf3def043f07b6b","sha512":"8fbe9b6d17d6e1bbc35d0b95ff1c2e671ed5f79c5e0ad43daea642464badd97538ff3f6610f607f2b4d8b21547af8125d375dca890b49a0736006f3e4b672fb0","ssdeep":"384:Cw0rKbWIw89xTal12DGAhZgTjeS+TA1eoKNVxlxomoQRzLCwwiH5arkx73gpkKB4:z0rKiIwG9cinhgaS+TCenN7lXzLFZ/7V","tlshash":"37a2e1567f78ee29dd1c20b53c4c2b38e92a3d29de5f8a200451f5518b15fc22ea436f","first_seen":"2026-04-04T20:37:24.569016Z","last_seen":"2026-04-04T20:37:24.569016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150__SM%20T%202026.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150__SM%20T%202026.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Feb 2026 10:45:33 GMT\r\ncontent-length: 31626\r\netag: \"6992f54d-7b8a\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FX6C2SOyEFJw2nF5wDyQoop%2BJEFoH8w8qToq0BQKrwEZs5rxwz4IbhmGpeex3XJUmwkLtjP04ra55myC637xaf1db8AaQDSuMXga7nbIaARee8mdOpqTkSpRQTi42F%2Bpqw%3D%3D\"}]}\r\ncf-ray: 9e731b994da856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d29162b089e1e486d9aa0d7b66292d46","sha1":"ce470e23a35ca89afd5f5407ec75849ea52fd24e","sha256":"0b184adc834936a769907a12661ee3159c9f616c20b578fdab2937a19c5976eb","sha512":"8c9fcd703bbde8b4d50fad4f5c0a871198b5dfc9a19609e73fe18058c1ceb41556ba15558cc44cca32e14b30ad7d9cf0fa3f143f66638a8bc900234c958202d8","ssdeep":"768:4ZjTeWdxmsKt1aMiYqHaU1mqenM+joQ8PP:cjKWdcHHZiR6W2SQ8PP","tlshash":"c2e2f2663e0e5439c8f20ff52052348da1b6bad206f3d25d4e5664857ddcbc8bceb222","first_seen":"2026-04-04T20:37:24.570087Z","last_seen":"2026-04-04T20:37:24.570087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechat-files.com/api/file/lc/main/13527582/0/ec/fa0ba9227639e0145d30e4d07453b596.png","fqdn":"cdn.livechat-files.com","domain":"livechat-files.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:55.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/file/lc/main/13527582/0/ec/fa0ba9227639e0145d30e4d07453b596.png HTTP/1.1\r\nHost: cdn.livechat-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 10988\r\ncontent-type: image/png\r\ndate: Sat, 04 Apr 2026 20:36:55 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 120, 8-bit colormap, non-interlaced","md5":"f37cf8b4c4c9208d27533117566f13cb","sha1":"80158d78bddaafb5f5dc1e0efe0c49670dd74473","sha256":"f53f7b713c1d72907f31ac7bccd0f3f5f9280cb0047a17fedbf1d239d5253b3f","sha512":"90577fe4ddcf20b43c875b7409746ca748658c9ebaa4e6863d52ee730c475d8084b281057ba10db3c3f56d2ea1e5f335584c018c287d57b04ed83b75c87b9e37","ssdeep":"192:uAdJNX7ikkBPvmKQt2jzwbVF29hjgPwiZ2szAjt8FSLghHAZcnNWF/QfJEt5:jdH2hvnu2HkP299qwQjRF6AHAZcnNrfC","tlshash":"8f32b0e3879e0c0490b140e17f7824a753919eff59e6ff1f1b266b10481fe19d8d694a","first_seen":"2025-11-15T10:50:44.064403Z","last_seen":"2026-04-04T20:37:24.570987Z","times_seen":3,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/pandawa88/idnelottery.webp","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 10:48:32 GMT","end":"Thu, 02 Jul 2026 11:47:14 GMT"},"fingerprint":{"sha1":"CB:82:FC:AF:C6:58:D4:6F:13:F4:6C:7E:E7:06:2E:8C:DB:45:A4:8B","sha256":"DA:CC:54:07:F0:B8:3F:12:7D:34:75:25:ED:B7:E7:AA:EC:99:B2:10:E7:9B:78:3A:9A:E5:25:81:FB:E6:02:78"}}},"request":{"raw":"GET /banner/image/pandawa88/idnelottery.webp HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/pandawa88/idnelottery.webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ROKkZwGnRK8hUvPo2YcqBETLoIlB5ghgSBYC3Ov3OxWl20NKEFKKTZObhIQxI63eFW66k7PMzI9Ts9Qz4bzx%2FQq7nsRvqvtvB1QyC0DW4epVNvWuWysY2MA8AhGAa3HkI0B4Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e731b8f3e4e56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3924,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/style.js?v=1.0","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/style.js?v=1.0 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-16de\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 2144\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpUM9yBdt3e3rDaJ6Q%2BVpP0fo256p48esl4t4r7nISH0oWbFrCIEw6vJDIoyNuazX%2BKa8JQrq8FRbs7y7qdzgOfJU4ktZF2AX7lFsBWzjah7S4vwCREHZzw8ZCxbZRnWfw%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc58c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1126)","md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-04-05T08:07:25.117209Z","times_seen":1749,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_pt1603.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_pt1603.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26718\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 16 Mar 2026 10:46:01 GMT\r\netag: \"69b7df69-685e\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MFvtWfsPuVJkA9fS276Q171aF1H92MB%2BQpW13%2F54oFthVb2PLQTT2onYFZ4xTXHBLwjCB2UOf0tAP%2FC6ltNd%2B8gedkkC2CGdEtcXx9m20urNG0XTi01%2FieYYw8jHSdyEXjl\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b99aca00b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6da415f1fa8f28bf97f6b6a15908e51f","sha1":"aa4cb7083d1fd5f41cbd90fd9d26e678f186061c","sha256":"49b1847e1461265f93992d5da67e00105c3c30b0c9ed017fdc2a57ae1030be84","sha512":"4f7dd8fc444164992091227a6027f35a319554657211291135dd6eeb2fa5e3665e2f20ea8dfce55ed423c4f5dbebc0dcba6387b0360dc07dcffa01ce32c3a23f","ssdeep":"768:5mjtpIKZpHzA1cOilnbKF3ikYvg0sdCf3TNL:kjtpdpTucOilnmRidbvTNL","tlshash":"dbc2e1f61b90506cd23057b8b8552bf2de14f443c70b8a6a279eca6f911e82e5879383","first_seen":"2026-04-04T20:37:24.573213Z","last_seen":"2026-04-04T20:37:24.573213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":14,"dns":8,"connect":1,"send":0,"wait":210,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.CmDDbhqB.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.CmDDbhqB.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG29pD8vyqoqDUOZrL5wRea46BGBB5lWxd2TsO96a16ZXeJq9pXLUxuI0nc0ZH1RFkE1wzlsvDI\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\nx-goog-generation: 1775025322384557\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138079\r\nx-goog-hash: crc32c=Z9KKRw==, md5=w7xjh1rzXmQZ6/SZDpoSkQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 43520\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":138079,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48378)","md5":"c3bc63875af35e6419ebf4990e9a1291","sha1":"0e0b7d2dd95abd8f282c722fe3fa4c4c90a275da","sha256":"a9162f8842f5d0b7554ee148f946446e6acbadcb40a2f232c828681a9685582a","sha512":"db8e5b7f70baab09bbd380fc701424bb71a75dd65599fa995333474df2ea5d69baa52da9e4ea25b04c02ca63b6ce80ba5e7467a99c8534719ccfcd45a23cffac","ssdeep":"1536:VgZQ8kK8O9hbCvSPT/FyXb+BzpHxQwXzmyU9zP+M3jYPuCoOTAjyp5pmLWqVWM:VgK8kKB9hbCWBswEwDm93j+tUWbAWqVP","tlshash":"d9d3f9e83951f9626bf312a710af5807b33c192b280c4950a211fdddb9b845eb17bf9d","first_seen":"2026-03-18T09:33:42.057685Z","last_seen":"2026-04-05T07:28:09.74025Z","times_seen":1176,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/pandawa88/idnlive.webp","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 10:48:32 GMT","end":"Thu, 02 Jul 2026 11:47:14 GMT"},"fingerprint":{"sha1":"CB:82:FC:AF:C6:58:D4:6F:13:F4:6C:7E:E7:06:2E:8C:DB:45:A4:8B","sha256":"DA:CC:54:07:F0:B8:3F:12:7D:34:75:25:ED:B7:E7:AA:EC:99:B2:10:E7:9B:78:3A:9A:E5:25:81:FB:E6:02:78"}}},"request":{"raw":"GET /banner/image/pandawa88/idnlive.webp HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/pandawa88/idnlive.webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SET2tF0A8QUIjjPUwJnhQfO8a0%2B6VlLEgF712hlAQb13gDQ5b27cxo34BkNPFFsYtFEb60ix%2FcY9emjqOyrgG9gDpP3eRdCP6nin%2Bpov%2FgnM%2B3SoT3gt7GJ3OhG1IyFTfhVh2g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e731b8f3e4656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":50,"dns":50,"connect":3,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/question-circle.png","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/question-circle.png HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\nlast-modified: Thu, 21 Sep 2023 05:51:27 GMT\r\netag: \"650bd9df-1f5\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSaLICcARb9NuEx4JWPFMoKG6tbYbRvBzNZgamx9RxjCq8njNiET34gc%2F%2FMBgwTLZLQBzl3R8HpS0jqNEiIKX02ojvdl8UdG%2FFnT2ko6L1gDzUYm2EEqTRqSPLduYY%2BdpQ%3D%3D\"}]}\r\ncf-ray: 9e731b91ac94c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"e102424fbf75da8b434fd2d7f1a61a3b","sha1":"2d43794ff38ca907234f99c321c9129365b435b5","sha256":"008afc078aed1490af7d5a31eb6f52d71954b622f31bd7c9b6614e6d4d93fd34","sha512":"1b1e07c20d3cf2366da4b47a344a7e35ef68d8cd239dfd47c6b329802659ca7193cb5bb982809d09e4400dfe74789a25c478aa0a871c3f636a797b7ddd05c2c3","ssdeep":"","tlshash":"dff0f8ebe286ad6aa01e42b680238c2164033e8603249001c42ae87a73138b283c838b","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-04-05T04:15:33.728811Z","times_seen":38,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/PromoBannerPromosi650150.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/PromoBannerPromosi650150.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 27 Oct 2025 05:37:59 GMT\r\ncontent-length: 84910\r\netag: \"68ff0537-14bae\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRGTX8trYz1ugwVGRRTdcEq5NEnKCH73Y%2BywxXQKtYldcjAxwUkynh6EdPcWpBRL%2B%2Bw28aVHHibYvu4kRljCboSxrADY9pyZ1EypcJRInB82vt63vOEYXd6I2NGFbcZDGw%3D%3D\"}]}\r\ncf-ray: 9e731b991d7d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84910,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 650x150, components 3","md5":"76169a72d4f7bcf207eabc4c35da4633","sha1":"654568e73095bf0264d207361b6f3ea519d2fbbc","sha256":"42f00ad72807d7161b7ae21434395346f86aa2c6b5029bb2c62263b7ec9fdf00","sha512":"5ebfad73fc2e4e802e1b7ebe97151a98a14a74c8301857e7697a82936443c36550aaa66acc89d884644012e3f6561f9ccee53dc193f5267e3890b13b941df218","ssdeep":"1536:NAqFGfq+U4zLKkJ7CWtpjU28vmqAD8hM5Wyqzpk074DZhzYqd2/a/JrNBPzs:wfq+UyekJ7Jtu28v/Gtii074bYqtTzs","tlshash":"7d83127d630588ce0fee8e305a813b656212bd1506802ecd3852d02aed7e5f8fad7bd4","first_seen":"2026-04-04T20:37:24.575219Z","last_seen":"2026-04-04T20:37:24.575219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/WLTOTO_Promo%20Proxy%20Betting_MenuPromosifff.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/WLTOTO_Promo%20Proxy%20Betting_MenuPromosifff.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Dec 2025 14:11:44 GMT\r\ncontent-length: 27848\r\netag: \"693c22a0-6cc8\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMry6DQn4oiqYIoIf1AxM6sQbz7DCRnu70FVJvgs9yaINH3Q7%2B3JN%2B7NS%2B5ZWDjvRFsMcAMeH5JuVZiH%2FVNPjxLqMrPrYY590zonbWyMhijZlZzCgme6cR7iDTuOUBTftw%3D%3D\"}]}\r\ncf-ray: 9e731b991d8456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27848,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc3a88cbdc8f652dd1da950b8d5e2feb","sha1":"4f3f622f8b6c094f9bbac9d74ddc986a5557cc9f","sha256":"2d5eac15c2c9bca246bb55442106c0df1f4456c39cbd0a00ae5bc97b9bd99cc4","sha512":"ce460bf086b986c8c9524a01f0f2b2483df5503ad88310df0ae49a8e37066515520d38c726b5c3cf1de979542960a9fe6e6c6c86b09b412fcd3846a2823a07d9","ssdeep":"384:6YNg75YbfKtOwaFNgmA4bJwHyoLIivfSXAHKumTUptZ2GbjG0Bggy90WC09CjvPY:6YyF9mgWwSeHfkmmUA8giWCPrQ","tlshash":"86c2d18efe6ef302d6a4c5b870ee2bd4c3d67609df21be2101214a164589a857fdf05b","first_seen":"2026-04-04T20:37:24.576494Z","last_seen":"2026-04-04T20:37:24.576494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_WEEKLYPROMO_PROMO.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_WEEKLYPROMO_PROMO.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 05:49:34 GMT\r\ncontent-length: 65486\r\netag: \"69c76bee-ffce\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPjCPovON%2FFfmWfl21MASdZ0RJuDhrlvxdJRLCC4wj8%2FV9tXOiOD1vmL1wFU7LowE5fIM2FG0L1ZR%2FHwNf1WelAbaJN9fPPFPTPrWrfzuauAe5qsKnXNvIxBzI23Ca3snA%3D%3D\"}]}\r\ncf-ray: 9e731b993d9f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d8a2d17b4ca061b24b0bbd8e54d0da5","sha1":"db6ece36cae8e7d26f6e98f967bb9b51554e12bd","sha256":"c6a5cb81e8e77275c32ae420e61171f90bc8c15507771864e30ca8fa18749756","sha512":"2dbf1ec0f6855fdec22ff961e51aa1a79c91f9f31f54102ca3e6e185641e57cef26086b053207e128d869881a66a86c4bc1e191b13de2d18c6af30e0874121b2","ssdeep":"1536:eBR8W4HqPbf9xObyJQ6aglq5qPJ1L+0hGOtWU:e78fqj9x8mNlqsR50gWU","tlshash":"1953023b42e51a38f0e2f57871a0d619f38f34987e0ca57bc660461b6d594a44bcf3a7","first_seen":"2026-04-04T20:37:24.577326Z","last_seen":"2026-04-04T20:37:24.577326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_hb.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_hb.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 02:58:12 GMT\r\ncontent-length: 49966\r\netag: \"698bf044-c32e\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cy7njZisQa9e2wC2gMxfQn2kLgQNc6oqq%2BMV5ftOhUkcU5SUJtDgIP%2BQlkT1Bgq%2FICR9BaWDSL9uteGiB2DguhfUNDGUUtVjnE8PN1P5WZlcFkKXdDYGsALzqr5d2PKyYw%3D%3D\"}]}\r\ncf-ray: 9e731b996dab56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a32e788e5d1bd8fe61fa102a8ecac66","sha1":"d17ce35a5b9038d0432e0f74dc3db8bedbf738fa","sha256":"5bc6b36af2fbc009258faa129c84dde00dbfdc551f9d9c8ece1bf98e97601157","sha512":"72a61ed4ca74bae02bb64ecc8ab227205e30b91ca1c8fe46a35ec84c453ad22ad655611ce22aaa376d08c2c1834e284c486380798341351a4da66b24f40ec88e","ssdeep":"1536:FG8a8Yi6Usf5dxLlFTpZ7G17SRQyOHkqxo:ta8fjoT/76RyOtS","tlshash":"2223f1f4a3b19887ff90aeb40594292cdb4f722f7387c2953118845e93edde7089248c","first_seen":"2026-04-04T20:37:24.578273Z","last_seen":"2026-04-04T20:37:24.578273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/KOINTOTO_BannerEvent_BombGacorBonanza_Menu%20Promosi%20Web.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/KOINTOTO_BannerEvent_BombGacorBonanza_Menu%20Promosi%20Web.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 14 Oct 2023 08:30:49 GMT\r\ncontent-length: 26102\r\netag: \"652a51b9-65f6\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyDfI2IGj77mC%2BNMVpmwnAkqGbw5%2BpvQXwIg5595Dsrq1F%2FCjcMhH23uT8%2BiqNK9TS3sYfmZtjSAjfkq4si0vJkjYlbQJ4mw6dTPb36hLELS9%2FfHxJAOYV9vmiScD%2BeuwQ%3D%3D\"}]}\r\ncf-ray: 9e731b992d8b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6165a45f790e12fc8bc0c4cf4a8dc5b","sha1":"6b35178c959d113360d76dc2613fab394c8c46af","sha256":"b4070fb116e511ed9ce0f8e67e435fcf3ee4130ea194027f8cbe554e7d47d9ba","sha512":"c7d624f9b17ff029e08997a832fc963f5b9997a93844f699e9a83019f0df6bb0d963cb2943c4cccc2a16c74fb78e8e427e2ec84573323f7faa1ae005be135dce","ssdeep":"768:OERbIhBK5vti5869vWWBGKa1TfzVEt+H8qiVBA401gNGrG:OERbIh0yvWWBGKWTCwiVyj1gNH","tlshash":"91c2e1d95a0661e2cf4e5c0e49e9b8161776c3005abcf6f5400e7e74ceb62d0c6b65cd","first_seen":"2026-04-04T20:37:24.579094Z","last_seen":"2026-04-04T20:37:24.579094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_IDNLottery_Menupromo1.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_IDNLottery_Menupromo1.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 08:39:17 GMT\r\ncontent-length: 55406\r\netag: \"69c4f0b5-d86e\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fm%2BRL4%2Bf1q7Q5Ovc6sTxuXFXi4URv1VtmZGMALn6fvL7dUvMKZAuuyj5TDLbQW3dZ0ILkeM64Tk1PsYUar%2Bu2OvyVdgJSBCi2lhIrAckQ9j6zRLv2qXN21PXOmU8zj4qLQ%3D%3D\"}]}\r\ncf-ray: 9e731b993d9e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fac3c4d9e286acf7ac508fdf611c07e7","sha1":"4661ed2bfe0707e4a30610993134994c5492699d","sha256":"931764f3334d09afe8b5492e3b15acc7349a262280c5259c23e3cd848efd7931","sha512":"d021275956b30dbce2be92506a344c3fd2f558037dfc1704330f2f94d51fa2a3b7ea1423fdc65cab334b116405670d4d95d955791bececbbaba109ad17dbcf5f","ssdeep":"1536:HkB5rVYMeS9zKQ+P0sCqQiuUcfSR/Nq7eIwZ2:HkBFVle+zK4sDtc4CSZ2","tlshash":"8a4302bce9c24786f742e37958b3ec34d7e3693a932114c0a528d5e33c97ae82376581","first_seen":"2026-04-04T20:37:24.58038Z","last_seen":"2026-04-04T20:37:24.58038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3Ae67GQbAzQ3LO8P-UFOtZT3aebHvJ1HkHk9JzWqtAt0TUgIVxYRCmqsJdjokArtHFHQTdbrpczlxmYg\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1775025322322354\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-04-05T08:32:06.774746Z","times_seen":10731,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/font-awesome.min.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/font-awesome.min.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:06:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf96b-7918\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 7050\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhcdzWCLRchl8ffx3BU%2BTz2Vfx7vnWNuqjUwBmaPuCxlHsN9K%2BLeIzlWgcD5x86wcDyowTvwimk4LV26eugDR8g7vNENvPynmbKC7rvS9P1iP47Ym3873eHUVEJreI5xjQ%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c45c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-05T07:48:19.001172Z","times_seen":237073,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/css/marquee.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /css/marquee.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=eyJpdiI6IlZCRTg5eDRSSmpzcmNYdStYSzBvYlE9PSIsInZhbHVlIjoiU2lYTXVYUVJPV016T3JnTnZERTJMcFU1eDlqZlplQUlwclVlTDVaaitaRG1NcGYxVFVZNmZ4ak9JNmFvaGJTOS9RTCtPTTFoMlRVcmpjZDFBKzNOdkI3alYyZmtkNjNqVXNxVFFCZDBRVUlwR0F5QnBPMisrajkvbVp4SXVDd0kzMzZwQ1NVMXpKQ1VRK1IyZFN3SGtiVVdoTmhEQ0RsR0EzbzIrUm04N3kzcWFIZzMvenJ0QTRNcGhVVXlVV20zbWhrRlRoa0EweWVoNzF2YW9hRnpPUnIySDJGZDE2QklBQnJhNm1BNC9hR0tNdk01cnArTDA3QUU4N1dxUGlycit1NDFYbFhLUkJjUnhicHZKRGVlU3pjVWRVRHZEcW5uSHEvUjNwTFArWC9uV01EcnJuZ1hQYUU4V0ZjZGlWdEJ3VWhVaEZ2WGptM2ZqSi9XZXdFNDBlQzJzRFo3T0dXd0s1OWMwYVVCOWZYQXZnSjJEQ0YzMWliR0dOY1p4eDJablhBWlllWEFDYUtGVUgzaWZXaHRLOE9KTWJJZWkrMVR3YzYxMU5LbHIwYml5UUxMcXQrWGpRcC9ZMzRBSHdDQys0QkV3aWxqWklVd0VhSGNTNXFST0xEMm1GbC8rWU1ETThjNjJOa2dYVHduU0t5V0NDUkdWL09iUHA1RThiWHQiLCJtYWMiOiI5MWNkMWZlOGNkYTY4Yzc5NDJjNTRhOTE0YjI0NjgwNTRjM2Y1MjIzNDBjNmFiOGFmNjRmYTUwZGI2ZTE4MGU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-89f\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 674\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZpiXvNvUK6zaXwCAjkmT2y06nSs0DgXJttjywMbifqMux6JE%2BuCoiUveDE0Ijk6wlHqDPpvEkzYN3Zt03k%2BJB59gOYPBRD0LMuh%2FT7KYY16%2F4M51ZzItBsBK3ZxxOntgg%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c47c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ccc75e363025d110b5985afa3187b43","sha1":"25460557a798bd582563b4a937bd8e818396c4b7","sha256":"2d2a7ab1708e5aeee4123d037d8484e9e4c3cca489b4b6b3b931143911403134","sha512":"abd2c4ba7445f3c380036c26a2498d990d9f9103fee6d5f67d5aa489f5a7531affc35dd6fd27e9269d5d804aa36870c3cde5d4182eaf968f9d13839e24f900b2","ssdeep":"","tlshash":"ae41f29b05171d04260bf4842f794201652d8403a28ed9aebea922ccfffa245d1a3acb","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-04-05T04:44:51.215541Z","times_seen":1548,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/css/components/loader.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /css/components/loader.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-b86\"\r\nexpires: Mon, 04 May 2026 20:36:42 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 1028\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2iiH57DVcKU0i8d4GNDWFNqknhNoPn1JSJHJBFhqbCNwLw3ULJAyuFrqzjlIQAZ9uA%2BZln9WORPv92%2Ffb4bibW77NcRVIbMOE%2Bdin4SV%2Fb%2BGyzY7Ob%2F2BWz8LmmAT3b8w%3D%3D\"}]}\r\ncf-ray: 9e731b959d69c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2950), with no line terminators","md5":"f81874edee808f64a81f1c1994902cbb","sha1":"3077fa00bc4fe56438a060eefcea27e910563c74","sha256":"2f75efe3c598d795e95fade1746451bb15e1e950724f34155195d4d6e93180ae","sha512":"58e8cff6f6ac4cf5e774156acbce75317be115694ab77006b157fbf8beff629b6f0a70421cd8535f937e0385091998263e9c3e36b11a5f0624711e5d709df6e2","ssdeep":"","tlshash":"025133390a025411c157cf9261c57f69042ee9276a334d5ff2087bdcc7e295d23a5f9e","first_seen":"2023-04-13T17:56:31Z","last_seen":"2026-04-05T04:44:51.191503Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.DDJgJSMw.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.DDJgJSMw.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3-Bbk08hxNwkYjohhVcprtcXkVFIw-EVU5oJLAxE7wGrBv8qO_qQc4G9jMeWfJaHcxLbl3HLGJZn7p-Q\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\nx-goog-generation: 1775025322371584\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1189\r\nx-goog-hash: crc32c=X0+BTQ==, md5=CBg5idm8UF6CIVuW0VgVEg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 676\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"08183989d9bc505e82215b96d1581512","sha1":"1c0eab7cbf49c114ba686578f1fc1e6a32fa68b4","sha256":"30f5c6a4e57eae1f47d3c20ddc27f78d616094e519d1ded2eea87106fe08b34e","sha512":"3ff2c6ed74f219c420e45447b522a7155ec27f869fbb273ba1a1406400192e596da71dc5e5ab60910c447eada553545a96a0d1dd57cf7c6c307a7cc57ee5b01b","ssdeep":"","tlshash":"602121d91dc3d430d33c48e902e5889e697c8ea4e1ee01e0d9946dc67f20960667fead","first_seen":"2026-03-19T10:33:28.754436Z","last_seen":"2026-04-05T07:28:09.863297Z","times_seen":1121,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3PlVFIm5B2_LsiqHj4oOuzk17qKNDpr8r3cpXDovkFrEXk8EkeEZyEpKjC1tV3gpKvd_0if3g\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1775025322306617\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-04-05T07:54:59.870163Z","times_seen":23466,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/kt/qr_barcode.webp?v=1775335011","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/kt/qr_barcode.webp?v=1775335011 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=eyJpdiI6IlZCRTg5eDRSSmpzcmNYdStYSzBvYlE9PSIsInZhbHVlIjoiU2lYTXVYUVJPV016T3JnTnZERTJMcFU1eDlqZlplQUlwclVlTDVaaitaRG1NcGYxVFVZNmZ4ak9JNmFvaGJTOS9RTCtPTTFoMlRVcmpjZDFBKzNOdkI3alYyZmtkNjNqVXNxVFFCZDBRVUlwR0F5QnBPMisrajkvbVp4SXVDd0kzMzZwQ1NVMXpKQ1VRK1IyZFN3SGtiVVdoTmhEQ0RsR0EzbzIrUm04N3kzcWFIZzMvenJ0QTRNcGhVVXlVV20zbWhrRlRoa0EweWVoNzF2YW9hRnpPUnIySDJGZDE2QklBQnJhNm1BNC9hR0tNdk01cnArTDA3QUU4N1dxUGlycit1NDFYbFhLUkJjUnhicHZKRGVlU3pjVWRVRHZEcW5uSHEvUjNwTFArWC9uV01EcnJuZ1hQYUU4V0ZjZGlWdEJ3VWhVaEZ2WGptM2ZqSi9XZXdFNDBlQzJzRFo3T0dXd0s1OWMwYVVCOWZYQXZnSjJEQ0YzMWliR0dOY1p4eDJablhBWlllWEFDYUtGVUgzaWZXaHRLOE9KTWJJZWkrMVR3YzYxMU5LbHIwYml5UUxMcXQrWGpRcC9ZMzRBSHdDQys0QkV3aWxqWklVd0VhSGNTNXFST0xEMm1GbC8rWU1ETThjNjJOa2dYVHduU0t5V0NDUkdWL09iUHA1RThiWHQiLCJtYWMiOiI5MWNkMWZlOGNkYTY4Yzc5NDJjNTRhOTE0YjI0NjgwNTRjM2Y1MjIzNDBjNmFiOGFmNjRmYTUwZGI2ZTE4MGU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2602\r\nlast-modified: Mon, 23 Sep 2024 03:36:37 GMT\r\netag: \"66f0e245-a2a\"\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Blvf0Q6j%2FxHTgJBgnbrXUfEBwErxsoZIZRMRM427ir2Oe3Jobsgl0igs7A0CiDqEaepVsnOZu%2FmEjwiUTstlbWoPKsKEyShQ9BnQMXDLl58SicpKdbFgl2WI6JxPqKK%2FZw%3D%3D\"}]}\r\ncf-ray: 9e731b8eac4dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ad241facb68267be2ebf37bedaf36dd4","sha1":"29f67954a95069f3f14bd35df527b50825ca165f","sha256":"29b4a64dbb7ba07f8ebf87ae17e578c25d812fc4df15a363630d622dbd2ea6f2","sha512":"ba73ef710a1c1e97907418fa709a9411eb1090af36811345d259ea4527f4a9827ffe116ed10fc7d6383bbb7117085b02d055227ced42474a3a168628ac37aad3","ssdeep":"","tlshash":"0b513a8354cdeb79d06feff9c5bc3d42901945acab51882d2de0647cb2905b4ee88e8d","first_seen":"2025-11-15T10:50:44.070104Z","last_seen":"2026-04-04T20:37:24.58455Z","times_seen":3,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/wlb2c/bank/voucher88.png","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/wlb2c/bank/voucher88.png HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=eyJpdiI6IlZCRTg5eDRSSmpzcmNYdStYSzBvYlE9PSIsInZhbHVlIjoiU2lYTXVYUVJPV016T3JnTnZERTJMcFU1eDlqZlplQUlwclVlTDVaaitaRG1NcGYxVFVZNmZ4ak9JNmFvaGJTOS9RTCtPTTFoMlRVcmpjZDFBKzNOdkI3alYyZmtkNjNqVXNxVFFCZDBRVUlwR0F5QnBPMisrajkvbVp4SXVDd0kzMzZwQ1NVMXpKQ1VRK1IyZFN3SGtiVVdoTmhEQ0RsR0EzbzIrUm04N3kzcWFIZzMvenJ0QTRNcGhVVXlVV20zbWhrRlRoa0EweWVoNzF2YW9hRnpPUnIySDJGZDE2QklBQnJhNm1BNC9hR0tNdk01cnArTDA3QUU4N1dxUGlycit1NDFYbFhLUkJjUnhicHZKRGVlU3pjVWRVRHZEcW5uSHEvUjNwTFArWC9uV01EcnJuZ1hQYUU4V0ZjZGlWdEJ3VWhVaEZ2WGptM2ZqSi9XZXdFNDBlQzJzRFo3T0dXd0s1OWMwYVVCOWZYQXZnSjJEQ0YzMWliR0dOY1p4eDJablhBWlllWEFDYUtGVUgzaWZXaHRLOE9KTWJJZWkrMVR3YzYxMU5LbHIwYml5UUxMcXQrWGpRcC9ZMzRBSHdDQys0QkV3aWxqWklVd0VhSGNTNXFST0xEMm1GbC8rWU1ETThjNjJOa2dYVHduU0t5V0NDUkdWL09iUHA1RThiWHQiLCJtYWMiOiI5MWNkMWZlOGNkYTY4Yzc5NDJjNTRhOTE0YjI0NjgwNTRjM2Y1MjIzNDBjNmFiOGFmNjRmYTUwZGI2ZTE4MGU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3604\r\nlast-modified: Mon, 23 Sep 2024 03:36:37 GMT\r\netag: \"66f0e245-e14\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=st6gWmJiNd0sQg3OAK%2FkV%2BsSrVev7C3zHjqcBv9Ggyy0YwtlPfudlL40b10rx22ADapeIRVEuu0lt7%2FNlk%2BGhSQ4C%2Bt5gB%2FSXIZNadEiySkNYHT5IWcVn9W3jS7i%2BYGL9A%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc51c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 24, 8-bit/color RGBA, non-interlaced","md5":"9d814f7c7e6264b7d82300b5b06253d9","sha1":"24160109aa31a28d3094c7939f91bc758f4796dc","sha256":"fcf46ed167b231d93c1d9beb502957b59192fbca7d335ed7bddab3d704cc4c11","sha512":"4a74fa827383df5a7375365b261ed8ad176d21c551959bf98a2badb88c63a00e015aa6092e20d71c990b2c970e6332fac0897cf451050dcaac93d2180a2c41d4","ssdeep":"","tlshash":"96714ee6552251c751e06b80be6e414bd0b037f91e2d7a3494468746276b7e2b41ce47","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-04-04T20:37:24.585483Z","times_seen":13,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v26/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/muli/v26/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kointt-alt.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:04:44 GMT\r\nexpires: Sun, 04 Apr 2027 02:04:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66729\r\nlast-modified: Thu, 03 Feb 2022 00:37:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16828, version 1.0","md5":"705bcc4dd1c37efca70d440041d944e8","sha1":"46d82205643433da37893569b54b8dfd8f5096d4","sha256":"997b911237bf1ba3ae866d21754fd8e3873582aece25276fbb6b4877a61e1a80","sha512":"24589548f924b189b6d8ef2b27ce7f9865acedb574d5121a97aad1f1cf7217a6f66dee32c0b2e64d072e8a9f8ccb44efdd2a1aae5e2cb59761215be136b3de5f","ssdeep":"384:wy8xBlzgLPMe5SbEpFsQHRScUg/F/2lj2QlAIYNKwVe5DZTd:pIBlz8PlSIPsUUg/J2ltkKXZZ","tlshash":"cf72e1fa74d0cd839b3ca9f893e6176020918b5c064f64a32fcc59f60fd5155a988c39","first_seen":"2023-04-18T08:25:09Z","last_seen":"2026-04-04T20:37:24.586278Z","times_seen":135,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":50,"dns":1,"connect":8,"send":0,"wait":9,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/TOTO_TURNAMEN%20POOLS%20TOTO%20LEBARAN_MENU%20PROMOSI%20WEB%20.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/TOTO_TURNAMEN%20POOLS%20TOTO%20LEBARAN_MENU%20PROMOSI%20WEB%20.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Feb 2026 20:35:11 GMT\r\ncontent-length: 20800\r\netag: \"699b687f-5140\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6wXumiE4p4cEzciRPcFt%2BdqiG%2F9yrKWzmUHG9GrUHdMOPDlzaDqtucQlX2ciL5g6ugbioZmx84gv42Q00EX3sNzFiXzbYKFqaVMBFvAH2qkR6ZEMt%2FwsQSQbihnCDCu3Q%3D%3D\"}]}\r\ncf-ray: 9e731b991d7e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20800,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7238ca486d6026bb37ee523cabfb3509","sha1":"906caea161ef6998db71029fba31a8039aa44f50","sha256":"226c4145ed36494adb5c5ce348730025a78ded1e768eb3a2e8e54ef22b5eb06b","sha512":"0ca3adeb62cdbd28d4064dc9659fe153aa380c979cfce1b38e01e7a717b07456503c363624a58c090ea240e8baa35097d13b32aaad71cb938a8ee74affadc112","ssdeep":"384:SYNg7SdOhiKFmtn1s6UJ8LEX1eplLSD3TEYPSNuj1Z+BA:SYyzh7+1jUJ8L8P3Ssjb8A","tlshash":"c392e0e4bd7592e6c610f77418d0af7446a2a265531a3da94210fdf2c34fa882c8fbcd","first_seen":"2026-04-04T20:37:24.587526Z","last_seen":"2026-04-04T20:37:24.587526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/kointoto_bonus%20bandar_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/kointoto_bonus%20bandar_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 25 Feb 2022 09:49:17 GMT\r\ncontent-length: 16598\r\netag: \"6218a61d-40d6\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oAmVzjKPxs0%2FWBAben2%2BK7%2BQqcAM8FoWKS5Yt3bR75tqL1b1dIRL21G0VxBwYpQWhokF3NR%2FskW7QdckmtZS0x4%2FRb8JsLRJs24eVqLbcKQc1ldd4UFE82f83TOOThmqw%3D%3D\"}]}\r\ncf-ray: 9e731b992d9056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"931b2740cc823c6eaaf2cc1ab99ed847","sha1":"1b50c3f8e5299866f55cc2b4d6759387627bb90a","sha256":"ed867c11ab0f9f663ca9b30a071421c71baf94802097d7abbfad436bd5b27223","sha512":"8a1650eccd27fbdce1a49d24b063d8481d0c2d2d635b47bf31ffe29d7e1069cf77e2266d33a3e32171f92a6ca4da09f44e6ad785c1e1884e6721751e09a5c360","ssdeep":"384:4+5364uUcjRd2eHaSWTl/mTvsDZQ5foGRaJ0a9v7PRYd9UPY1E:4+xfT0z2mb6l/Es1Q5gGRavy1E","tlshash":"8472d03690e74a24e1806e9a126370dcb8585b9c34dbc2bc56d07c9a70d3cbb0fd2583","first_seen":"2026-04-04T20:37:24.588506Z","last_seen":"2026-04-04T20:37:24.588506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/WLB2CTOTO_650%20x%20150__SM_CN.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150__SM_CN.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26198\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 16 Mar 2026 10:40:20 GMT\r\netag: \"69b7de14-6656\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NtOykXX76B9jDmYyDrJmTnIbTshnFh%2BfOWN6wc5YLJfg6kJBkdZvjKrJncWiOq6tsk1XL8hc48Gw2FKrE6WM89pQ0OFez%2FvQRZdPG0qJMDWIPfa0AdpLGSi7agHbrLVFbB0\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b999c9c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"708dc4c7406f3e4b17532b33b9112c94","sha1":"461f155480893daa45beb4f880d64673550d1715","sha256":"fca5798d1a48b2bfaf7693b31fa2c6c4c693b53beffcc64df44306828f19af47","sha512":"5c8f29a81f879560ead1caec8996bf3dab17631d810e8ba795a24f99f07b8c44082784d8558174adc2684781836a5b66467560857c64043b56c12974254f729e","ssdeep":"768:/Ne6M37Q7q2vPStabNCWue3xn0IlOvS7rd:ws7q2XTIWuUKJSHd","tlshash":"c9c2e1e233c1a1aafd776773fb8b71d0f89a501528f1e3fd518a26979891f923445900","first_seen":"2026-04-04T20:37:24.589205Z","last_seen":"2026-04-04T20:37:24.589205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":204,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_pplm.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_pplm.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41466\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 16 Feb 2026 09:12:12 GMT\r\netag: \"6992df6c-a1fa\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hgT4tDWDdnn%2BpWm7FeFByVBH3heuDsIVT5S8X9DQCWZlT%2FehEBWlE6YtRjjnm%2BuJi7c8iZ%2FFt3uM32ixIVCy2yIoCJDAnlfvCpZ0WZV1ZYCN%2F54O6Nze5Dkg98md4UTj3XBd\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b999c9e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58226139b74e1ee8593908eb125e0c88","sha1":"d50f830ea29e9ee4def33b754d49f61e4b1ace05","sha256":"fcda735f5388a58c2c6af2da99372b3e8f5a759d2095c2d0bcb610cfec3f70a2","sha512":"7c76665476ab1326bbf4b06b9951cea2bcb1ed520d9b942f1b59d395febfc3f05f9d36e38726a81004db2ae2ee10fc906cff0a8f099b6d9d846942bb504c2913","ssdeep":"768:+ttDkE1wAJ8xeOGQaEdddFUaSNATJic7kLzOFJEQ7Lbn9Fm+fWco:ItDkE3WqE5+0Jic7k2FJXfm+ffo","tlshash":"8a1301b862473eacfd1ee7759bf90d6c60fe13b9923608988054c7c72be924c44a941e","first_seen":"2026-04-04T20:37:24.589936Z","last_seen":"2026-04-04T20:37:24.589936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":192,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/telephone.png","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/telephone.png HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 799\r\nlast-modified: Thu, 21 Sep 2023 05:51:27 GMT\r\netag: \"650bd9df-31f\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAusAnzHJcYqeqxZlTHUG5kQJ0t2ozlvFgAVrgpdyUL%2Bh00H5gKjegld3Cb%2Blj04rJj8n2DFNU%2FtKFB1RP63NvraE24yVfz9bnJzvRK0M%2BVJ7GtnsuchMfmQGVtRpk623g%3D%3D\"}]}\r\ncf-ray: 9e731b91ac91c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit colormap, non-interlaced","md5":"34a5002428dde2c1cbcf0538918c166a","sha1":"6cfd52fbccd1b84374d2bb219d64decf232156df","sha256":"a95ad092949a001b5410519f923a6373d6ebf6f16e3d399bd2ed6a5504090b46","sha512":"fe4b43a33c5b9867b66d5132c29d2fdd7f5db3bae5f89caf9e01c7ddea4de73c258c3a00f522a6f280145771c790e83018a7af538148b9a8761c6657240eea9e","ssdeep":"","tlshash":"3e01759ecf9498f24c940908f31e0d4124c3fe0d43558c4a2e42d871372f1054654b23","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-04-05T04:15:33.653388Z","times_seen":38,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/assets/css/font-awesome.min.css\r\nCookie: laravel_session=eyJpdiI6IlZCRTg5eDRSSmpzcmNYdStYSzBvYlE9PSIsInZhbHVlIjoiU2lYTXVYUVJPV016T3JnTnZERTJMcFU1eDlqZlplQUlwclVlTDVaaitaRG1NcGYxVFVZNmZ4ak9JNmFvaGJTOS9RTCtPTTFoMlRVcmpjZDFBKzNOdkI3alYyZmtkNjNqVXNxVFFCZDBRVUlwR0F5QnBPMisrajkvbVp4SXVDd0kzMzZwQ1NVMXpKQ1VRK1IyZFN3SGtiVVdoTmhEQ0RsR0EzbzIrUm04N3kzcWFIZzMvenJ0QTRNcGhVVXlVV20zbWhrRlRoa0EweWVoNzF2YW9hRnpPUnIySDJGZDE2QklBQnJhNm1BNC9hR0tNdk01cnArTDA3QUU4N1dxUGlycit1NDFYbFhLUkJjUnhicHZKRGVlU3pjVWRVRHZEcW5uSHEvUjNwTFArWC9uV01EcnJuZ1hQYUU4V0ZjZGlWdEJ3VWhVaEZ2WGptM2ZqSi9XZXdFNDBlQzJzRFo3T0dXd0s1OWMwYVVCOWZYQXZnSjJEQ0YzMWliR0dOY1p4eDJablhBWlllWEFDYUtGVUgzaWZXaHRLOE9KTWJJZWkrMVR3YzYxMU5LbHIwYml5UUxMcXQrWGpRcC9ZMzRBSHdDQys0QkV3aWxqWklVd0VhSGNTNXFST0xEMm1GbC8rWU1ETThjNjJOa2dYVHduU0t5V0NDUkdWL09iUHA1RThiWHQiLCJtYWMiOiI5MWNkMWZlOGNkYTY4Yzc5NDJjNTRhOTE0YjI0NjgwNTRjM2Y1MjIzNDBjNmFiOGFmNjRmYTUwZGI2ZTE4MGU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\netag: \"66f0d1c9-12d68\"\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i140FWMzQOnRyGE5NpIe7TJn1newprm9JlSSavSUl%2Bro7eMPR%2BFn3frlAaFt4QxDCzfmJU1OHku4I3bU3Khvh%2FlsfMfKyafCVW%2B4AAY8T12qVt%2FU78lNfUmXT4U%2BQFoDTA%3D%3D\"}]}\r\ncf-ray: 9e731b920caec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-05T07:47:27.558482Z","times_seen":412157,"resource_available":true,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/TOTO_Cashback_Bettingg_menupromosifff.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/TOTO_Cashback_Bettingg_menupromosifff.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Dec 2025 14:10:38 GMT\r\ncontent-length: 25904\r\netag: \"693c225e-6530\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZBGJ8EZjXz1uqw90zvBXdVDqstCsX1MxffrbBfg15uFUsEBNpLlP2S60rOAfJGxaV3roCKwg9KxgTObU1xIEIQWy8g3u%2BvN38Sh2st7mFFrkcEnVdNdyGdJaxlBRkOTCQ%3D%3D\"}]}\r\ncf-ray: 9e731b991d8256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2cf511f462364dbcd509291e19734919","sha1":"bf089e6417d26004fed80faf98cdd13306d22d88","sha256":"8496aeb3d5a07e601caeb820f7346e3f73a0899543ff7e60f861b56006a460b1","sha512":"d0e8fa99c5499b18b8e580ab2255b198f4c9e5889fe0785d6ab0a5683c917c37634b302c6e04478ff57d4d8ac9130f63743e67efcf8ddd026d50fe994f740d34","ssdeep":"768:lYyJoFgFfNU9UaYysCAN1T4cnmuz+Vp9hKs:ldoOFFU9UaLsCRZ7Us","tlshash":"17c2e034ee720b25d477eb382ef5fbc93234561c8bf633855160975b0297b8a52c6ad0","first_seen":"2026-04-04T20:37:24.591699Z","last_seen":"2026-04-04T20:37:24.591699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/kt/mdb.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/kt/mdb.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BR9N3zt7jtRowP6PYxkfZp89k5Ufq9i6PrgEbmKucaV0fzDuOLnvRv9ELT5aBgrcTZnXmSKmN8bgKcyMt0h9lPvEo%2BJMEKqLt%2Fxw6Nef8ZBInG8V2MuXz95wBFQxNR9NQ%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c3fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T07:47:47.779011Z","times_seen":479204,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/kt/kt.css?v=hd7buzlfkdnkkorfr9av","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/kt/kt.css?v=hd7buzlfkdnkkorfr9av HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRKJG8U306F638NP0bUA3ONnVnej4Te4dhaa3toXxfd8Ih5JQGGN55Fac8tJiW7FXA5acU5TImbGeKtT43UcR7nF0j9pMAjHbAzBeXN6wGdBZg6XNktE026pzvScnYouCA%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c42c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T07:47:47.779011Z","times_seen":479204,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/js/auth/login.js?v=1775335011","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /js/auth/login.js?v=1775335011 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Dec 2025 02:26:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6943663f-1a66b\"\r\nexpires: Mon, 04 May 2026 20:36:51 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alBZr8qG0A8To4frS6AFnzcs8IU%2FdW8DIbAH83PqC2fAumkvkYi3y4Pbhx5mSRnYI5uw32XiOhbSFWNOKysG8fVW0%2B94H05X6euD27m62YhyTOEdPnsKKgVt3NU169uYzw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e731b8f3c62c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65357), with no line terminators","md5":"8a4b15ed3f06513dae99cc4235a6ec08","sha1":"cb40060815eb3dbf9447f934cadd04bcb859474d","sha256":"4d83408d7af18fde2333ba7cb69812fcbe1a7ee412514d12f51edc5055a03e08","sha512":"a052e76051b1e017563a96a5ee7f9fa80e86055cf81895cd0097321e076514075399ec1a6d2ebef927c124bafb647c34dd21eb38b596b9c842a6d695ccf76962","ssdeep":"1536:pJbZ8DgaIucWkVQfRVeiLxHg1SFkQr+X5grRaL8sMw+pN:pJzWkVaVeiRg1SFk6Hr8L8j","tlshash":"cab38b84b182743757eb44a960aad208f2655405fc234c54f72cc9d19fabd8fa1b3fba","first_seen":"2025-12-18T02:47:54.07807Z","last_seen":"2026-04-05T08:07:25.146684Z","times_seen":334,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/TOTO_VIND.ID_MENU%20PROMOSI%20WEB%20.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/TOTO_VIND.ID_MENU%20PROMOSI%20WEB%20.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 10:10:12 GMT\r\ncontent-length: 19442\r\netag: \"69807804-4bf2\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NthQZCsVWsv%2B6O81g%2F%2B80X%2BZ%2F4Bo3PAPcHML8hUHHiixPXISz3NOha0Vz7U2Mqt58J%2FbD9V0Y%2F%2BBA4CaOBnoWTAezvuJLqhooQ7rrx29TOplikVqkN7Zkq3pNE9ZopWCA%3D%3D\"}]}\r\ncf-ray: 9e731b991d8056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07e9db3709d48f789863e19cd887716b","sha1":"e38352870429f3f9bb497b04b0e06e386512b3c4","sha256":"7c33e6eb36b02086c7475608f4646c9c30da8db8bccb8d929f3adfdf8ebc3aa1","sha512":"32278c66a7ea0a4969a4dea60fb090164bafbdd31b8a55282eb278857c6c5300a426e3e31b0c919167f352f0d9c51dea5d3c07288155d7028ebecaab5dcfe019","ssdeep":"384:WYNg7GLa5xtYR6gUAaY4bSMIgmCgO6V05pmmDBvZV39PieFv6h:WYygixo6oxMI9gpmaB32h","tlshash":"fc92d0aebf1aa433d336f9786db54b14439a3329a3326372b874771981813e5f64e046","first_seen":"2026-04-04T20:37:24.593371Z","last_seen":"2026-04-04T20:37:24.593371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_ppdw.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_ppdw.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 30 Mar 2026 09:51:54 GMT\r\ncontent-length: 63214\r\netag: \"69ca47ba-f6ee\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUSKKZ3JBhcjKBCfB%2FC6%2B4VAH8vU9OFL3s71SCwbg2embcp2Kt8%2FNRY81v1e5mtsn83bO4bLj91oiQ9EByhT0V1nesgG6xJAsadPSL6YL9HFS8mixecaCZXqocThgf2Q5A%3D%3D\"}]}\r\ncf-ray: 9e731b993d9d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a36a7578387c7cfb34e752ae08e515a","sha1":"42032e8cebaf2b9a7e498dbf12e29589ab09fd8e","sha256":"209d3da4920c97bcd160b59db4fd617fea0f86e8cdb65f7c12e4b71e09b6abf2","sha512":"139919413322f8ce074792b28525922c9cac46e9eafff0eaec209e12b7837f49fe6229583a70a95aa132378ec111296fefcd479f214912240446a6f17c3f437e","ssdeep":"1536:Day+0DTfRRxks7TKKMEJW/EhI/MP++Z8T6YLwRg3IIPJw:UGOWTbXW/EhI/MTZ8T/wRoy","tlshash":"ad53023f522a4954f26f14fb0406da0e2fe5e7c2d7084ae6319a74162c382eb89e55fc","first_seen":"2026-04-04T20:37:24.59415Z","last_seen":"2026-04-04T20:37:24.59415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_nlc123.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_nlc123.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Mar 2026 11:45:43 GMT\r\ncontent-length: 53696\r\netag: \"69b155e7-d1c0\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pis3osmVNadWGz%2FJH5L6YuIKOCXIeieCYMDTLvHUMY%2BFHD8X%2BfJTnk2kvbRYKpwGaBNgwMo8Lt0BnYJqwkAz%2Br%2B5LMitzWj6ptTxtxDJwbb0JqYMzotT0J6B%2BAR%2BTDbv7Q%3D%3D\"}]}\r\ncf-ray: 9e731b994da356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ec6a0714688676ee4e65d7ae14c4fcd","sha1":"72fe2dabb2cc43403f4b2cb8acc30b7568666052","sha256":"d5aa6c34e4fdc9a3b02700216107a7096a5e60ba97087544c2802e626e88128a","sha512":"120e3e7cad2ddf6489b7fb45685d9f02254307de79fa969ace697cb2b8275b61d0240db4aecb52cd3771e00c8c29df4b2d7e8fb6324a460104fe520e02922445","ssdeep":"768:UEUYLe2QabYMq6YFAfIFvaKbjISO4D/9HhWs45RsCKFsKRFq8ya6bhdii1VISd7g:mEdQNEoxfTBe8X8iolNFl94ykBVRt","tlshash":"3a3301906fd41ef1e2c12e7e1aee2bab83507e04440f6ba9622373179a47c57742da74","first_seen":"2026-04-04T20:37:24.59482Z","last_seen":"2026-04-04T20:37:24.59482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.BiAqLpKb.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.BiAqLpKb.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3xM9l8jLKwrJMzIciYiH94PTrbxRnOc2uoBmTttNXdJ1aWz2ShLCzZD4jcwwE1GIlkMxJYe8o\r\nx-goog-generation: 1775025322312595\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 55843\r\nx-goog-hash: crc32c=91rqqA==, md5=yuJ9t8EDFBvg243z8DQjNg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 20148\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":55843,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38158)","md5":"cae27db7c103141be0db8df3f0342336","sha1":"74c6b90121e16d3a64b7947fd67a8f18eb2f6fb5","sha256":"2ed539b8fdebd2ae0cb024e433b97cdc20d620e85ef28917dcad1ee6b5ed3d06","sha512":"3fdcc0f61481efe71ee09876a778ad02b28937532ce359e8753b7533bcbb4c3f49fbacc050372392a9cc122bd2503b85c81cc31f272e2b563b3e4fd6fa451a29","ssdeep":"1536:GVWF5ZLaCvFh+E3v/NqlfutxglhX7AaR3b93w/Dz:8khNhpEfTlhXcaRr9MP","tlshash":"21434ccef181753157e311f2b06f9106b73a2a2d385c80b0f629dd9925de04ba26bf6d","first_seen":"2026-04-01T07:22:48.474798Z","last_seen":"2026-04-05T07:54:59.899086Z","times_seen":279,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/TOTO_Rollingan_Bettingg_menupromosifff.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/TOTO_Rollingan_Bettingg_menupromosifff.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Dec 2025 14:10:38 GMT\r\ncontent-length: 25564\r\netag: \"693c225e-63dc\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSwuBQx0QEnX32io2AHl0wF0myKTEPunavQbohUT3XcYExYe9jRzWEAOnK7Pbx3aIhCQHx%2B4qudKouvCDRPGz6vPCje9UGO%2BR3fqTcnd7VcghLzJJk8Q1JYICfCtDQ1pJQ%3D%3D\"}]}\r\ncf-ray: 9e731b991d8156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1720a44d5bd74626a504d98790b17b5","sha1":"0e8a7e6e5274706ffb339e630216b6e87a54eb68","sha256":"3154ad86bc5250d10f249351cb3f44682c4641354a157de0f52fa5cf61127988","sha512":"e85707001344456d0e5b578108496e38b75c2ece91d22f03644bfb634cb09ad9a853e964d02ae4c1ae476a37a7f7c3f898605f876c0d768965a721d5e1ee5d5a","ssdeep":"768:PYy0qawG1nyDsty7zCjC9jKQqOUqVHNs15HjqIkjrC:P49wKQqdqhWjBaC","tlshash":"cdb2f2bd0a1a563aed32f23c1cf24fd54193ae4f02b477821d087b2057d3b997a5e288","first_seen":"2026-04-04T20:37:24.59606Z","last_seen":"2026-04-04T20:37:24.59606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/Kointoto_Big%20or%20Small_Menu%20Promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/Kointoto_Big%20or%20Small_Menu%20Promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 06 May 2024 06:26:18 GMT\r\ncontent-length: 42390\r\netag: \"6638780a-a596\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nset-cookie: SRVNAME=118; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V13Au2Qpeagg%2Bn2UGxsUEncJs%2FN5RdcxsPLPkTgPAE9JxsRn%2Fe9B7k1Md3qj1Jk5NJ5MEz8Jr%2BDk2DTwxWdznlSTxJdy4nZneA9tWE5FG2wssQw3EyE7tY0y1DUnNIp4qg%3D%3D\"}]}\r\ncf-ray: 9e731b993d9a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72cb2ffd0a9ef1a2ab2a1ef28eec1cfb","sha1":"4a074485fe9ea5ea2ac66e1dc28fda580931e7c2","sha256":"4a06fee768926eaaa6472cdfd6a3148255fdbf58e69cdaed46256080a7d3e367","sha512":"57ca599812770249694d03b4bba4c3feda15303b3c5308e712f927fdf6b0cf101efb46323b83e4a1534a783f3d47ec356b0d13ddf0e4776a1a8cfd6174f94fa0","ssdeep":"768:/YyN/7nLKkhuxoUIbmoE370ZM05EVzr+soFUULjba2pwYI:/JTnBZqoYvHesoFHbbfI","tlshash":"9713f179e121e207c413293a04572fcf63b3b32c837fb5113667db385a61ae9ad0a42d","first_seen":"2026-04-04T20:37:24.597018Z","last_seen":"2026-04-04T20:37:24.597018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.gAo1PSuk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.gAo1PSuk.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG2367oFeiNCilMZwXKYag2-c5vjjhnwF0vbgnZpAUIpTklS96JngAcxUxFS5t-vGJd4CXl7QKq6Vfmi2Q\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\nx-goog-generation: 1775025322358618\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7870\r\nx-goog-hash: crc32c=uXVGFg==, md5=RRLXP8ymFBNtZqdTVyH8mw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2997\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7869)","md5":"4512d73fcca614136d66a7535721fc9b","sha1":"d6cebe661a1b23bb8330af3128595430da107322","sha256":"5210823be06a6d8fa27f7034243a82b169002d5790143d9ae2cc7de4f194e9e1","sha512":"4d6b04cdb3e5aebdb0f44b325a5aa44eee550fdcaa03bfe39427c701a04789e47d29f2d5c14bba323af9774c121ad83e3a0bc1b5d271f655832c249f93d18e4e","ssdeep":"192:ObZtPuLpcfXjyJzCgvNtUpPJmrkZYfnwS1fl3XXJWXzqdByyYYiktwbaQ4BM:sZtbjyJDvNtUpPJM1p3JXdByy3RtwuS","tlshash":"d9f109bff741e4b0e3eb48e1991a0113aa3a1754755d8070fa2c8d10a15aac4b277ffb","first_seen":"2026-04-01T07:22:48.562707Z","last_seen":"2026-04-05T07:54:59.897179Z","times_seen":271,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/mdb.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/mdb.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-75e9c\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 119707\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNJbf82jfcZQwXsLP2fV%2FB4SfmdSv2NLw4PHsVGdeAo41jmAYIvDu8Mcd8z%2BRBt7FUGCB3z1NOEo2Y5LkSbv02hZT6ftAyHvbfAnRtvvYEQ1ZpYcfTAgsHp9kzhqScLsiA%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc52c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482972,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (32001)","md5":"adadabaf88882592fbb1eec2f54d797d","sha1":"db91f69dc3c1e9657115cfdad1973df45cfa2990","sha256":"1abed5fba7967a53bcf6a7ec734bba40714661be6e4695fed9adbfb4e7a2f542","sha512":"86d1233e65d59b746385c9102af327e827f78a4e22e7d330f75678c181b44bba89939fdd28d1eaf52de9f8b2863baa31b1954a36f2b76a7b95478c16d43a1f5b","ssdeep":"12288:3uFmFn4+YqN7Bjb5WoFU7BMS6k1DEq3Pvg4g:3LbvSrg","tlshash":"04a40898f7ac212682273259ad1f11cda23d90325905dc69bc6ce5a42fd4c3d53fbfa8","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-04-05T04:15:33.689715Z","times_seen":39,"resource_available":true,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/addons/datatables.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/addons/datatables.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-6e873\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 114261\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmKgmgBsiKkiZWkbPlJLIkJdJytItPgreyr9AndJWdNIKZ2x3TKrRebOxlJIQbdUhxxoEEztH50cic8JrmL24ndoW5ykvjl8SlYEv547rjETwgoS9WsFb%2F%2FBlFCSRlYuMg%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc55c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452723,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1716)","md5":"e914d80b5ee6dae7d6cbf59e91fba3ff","sha1":"52d7c899ecc04cfe474d98fa901f34a20faf7562","sha256":"4b61717c531c14ac9d3d23166e3e92a8b8e63c70f1cf3c194e81e22d1042687c","sha512":"26a0b5856dfae6f5cdd1b1a90b0b375c94ebdfad883997f835bef3c8df4de11da282a1d4f29998fe769b31a7dada4b36f39a76134d0cb542015ac577a8846a5f","ssdeep":"6144:HaB4gqEH64Zs2JDK1LHZlSmsD1yz0amBUWjMLtWHZYDeX0:6B4gDH2M4dlSmMyWjoCmDeX0","tlshash":"f4a4b7c9f34c622a242670b0bd9e66d8a73c903956615cb97c5dc9683f40c3b93b9fd8","first_seen":"2023-04-13T17:56:30Z","last_seen":"2026-04-05T04:15:33.66631Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":635,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/pandawa88/idnslot.webp","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/pandawa88/idnslot.webp HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kointt-alt.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2362\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Jul 2023 12:48:41 GMT\r\netag: \"64c11629-93a\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Sun, 05 Apr 2026 00:36:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b923e305fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2362,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70295602e5736d4c47a2ed922c25f172","sha1":"51945c79bb916ac9bcb76a41196bae866ff19ddb","sha256":"4b9fd157b5992e7200264ac61b4cf75ae5cdc7918bdaad11ca6ed423ae2763ba","sha512":"4bf8a70c7624f8c5b9233f4c8f5e285338628b8b37241b68b965145de5ac2ebaccac6277b02b3f62095ef03b1d0435ffad50ab3aa2df8c30c012b0451d8589c5","ssdeep":"","tlshash":"d041e69c4cea1f84bc913aeb673487e9a9a31a11d45ac53e7b63cf7d4c84c040a9b608","first_seen":"2023-11-07T10:22:04Z","last_seen":"2026-04-04T23:01:33.327962Z","times_seen":41,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/fonts/Muli/Muli-SemiBold.woff2","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/fonts/Muli/Muli-SemiBold.woff2 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/assets/font-css/fonts.css\r\nCookie: laravel_session=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%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 36300\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\netag: \"66f0d1c9-8dcc\"\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83B4UpaAySgEZs7f%2FqAHHZR8NURH8zR1ZNrVSX1e2YqM36RJaAWfkoMwRaf4yU5NpgMZ8nyxsKCfcUgo28ApxgZoDrcNM%2Bd5BHFSDZ6scMEZm5UOhaoEK7JBzFWrxU0Sog%3D%3D\"}]}\r\ncf-ray: 9e731b985d9cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36300,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 36300, version 1.0","md5":"14fe852cbbebd9569958b557e18894ca","sha1":"037d5578611668b05393bf3ef98e61448153043d","sha256":"0be99d801fbc00ade6626380678a198ba1527329c88685d0e9d9293a920f4d49","sha512":"e7f0d98cafcc4c6c30a014565812742722050d6aea61e171ee28856b344a2461205f550e242217ae28bd897ad068562246219d7a1f6180e5a164698dc6a958fb","ssdeep":"768:eGeS0yJP58HyCbgZ7yU5f26pa3JxDaHU8PAUu/B7A5MQkJty4KHNQ:beByJP58H1Oyka3J90AR/BE+QUM3NQ","tlshash":"e2f2f11f6a45b7a887cbd17a26d6c727e8004291bbc8b8b9cd4c7242a71f42fce51493","first_seen":"2023-04-13T17:56:31Z","last_seen":"2026-04-05T04:15:33.737391Z","times_seen":43,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_vip.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_vip.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 07:32:06 GMT\r\ncontent-length: 39910\r\netag: \"69941976-9be6\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9LTWJyT8DIaBjUg0y%2F1Hh5uaggwfualrqPdT4wcMtPCT4eUyieYpLNM5enc2q7nUerDusuQxlwbPlnvd5eMMaP6Kxb9nWcm4fCKMbw8gVC2E4jN%2BkGNPl7SUtxm8U5k9Q%3D%3D\"}]}\r\ncf-ray: 9e731b994da756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ea25228c36f52ab7f807a7235401cdc","sha1":"9dcf34692fd3dee4d1ea5c0368e5ba0ceb37aeb7","sha256":"82d2da68b533709c040d397c57e6ce048406138b8378eb709e43d805f6af5420","sha512":"e1cd7a2e4cae4b7fa1e89633bbc800fb1d3ceb4d32d7a9fc9169e59e82c00a4912129cb175abe861e52f4a3f711d77897e2c4b2a6224354684f61174386ca082","ssdeep":"768:8s/Wh3lPCanoHTXnCrm2ggeBBmR179Or/ndEWqh+zu/ld8TJox8rG3aa5WAqaMfO:B/wlPCanG3vV3BBmR5A7ndEWxaleVZrm","tlshash":"c503f1b08a66f7f3ea1efc7453b8db09b53c4e498c6c29e9b96f402168400845c6de73","first_seen":"2026-04-04T20:37:24.600888Z","last_seen":"2026-04-04T20:37:24.600888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/kt/favicon.ico?v=1775335011","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/kt/favicon.ico?v=1775335011 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:54 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 11294\r\nlast-modified: Mon, 23 Sep 2024 03:36:37 GMT\r\netag: \"66f0e245-2c1e\"\r\nexpires: Mon, 04 May 2026 20:36:54 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sp4RsG3XlN%2B%2FN4nuBFRK00fgwY5IJ7mdF1IBLtM3mnkPxWVTChLTo346e6c1At1Au9MK3nIgHxxJtYl1H7atY8RyI4tnZ3FuwcFqmexoXB4jrFna%2BGkfVcngXCfb8EuFRA%3D%3D\"}]}\r\ncf-ray: 9e731b9cde0cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11294,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 52x52, 32 bits/pixel","md5":"a9168005024e62f750abf19178ace3dc","sha1":"2efc6c6e676c069846e1c4854bd7250092268e5b","sha256":"ccedc691b244fae7b548e1fcf908432a5d136ee9a4b64c78719b347f9fb6d97d","sha512":"f693c07d3a4f4cba38a830a671adc6978127c35618196d417ad339ee6973b2f8bf22b2d8f6e603f11823306ac04b6477f256b99b4ce18825ac13337558e51c28","ssdeep":"192:P1BG5UmKz+iqI4gR2QtJbmY+tzD4tblIBPqwF:P1aUmKz+iqI4W2Qvb+zD4tZIBPqc","tlshash":"ba321e83b218ca4dc3d9d63984d6e2132eeefc16c7841c0a3174f21b6bc529f150a6b7","first_seen":"2025-11-15T10:50:44.103886Z","last_seen":"2026-04-04T20:37:24.601753Z","times_seen":4,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/font-css/fonts.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/font-css/fonts.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-726\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 239\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bd%2Bb7P74IAQy%2Fxkz7cKOinTyCO1pVkOGcZ%2BZQMbUNuKyRri9kkcWmM85DSk98zTNvv1EggvtGNtsbwOfuvNas9qWIFw1K6vpvAE8EgWOQ9fOAVConxqxiGJOUemt3ula6Q%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c44c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0d9a5842fb110a61b736a3ae20594650","sha1":"379b3d2d8bcaabd4a07cbcb3b1f79c9050c333e0","sha256":"92b7084f774da05f9712f1632243273e5548a4ebc6e3816d3b2f82bda00d0a3a","sha512":"b4d34f4e2ac9978666bbe292ca3896c20b8277d50fcc21e24e5764aefcb550d6b2cefc14d7528b4a42663219bfd030a90a0a341f6af0200db622493da3e39d34","ssdeep":"","tlshash":"4b319001455f7941f8172c8fb74f6e76a85d051b3146d8383b712788aff2a2693a0b7e","first_seen":"2023-04-13T17:56:31Z","last_seen":"2026-04-05T04:15:33.738178Z","times_seen":38,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/pandawa88/idnlive.webp","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/pandawa88/idnlive.webp HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kointt-alt.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2034\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Jul 2023 12:48:40 GMT\r\netag: \"64c11628-7f2\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Sun, 05 Apr 2026 00:36:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b923e325fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"afcbe1dc98a2644edd7fd7e4a9dcfb22","sha1":"4ede72e1d28e1164f24373d2d897eb0d8a2476ea","sha256":"f8b2d105b3fa94a6ad1c38b03d735124241fd04d3addbdf7e3912de09210af56","sha512":"74305c04cb3432b72215c5f5ccc0b9246fb024b32bea46add0a9970e546097a13bea8870764f6eead76581ee4e1488a42415692ea00e2aa10a60b46f7dc7cf1a","ssdeep":"","tlshash":"70411a89b7b311e08143f83eb24d6719949c105402b94c151aa1dbf62757a15771410f","first_seen":"2023-11-07T10:22:04Z","last_seen":"2026-04-04T23:01:33.328518Z","times_seen":40,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/wlb2c/sprite/banks-sprite-d.png","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/wlb2c/sprite/banks-sprite-d.png HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/css/desktop/app_wlb2c.css?v=hd7buzlfkdnkkorfr9av\r\nCookie: laravel_session=eyJpdiI6IlZCRTg5eDRSSmpzcmNYdStYSzBvYlE9PSIsInZhbHVlIjoiU2lYTXVYUVJPV016T3JnTnZERTJMcFU1eDlqZlplQUlwclVlTDVaaitaRG1NcGYxVFVZNmZ4ak9JNmFvaGJTOS9RTCtPTTFoMlRVcmpjZDFBKzNOdkI3alYyZmtkNjNqVXNxVFFCZDBRVUlwR0F5QnBPMisrajkvbVp4SXVDd0kzMzZwQ1NVMXpKQ1VRK1IyZFN3SGtiVVdoTmhEQ0RsR0EzbzIrUm04N3kzcWFIZzMvenJ0QTRNcGhVVXlVV20zbWhrRlRoa0EweWVoNzF2YW9hRnpPUnIySDJGZDE2QklBQnJhNm1BNC9hR0tNdk01cnArTDA3QUU4N1dxUGlycit1NDFYbFhLUkJjUnhicHZKRGVlU3pjVWRVRHZEcW5uSHEvUjNwTFArWC9uV01EcnJuZ1hQYUU4V0ZjZGlWdEJ3VWhVaEZ2WGptM2ZqSi9XZXdFNDBlQzJzRFo3T0dXd0s1OWMwYVVCOWZYQXZnSjJEQ0YzMWliR0dOY1p4eDJablhBWlllWEFDYUtGVUgzaWZXaHRLOE9KTWJJZWkrMVR3YzYxMU5LbHIwYml5UUxMcXQrWGpRcC9ZMzRBSHdDQys0QkV3aWxqWklVd0VhSGNTNXFST0xEMm1GbC8rWU1ETThjNjJOa2dYVHduU0t5V0NDUkdWL09iUHA1RThiWHQiLCJtYWMiOiI5MWNkMWZlOGNkYTY4Yzc5NDJjNTRhOTE0YjI0NjgwNTRjM2Y1MjIzNDBjNmFiOGFmNjRmYTUwZGI2ZTE4MGU2IiwidGFnIjoiIn0%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 22679\r\nlast-modified: Mon, 23 Sep 2024 03:36:37 GMT\r\netag: \"66f0e245-5897\"\r\nexpires: Mon, 04 May 2026 20:36:42 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGTqWIVjsdh2wLc8MVS1xzFTQhvH7%2Bz7PKPaNgamWTJm5DEJ6onNdNPNtfVF32aaS5s7ckPBcO%2F9ZVfNOIB%2BVzuVhB%2BWGoIJISggjFGto1UrLkuWEDxkl33yo2C3X1SZ2A%3D%3D\"}]}\r\ncf-ray: 9e731b934cc4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2087 x 30, 8-bit colormap, non-interlaced","md5":"07adb138ffa19491941d8b5b7e35f7f6","sha1":"57693050bd883c1976d86979e6a2021a2f301732","sha256":"7b2d662706a291ba5da0a3fb086cb3e1e2bbbd3d6e66564896c38ce73ccd12d1","sha512":"945fb9348ec22719b0c5d1f019be5b4a6d63dd45b7c29dec1e71f3557c716fe78c5bcb3ddb45b4a0cab6262594f1cebf030b9d045dc2a9d1a9a5ed81b0f6137f","ssdeep":"384:Pn0h/C06vPFqZI4EO+zhmdnigUgSJgjPv8oIrRgTVsB2YIOc/4/spRgBu7:P0QtXhun1UgSy7vyP2WcwJ+","tlshash":"0ea2c00421b254105bbcdfddabcc71722b772be421d1914eafc1cd1924ab3ea582e4da","first_seen":"2023-11-21T03:40:42Z","last_seen":"2026-04-04T20:37:24.603626Z","times_seen":13,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_pp0103.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_pp0103.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 01 Apr 2026 03:32:41 GMT\r\ncontent-length: 64224\r\netag: \"69cc91d9-fae0\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7uQ61gmtAMtJSzEq0LjW7nQnTiM2uImskfrYxgTJlAxmrvW2ajSuHxPL%2FxrstXbhWarVthSd%2BJc%2BlCOVW%2BbD3AXvWp8wLgjS0znZiYVS1y5A4oMLjOS7f1Zgr4TyFaz9A%3D%3D\"}]}\r\ncf-ray: 9e731b993d9b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c6ecbd3873e7fc046d8b9a9a23a7f6f","sha1":"85024e78e573eddf093b40c894402cf1f0d64c1d","sha256":"50537b5d9e52d9f4576e5d8b198398ce7f101b6e4ed815e6f56d879a58559eb2","sha512":"2004288203060c171dff5d1bbc12816a740fef2cff80235391285bde0d7291979e523041ece3d381e72869c77ef4da7f8351e315181d669fa4611b2be8eab95c","ssdeep":"1536:Ur2kPv6bGhvHJv9dAag6uIEwB/ZGyGEEzTWQxXHWocWaBR:Ur2krvJfeZ0/Z0WGhav","tlshash":"4653f26637962b8cf479557fc48707ac8491612bbf64fd672b4049f0ea0873832b3e56","first_seen":"2026-04-04T20:37:24.604517Z","last_seen":"2026-04-04T20:37:24.604517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_nlc1803.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_nlc1803.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32268\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Mar 2026 05:58:18 GMT\r\netag: \"69ba3efa-7e0c\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqz3grEEVeF9cECJSOYfrT8%2B07uWmblLug76QIA7vYu4QGlxFevmxSysllWQr0Jp4K39BK4v0HxTkJTf8ps5KEpncNqjEBJ1ppu%2FwBsi4%2B2puHuzOy7shD%2BivYPOg4NQOz1e\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b999c9f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e3a3ac248005edffa537888b56a53c7","sha1":"8de0c4cd0222477d0f5ba52727b3ca5ea522af12","sha256":"f6152a68c6126e5059dd4b3145e44d468b67a13c6f29b066dc1ab90b1a0f8a43","sha512":"25a20d7148f09c15f619724670fe854b3d0c36fc551079b1e832ffe0f1c0bf3307df0cd04c37f42502d2d4dd9f3ec09ded2e18a20507cf8a9be11764b2e0a6be","ssdeep":"768:hgTHBVQ2Lw5CanDxOzeWJOIPmn5Bm3tf32pKGKM/YaPNraup:uTHBe3DxJWQH5Bm3tf324q/7Vae","tlshash":"0ee2e1d2434610c9c096c2b7682a7ca476ba7cdbce58e3da515c7bb02ccbb4c785d689","first_seen":"2026-04-04T20:37:24.605669Z","last_seen":"2026-04-04T20:37:24.605669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":10,"dns":7,"connect":1,"send":0,"wait":197,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BxxwxD7y.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.BxxwxD7y.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG1Oq6zX__Zk9N5gPoG0KtO40b3GBrHkw2ZLEQFxM1T1-sWKapk34-kLbnbW_cLArqMO8WZzJbwQTtY_bg\r\nx-goog-generation: 1775025322313657\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 79005\r\nx-goog-hash: crc32c=a0IL+g==, md5=SDBo4TZE3C3y1dbWCOZIVg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\ncontent-length: 24440\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":79005,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"483068e13644dc2df2d5d6d608e64856","sha1":"31488a07ab29377ecb476fcea7945fd6d4ff15ac","sha256":"32477580d5675e52d0d14b10152a579081e64a2857aa254d904fca4cc7497743","sha512":"82e9e3fd2d0df5f13aa6484b21497f57c770d860c31860c8fd68468aca9198b54e2dcfe2fb10d1cb169972d200759a137823c965be39b6922c063352f293d3dc","ssdeep":"1536:qsu7fSLmtQZaHlfKYPQvC9nEm9vzM4soA2PsuMIY:qLSLmtMaHli29rzM4soPtMIY","tlshash":"85732ae2f686f4399be7a4e555384003fa3a7958781cc270f31cce20619e58661b7f6b","first_seen":"2026-04-01T07:22:48.551198Z","last_seen":"2026-04-05T07:54:59.854262Z","times_seen":271,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/wl","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:36:50.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /promotion/wl HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: laravel_session=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%3D; path=/; httponly\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyRPS%2BeKJP7PoOpFb3%2FskdsQeFSFkm9QFxlShIYMP7T%2BuHpZFGZOgZ%2F%2BPWz%2FsgkI7v7GBOsCrBOI%2F%2BwT55ARtUexr%2Bt8Eh%2BT%2FK3MunJXcGQ0rXzCinqKl5r7otJ6YN8Fdw%3D%3D\"}]}\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e731b8a28e34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":64526,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1427), with CRLF, LF line terminators","md5":"0ccfb67a9fa9d695662413b0a85c320c","sha1":"766799ae5c2395f75cdf465bc15753154ce9c8fe","sha256":"1752c509516ae6d56f6a8a75768c3085e203f0efe49f417db12704e9187e13a3","sha512":"95881cfae2e55ed0bba6398a1a85089c76070d787d04f701302a94f76f1a49de72db8d824219328265270c02bb8b6ecbbc011455f9d3460c6b5c4b2879c6aa3e","ssdeep":"1536:/MDiHB7v9L/rq3h+RrE2kAw0GAxrW+Y3wL8ZcXayI7Me9jP:/MDiHB7vprq3h+RAuw0NxrW0L8ZcKyI3","tlshash":"7f53d636a8d120022133d1a4ab769b0afba5d107c707da69b7ed5b955ff2d80cc13adc","first_seen":"2026-04-04T20:37:24.606963Z","last_seen":"2026-04-04T20:37:24.606963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":65,"dns":46,"connect":1,"send":0,"wait":504,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/pandawa88/idnelottery.webp","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/pandawa88/idnelottery.webp HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kointt-alt.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3924\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Jul 2023 12:48:40 GMT\r\netag: \"64c11628-f54\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Sun, 05 Apr 2026 00:36:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b923e335fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c32267c940038c6e5327e59f6a6d7f8e","sha1":"15c4f3351395b461b10484b25ee9f2d7da57b8ca","sha256":"dea1ee5cd89df3fe17a9c78ef20bcc5383023d0f8254c59f530efe34565f059b","sha512":"df6fffe96ba2f9182a0cf32573f6dde37f6c6ca46f62dafffb029b3daee07ce14ec635f81b9e633d966b3010e6befef64c0c2a983941ac5ded2438d492e8fcb2","ssdeep":"","tlshash":"c0816db4e761e45a88d2748b73ec31e4764199ae87b1e403c3395660d4873931e8d56a","first_seen":"2023-11-07T10:22:04Z","last_seen":"2026-04-04T23:01:33.286937Z","times_seen":41,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/Toto2_NewGame_SportsGG_MenuPromosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/Toto2_NewGame_SportsGG_MenuPromosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 24 Oct 2025 07:16:40 GMT\r\ncontent-length: 32902\r\netag: \"68fb27d8-8086\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5OctJlNTLOyVrSO%2B7FJlbrpx93YvoACfXKamx6yba2ewz7WBzoFpAqfgnC11QbRiPvIUFv0ydg4o%2B3sTbrZ8YDfVcKFANerkp9lwUzUR4abxMr6L0wdI%2FGszvWLPIivyg%3D%3D\"}]}\r\ncf-ray: 9e731b992d8756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6de387216c6db0362062c1c1011714ba","sha1":"513aab3760c041bae4749238ca77126d8c1b4c17","sha256":"96ed1b37502bd89d95be543576ac84f264030d51324a78da94a38062c4a360cd","sha512":"0d2d532f5a3fae76f499e725f22b881e6b7b2de48e34e8ffb7aec483e187f6f2dbc18139e25a43b5514e9e33ce336e9fdf3d16318260e53f28da7800a29a803f","ssdeep":"768:oYyxaQFHBk7pemM923iegP038DLgnAJUV8arn1UnXfI4SXEgGgr:ozFHBSpe3rPwnr3n12x6EgN","tlshash":"97e202b2effb9ae7c971f174c3c28fe5c23a6519d8772193645e253059204405edc0ae","first_seen":"2026-04-04T20:37:24.608311Z","last_seen":"2026-04-04T20:37:24.608311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/KOINTOTO%20-%20Extra%20bonus%20-%20menu%20Promosi1.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/KOINTOTO%20-%20Extra%20bonus%20-%20menu%20Promosi1.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 02 Jun 2023 10:31:24 GMT\r\ncontent-length: 61562\r\netag: \"6479c4fc-f07a\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YT0M9UgOWLn%2Fd44b4a002OCQOXVhCZZFRx%2FlcT2k4TKg%2FjE1LMFE%2BEE2S4nevtYaxhwkEvhkPu682aOrZY4TXMM4JHGfUW8R%2Bux4Lpv9gjNmCBwtiThMVJHGW5dHlMmJVA%3D%3D\"}]}\r\ncf-ray: 9e731b992d8a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba2d969a777c06bf358cdcee5313a8fb","sha1":"63aa405062ca3b26b5bcf44751cc191794c778ea","sha256":"b63072abb05a15df2c873c9d9e3de98aa7adca24a703310d70413fb30a0b6d5c","sha512":"5498cbcb91d9d0d4798374a9dd55f6a36d79d0150f652740f6251a980ade702eb6e8a7b770f4205462bfe1978f6c1dc3df9e24cd7f98f6f5ae9ccacd375f4169","ssdeep":"1536:IgHx4OCK+D0ZiHCQ1ULlHIGIeqMKCsHYY8Ny:IqlNKC0EloPeKl+y","tlshash":"6853f2efd569b889d08f77ddc01d64f9802273f8a62b7c5628f0d596f92708a638911c","first_seen":"2026-04-04T20:37:24.609433Z","last_seen":"2026-04-04T20:37:24.609433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2C%20TOTO_IDN%20SLOTS%20-%20BIG%20CATCH_MENU%20PROMOSI%20WEB%20.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2C%20TOTO_IDN%20SLOTS%20-%20BIG%20CATCH_MENU%20PROMOSI%20WEB%20.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 08:48:26 GMT\r\ncontent-length: 27416\r\netag: \"69a7f1da-6b18\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIYVxlLj6iHtnGJ5%2Fa7MS%2B4xYv8fCvffVLoFiEaE3EmBnEPaUqPKGphNiuKEQAvw9BHSOgD0dIg00XJpDRTlMjEBsdmRFVsq74xm6KAOjDETm3qexfLQmZfyO88lchsoYQ%3D%3D\"}]}\r\ncf-ray: 9e731b994da656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41fff8c8a956a088a629082814c16a2b","sha1":"51f3ae846ee78cd769011f9beefec50e2d20f3e6","sha256":"31c08b76e92933d8e9a4806a5b4ed129a790048c568b6f1ae77302a1fa8d1a77","sha512":"22a3922ce02509e1016fbedb3c23040c9c637eaf2b020573b397f43462fc202815dd79b2f29b8e361e006705d5810de16ede501f9e423971f7f4e8755784473f","ssdeep":"384:MYNg79KnfNeFFbXszipohmUrSjx0rve4R5Kg/q9J2cyklCxIKFqh5PNApol:MYyqNeFV4Ko4U2jx2Kr9JjyTxO5PiKl","tlshash":"0ac2d12af871979fd1c0993d81f90b9c2262b31dab04b125f46baa25e0a1c60fd4b04f","first_seen":"2026-04-04T20:37:24.610384Z","last_seen":"2026-04-04T20:37:24.610384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/kt/modules/animations-extended.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/kt/modules/animations-extended.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFrmG7QDzzOdJMYt%2FDSJsSmx7trMrkM3fxxVCFFmoYyhebXsqZgoU7sFc72CIsV1x6Uag0S1jkUL2mOGXY%2FJ%2BRIBzJaQRzLoPUFN%2B5bJfMTw%2FSBqwXA%2FC7K4gXFtfT9I8w%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c43c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T07:47:47.779011Z","times_seen":479204,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/promotion/data","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /promotion/data HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\nset-cookie: laravel_session=eyJpdiI6IkpWRDNiRlc5NmtMOTZLK040aHg5K2c9PSIsInZhbHVlIjoiZCtiSlJKSFhqMC8wbkc2ak53a3gwZStoSk1YbGxpcld5OUJUOVJyTTZCUy9lYTJTQzA2OVMzS1VtQjIyZHFDTzljMm5Wem5yeS9wRlYrOSs2RFFUUXBxUlhzVmtXQm9nMnJXV3A3NEJ3QVM0dXNEZ0lzdFRmK2QxRmZsUURTV0lpUzdpVFhCUVh0Q2Q3U1hDVkpVOVBUTXdmcjYwdmpIQmNtc3VKNVQ0d0ZYN1ZMTEJadHd1VUtJM2Frb2x3Rm1QSEppbWRtTkV1QTJHUm9pS2FQOU96dS9vcWRTSUlOT3J3eTI5bVpjYkhNbHBQWnJNaWttcW1IdWttRG1meDNVcnZ0TXhlVzZsK01nZmRrbHZ3bjRPVmVqSVJNNUlvM0N0S29WNHQ5cElma2MwQ1hlYXVTUDl6THFPRXVyMmZha0JXNEZHNGhNckNkMG9DNzhZZEpybFY0R3dtQ1NaT2N2L29WeWpLOXdJcU9lRXRSZldUTFhKdHhaaC96NW85c3NaZVF5Ulg2Y2hHWmFkSWJ6T1picEZ4cE1PMktMbjh5U2pjU1RnODlGSjJCN29SaC8zL3o0RVNKRVloOVZYZU9KczZLM3FZRnVNZ0lPay9XWVBaUzRPL21ESlh3WEg4SmtkUHlDQk9zRGIvZy9YZzMrUFQ0ZGlIZXgvWkZxcWhpdVQiLCJtYWMiOiI0OWEyM2I0MTkwYmM0NmRhYTA2YzAwNzkzNjE1MmQ0ZGYyNDRiNmQ1MDZkZjc1MTMxZThmYWE3MzFjOTUwZTI1IiwidGFnIjoiIn0%3D; path=/; httponly\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IOanh5%2FitPxEiZzcdqM%2Bg7t1KtKSGkb%2BJTp66z5a2r5%2Fefop%2FV1%2FlxprpnCZPO0OfDeOKSaJGrVRBEBuErneGfT37kYUN%2F7kY9O5Nl%2FZeWqIVnnWaRuDmBfZZ6WtLm57g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e731b95ad6ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311063,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2d4ec9da0b3fac208fca171afa3e1537","sha1":"aa05c1c22c78e4630396879b65922484931af28f","sha256":"b2852c022fb17aae1b401d06586c66827145ea67acf074fdc9a65ff4b5ab7135","sha512":"1658ef169d06d57d1bf373c7147607003b9bc56d645a9d34278a8c19b655efd27ab554721a6f461efc4f22c7774a8e357c5aa38f7c22fa23729449c78620627c","ssdeep":"3072:mtu3xSd5zS8K6mvj1lsXezuoPQYq2BV6i/G:mU3g/OkWFXqUV6sG","tlshash":"d964be7ad3757059e12580dcb9ae707704643689bbf20faea52dc3bad8ad1153cb4cc8","first_seen":"2026-04-04T20:37:24.611221Z","last_seen":"2026-04-04T20:37:24.611221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/TOTO_Turnamen1Milyar_Season26_Menu%20Promosi%20Web.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/TOTO_Turnamen1Milyar_Season26_Menu%20Promosi%20Web.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 04:28:40 GMT\r\ncontent-length: 18268\r\netag: \"69a7b4f8-475c\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFwXah61gxchq%2FIQOC%2FFkwwK6llOfnamx51t9BqbfpJU33a1us7gusJlUF3NT1W28uRdrA8Sjz4TOx36bAbYU%2FcXZijDu0NzXlfMFIeTwQHLqZiHVSNkBZ8xH67d8bD46g%3D%3D\"}]}\r\ncf-ray: 9e731b994da556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ee29fbbaed01f42b2967d7e5b5af467","sha1":"1c37af7d8546d0177fab4e5bfc2d580614bc29df","sha256":"a2bd23e20c0f86a166c159f12d1be2c56cc6f7aaddb137ec8e0492282693f5f3","sha512":"1bf30e0454c2e090c8f13ec23579f74aff5f28a4ece9dfe5d0c29d5aa6f70e68e6f4b9cd3882234b30d91e2b146db58155ceb3ad69231dfac4c7e59544b62234","ssdeep":"384:jYNg7FcZfFbNpugU2LgPtuGidg9gBGg9X3XEgxBYRWs9guP:jYyBI20CtuGidg94LdXE2jZuP","tlshash":"3282c0ef59f6b7eac816943453dc3fe1f2d33e34936095950418fa2522345c37a8e14a","first_seen":"2026-04-04T20:37:24.611978Z","last_seen":"2026-04-04T20:37:24.611978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:54 GMT","end":"Mon, 08 Jun 2026 08:38:53 GMT"},"fingerprint":{"sha1":"B7:E6:53:75:FA:B8:E8:B5:11:AC:F7:22:E0:8B:AC:53:3E:61:05:64","sha256":"46:48:37:84:82:72:61:A1:32:78:58:13:38:99:8D:2A:19:CB:C4:47:8B:BC:B1:AC:5F:6C:F4:91:6D:BB:DE:BB"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 20:36:51 GMT\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c51d4ed0528132b3a6be429dca636b5","sha1":"18cc681e66f5b6696a4ff89774e53aef2a51af00","sha256":"45a8505a86014b27b96db52f81bf4dbced7a8eb9b419d28e89bcfccb334b49b2","sha512":"3fa61799ef336da5f4c9a0a0fcf7d14fdb09e2e18cbc1488eae44a06b61beca3831c9eadd77b22a16a84e8041074d74d51429e23a1a6e8ce9b56860ed682e800","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac8:4hHdPgKQcXr3lVwa3RzJZ","tlshash":"15c19cd1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T11:27:36.868673Z","last_seen":"2026-04-05T07:48:19.094756Z","times_seen":5674,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":104,"dns":5,"connect":15,"send":0,"wait":35,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_smk.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_smk.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31830\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 16 Feb 2026 10:37:48 GMT\r\netag: \"6992f37c-7c56\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnrwFM4NEPEWXLZBT7Yvuxy55RtVCyJrM89EUu5mDuBgcbRNwwOnqkAC0mjWa5JPUnLBg%2Btw6VCto37xYEAJI%2B66RySb75b6g2XFl%2BMVkHIFpYkeOwS4oPhXpGTa6efQtqGm\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b99aca50b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a73ba2ad8b96cbdad3041ebc9ede7c2a","sha1":"2e415714b47ae5faa761612ea6282a74fe94dab7","sha256":"83aa04c6dfed3079091cb16ed53808e29bae471de871d3141a82cd6249d99890","sha512":"0e23e4902b532535cfc30ee4ab3dc067f2ef7e3a233fb065671c9836622b29ad0841a008a700354a554cb87a0abf45626122a431127f7170c2601e9eb3780e67","ssdeep":"768:FtK+0t0FwNbx12RTCO+lYOTHcqBRc8mq31wOgjOc3O:DKRxH2hrObBRluOc3O","tlshash":"a4e2f14c9fc95e86dd4823ffa4c64a4406e9823ad2e3a227735842330d10f996d9e8f6","first_seen":"2026-04-04T20:37:24.613238Z","last_seen":"2026-04-04T20:37:24.613238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":9,"dns":7,"connect":1,"send":0,"wait":203,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/TOTO_BANNER%20SBOBET_MenuPromosi.webp?=v2","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/TOTO_BANNER%20SBOBET_MenuPromosi.webp?=v2 HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46302\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Jun 2025 04:18:49 GMT\r\netag: \"685b78a9-b4de\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZA74%2B%2FlbbtN8k%2FETrmxgjQCwfPFBkT0M7teu1jEILus5eiCHFGa8vD2FiuiwgeRbeMnMU9N0vf5YY2N5yWUm5Lr50MuncloKzd0%2F1LOqjGQFW%2BdaLZcxTafi7Gxo%2FehQcrTQ\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b99aca70b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48fea21e149f53b4fd6bb6ba1cf422c4","sha1":"dd0d298e8e52e09f81bc0864d072d9a521c72f10","sha256":"fd39285ab8cc89e8f4cf5d4287ff27c4129ba28905910375ef9553c5b9688d32","sha512":"cb09a864bff5b6d6a03388bf2805603a2deb9407eaa91fef73cde3f53436eb77a71743b8c98cc72a47e2171d27d15641df13f5bef13faf439cb19859248de10b","ssdeep":"768:OYyGCmxCSJALOmMnyfI9V2eG9blR9JmUYjGf0uhMfj:OdJMLm6yfIr/kZp9fZy","tlshash":"6223f27a3a4983d9cf31a3f011f12b50e7f3d687571b92e8cd6867a25584205a3cf2c6","first_seen":"2026-04-04T20:37:24.613978Z","last_seen":"2026-04-04T20:37:24.613978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":1,"dns":9,"connect":1,"send":0,"wait":197,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/kt/logo.png?v=hd7buzlfkdnkkorfr9av","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/kt/logo.png?v=hd7buzlfkdnkkorfr9av HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 9081\r\nlast-modified: Mon, 23 Sep 2024 03:36:37 GMT\r\netag: \"66f0e245-2379\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWSta6WCyGIZ5GOuHJ778ccVFy3BaVNiT5NX1O2wSRYhQVGq3hJd82yoMelmZOwriXjL0fyK5EaChT4OOHneGq1LfOjqE0GQniDby1UX4HAhA2k5t5DrWgjgYMQ4b7Iekw%3D%3D\"}]}\r\ncf-ray: 9e731b8e7c4ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 42, 8-bit/color RGBA, non-interlaced","md5":"12657f29a280c0d810d8b8585d2d7ba7","sha1":"2e95f51fbeed56e2f222ba454eaa0e907b854422","sha256":"e3e0c38f47c354a5be42781ad72a6f56170e9ae03fcf0a44be139ef989b7b9c5","sha512":"df2be7f82554f6989d271f31f6bc9b071c693b0846b549733185e1d05c54785793b94d5434087258e79523d95bc5a9623ecb6bed2cb31c64e0ad277bfa701300","ssdeep":"192:p+SeMs7/pLHSRFI/vqlabXInWqS0Q9pmCal3JnH39xzn+7JfyJ:ghMs7/pHManO+SWq1Q9ICKxzOg","tlshash":"b812cfd540c798f1952bfeafd092729a0c7a3b596502249ce128f4b171f1e286ade316","first_seen":"2024-10-25T02:19:26.879436Z","last_seen":"2026-04-04T20:37:24.614723Z","times_seen":6,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/jquery-3.4.1.min.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-15851\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 30719\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f10X1lqfnJwAVb%2Bx9ib0Swp47seUeZ6QPtAnxdMVuolcrozrCIhY%2F%2BONfmo%2FL2ylC3rHGPKKZ4dkThmhu%2FxfCXMSBrYEcs8LNf%2FJlPxnhD7Kov%2FJ8NFEasjWcpQ1dOVEJA%3D%3D\"}]}\r\ncf-ray: 9e731b8eac4ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-05T07:47:20.476063Z","times_seen":115193,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/TOTO%20650x150.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/TOTO%20650x150.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:43:33 GMT\r\ncontent-length: 49172\r\netag: \"69a53195-c014\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4eWOpHdl7bRy0cjhn9CsLQkepbmrz4N7n2IlY3rQtsfc0ur9zG7gcvo7KYiTRDIw1ftgJ3fIB4XnkpFQWdy71eLhgB%2BTPZVPafNxgmZMTG14vv36CQmfx8DV4AazT21iQ%3D%3D\"}]}\r\ncf-ray: 9e731b992d8656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f0dab5737889bee1a2ca7c2852e069d","sha1":"fdd46701cc535d22a6b7af7791f411629b25564d","sha256":"05b5845ba716d61ca4edaa42df29e8a641b7d0b584c3749685151a2b1f869b6b","sha512":"ac5f9a387947a40386bed6ccde252c342c8fadda073261ff4eb054a7ad332bb73bedbc74bf800672b04cc344032dd11af8c243742e78da0cf5a20967778055bc","ssdeep":"1536:M3djgWxOu3L7cZzeYzpyhq/n7P4ai6wluh:JWkWMzNp+qjP4aiNluh","tlshash":"b02302777882da33d3e5711cd5462468da3a9a310bb724ae237c60c3cbe750602db399","first_seen":"2026-04-04T20:37:24.616062Z","last_seen":"2026-04-04T20:37:24.616062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/Kointoto_Extra%20Credit_Menu%20Web%20Promosi%20copy.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/Kointoto_Extra%20Credit_Menu%20Web%20Promosi%20copy.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Oct 2022 08:30:20 GMT\r\ncontent-length: 15252\r\netag: \"633fe39c-3b94\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubkizrLUo9cO03n%2BiYOFvSYlCWzThqk5Rh9qLMfyGEPalZub1gwGHIejbrJtXHyjIhjhAn8uCEvJIK1kpxlOv0uekNPgNUgM3jLGEh86lQYnHW6tytmadZCSpjJ0m6LSBg%3D%3D\"}]}\r\ncf-ray: 9e731b993d9956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad0c984b88281639a5b2d66821f94ff5","sha1":"a6821cbd28f16c37538606b73f52b3f32fd7ab8b","sha256":"9bd8b42feaeec6829326912a77dd7e9e5660f5e64d3792091f76a960b4c5dc8c","sha512":"4395eb4e0d579e1e3306e1b885fb62e7eff382ac75aa0f9577b800b1ab5ce819e6b7fa1e6ef643a13b959f9ae130261cbe18a54cf96ef36a15ac9c8dd854cc15","ssdeep":"384:IiovSGikzVcK7fIitsRwaHmz4DkV6vqgXTEaf8ChPN4UmitDBScHo8:IliLuw0QwanDSCLVJ42DM8","tlshash":"b962df1c76024cd2a6de987306ccaf61324cb49bbcec287a2d524cc27c3563929eb848","first_seen":"2026-04-04T20:37:24.616807Z","last_seen":"2026-04-04T20:37:24.616807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150__SM%20CD%202026.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150__SM%20CD%202026.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Feb 2026 10:42:22 GMT\r\ncontent-length: 34020\r\netag: \"6992f48e-84e4\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlvLNV1kCza7UKL5KiYGP62addmfbeMZ%2BpQIH3C%2Fx4cL0gfXzJhQzKohzlLdsWlg8tJlUYh91hTm6MFQ%2BxYtrpyZCT7Ok0Eadg9BsbVkVjr2uhaJ%2Fs7I6KOpdxo5cwDyBA%3D%3D\"}]}\r\ncf-ray: 9e731b994da956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1db3f017da4d8e83df175a93747f6cf","sha1":"c1d72f0b40675fb15344791d4a26d8c7f0e2a3da","sha256":"03b5813b14c01a485404d684daa77191728a0ef3dfdcbea2437ffa95dbefef46","sha512":"ef22905afbdc161b3b2d0f634a919dfd1a3619fa81b1f34d84dc9501051b8365c6c9cd92d2ca60c5a704cf082ebaf7b920dcd7eee8ea34ce3909adf4ac1baf7a","ssdeep":"768:zjbi5klpa0KA7Nv1Z9hS75HaxR8A6FL5sbhOKu8NZmSohV5q3LL/3X:e5DA7Nv1nIdHe85Lyb1POSohbq3Lb3X","tlshash":"72e2e132670e48c6c4b7f9f249278f425614a84d197bdf4699fd7b23cb0688b32b1b58","first_seen":"2026-04-04T20:37:24.617678Z","last_seen":"2026-04-04T20:37:24.617678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/koinslot/WLB2C_Hadiah%20TTM_Slider.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/koinslot/WLB2C_Hadiah%20TTM_Slider.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Oct 2023 09:29:32 GMT\r\ncontent-length: 51052\r\netag: \"65193bfc-c76c\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hgd1BjqXDjz5tszp3yzcIhRwy9bjBG9RJlpDFi9J4dyNcgiEkZlm8oFRh9zkPh2QK8NYCwwxa6kYCayG2vJlw6PQPqgxPrebQGP8%2B6zhQYhqUzHNTjkZ4tQpcBOw5dGU7w%3D%3D\"}]}\r\ncf-ray: 9e731b992d8956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x324, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"81bdc0eb5ce10df013646da93f37f187","sha1":"57d40b60a9d04875221e4ed65a4c28433d7c596f","sha256":"faef6a3bc3ac9ea8182fc99e22160b979d5db2707866a2d4aedc10e2deffc213","sha512":"ee937231e71a2e4c7ff7cb2d584fc598091f791f5b25d44597505e9db812fe5f2830a54016c13fcd1ab975571e51567ae30ec8925ab8827e2787fda1d5b8bab2","ssdeep":"1536:XD7zVWUtK90kURaP9TwP9KIPJKsKWvePkNA10m:/zJs9NUcPVaRKZWwkNA1X","tlshash":"153312e03224e9f8d4cf8951af2b7b2c64953a6f0dd43d6937c758b8c60539e0892f26","first_seen":"2026-04-04T20:37:24.618516Z","last_seen":"2026-04-04T20:37:24.618516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/json/floating-icon","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /json/floating-icon HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nX-CSRF-TOKEN: H0vjfssvr1qBaEsnFEuseZerjxFZFdbNOqydqfO7\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: laravel_session=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%3D; _ga_8G2GK6T5T5=GS2.1.s1775335012$o1$g0$t1775335012$j60$l0$h0; _ga=GA1.1.1844385271.1775335012\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\nset-cookie: laravel_session=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%3D; path=/; httponly\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncontent-length: 82\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7x88p8SCK%2FX0xD4Nq3H5efTmL83N0MwAdBXzYXT4Xl7nJmXBb2nfHWA5bGb2R%2BqUdrt07b9KzTto72GDQL6%2FtTABIv9aUJQomHgzuzj0%2FXSMyALYMEj0isUviXI0v5cY5w%3D%3D\"}]}\r\ncf-ray: 9e731b95bd73c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f797622117442eb8017a29c9b63e0d95","sha1":"e551a73ed156633b16a28db531fd51f1721811bb","sha256":"678b72a40035fb2e414d41e9c938856b7d831eb6f364a35369f56c239ab837ba","sha512":"0c59e2b1a38e703cd1e3175e2269a6eff388fd7012c51cb2fe0eca45af1e1eb6ad4f22cbcce95bab750e349af0d16206a86e41d39068bcb80874a29f67ea08a6","ssdeep":"","tlshash":"86a0220022003c388f002acbb0002e002ef03822c82c2880c00c200c8ba80ebfc03002","first_seen":"2025-04-07T22:45:34.719026Z","last_seen":"2026-04-05T04:44:51.208636Z","times_seen":1429,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026version=1623.0.1.789.64.1670.2.1.3.214.3.13.5\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026version=1623.0.1.789.64.1670.2.1.3.214.3.13.5\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Sat, 04 Apr 2026 20:46:52 GMT\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-length: 3068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (10520), with no line terminators","md5":"aff8f0bed51704d6024eb1fa96792527","sha1":"4c1961118efd56f09f993b7114132f2a2b293a07","sha256":"bed02f5e6eac8792be99d493a2eb8c86eb67da9b6490ffe8709cc904b1d0114c","sha512":"88d9146c450939219aae893813efee2074dd52b1afd4e9dd6e81da9f48acb23c405ec77e794c032c041f507626161c22d3209be35fb9c28caa97ace471a0f381","ssdeep":"192:ebGwGfGsXGAMjDGdUef2NxFFnwcKrRRawxTeHzxtB+NBVo6wmNe7xK2:UGwGfGsXGA3qef2B5UyOBVLwmNe7xB","tlshash":"9422741587c78c7e62f7c2c5f2db7a0d61d8203abddb6a3be4d0d63031582469d11a6b","first_seen":"2026-04-04T20:37:24.619848Z","last_seen":"2026-04-04T20:37:24.619848Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026version=4940c52ca0caf914a8b155bf4411bbe5_f2967fe76a09af13bbecef55e9c3b2f4\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026version=4940c52ca0caf914a8b155bf4411bbe5_f2967fe76a09af13bbecef55e9c3b2f4\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Sat, 04 Apr 2026 20:46:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 5087\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14605,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14599), with no line terminators","md5":"d1fe85c408b9620f5e85f5ee7f7cbe6a","sha1":"19a412d75e7a8d4d105cf86452e65fd6778854e7","sha256":"2835ae4f104ce386677740362ee587d1b3079530566ca333a9499aadbdad20db","sha512":"53b26feccdefe8de34d0a9b79691e21fb55dc34ab3e392a257e8d262cd7bfde14b06dd9d7c9ee094942046235d58873388d5ca5f14c6eea2647655331ac0b0b9","ssdeep":"384:k8DgODwsFJMKlFZmERbP1DQCBuLdAeAHMGdQNJ0L:siVFACHuJALMUL","tlshash":"2862fa640daa79aa0b2753d6f5db5d1e38ec3368ab451a2fdd884f3042807c1735be39","first_seen":"2026-04-04T20:37:24.620611Z","last_seen":"2026-04-04T20:37:24.620611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/KOINTOTO_bonus%20deposit_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/KOINTOTO_bonus%20deposit_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 31 Oct 2023 11:32:36 GMT\r\ncontent-length: 14546\r\netag: \"6540e5d4-38d2\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nset-cookie: SRVNAME=119; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5M7ce3wDGcb1YQ0Bj8dAjy0GkcnJonqIzRpxxCJXXKighBcEoAxBq2gSY6e0A0AXvzHrQ4HAackRlVe8sAbRNZ6W4sKarnGZYDzTZmhpL8U9iPEFK58VGwDNsEYzPlVKw%3D%3D\"}]}\r\ncf-ray: 9e731b992d8d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e12fd5ea1e54c88c8a7f4526c971fa96","sha1":"f040084e55c2f79b116f0cd503d6a04a55c585b3","sha256":"6a48d7fc4c2bba60f127a71e29904d47b062561a4c8f089ba12266d6536d4b4b","sha512":"50a8163df8bc850e3fa52e79fcbc0afdda929d9a9b183af58a20d294715d041316a14ba2c3e7760adea1ce6696525f75775e425b6aed52a9968c37587d2373fa","ssdeep":"384:8TLmBIHRpSUX8efpf9fOda/UYbKxRyYojjR/UU9ya8:8TLmspSUX8UpfdOd8Uw44Yojjf9u","tlshash":"ab62c016141a61b1a02843279620952b61f72db07e55ac736ff2a33fe86baed7901c2d","first_seen":"2026-04-04T20:37:24.62134Z","last_seen":"2026-04-04T20:37:24.62134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/kointoto_cashback-idnlive_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/kointoto_cashback-idnlive_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Dec 2021 06:18:53 GMT\r\ncontent-length: 98064\r\netag: \"61caac4d-17f10\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBawpu70%2Fa%2Btt%2FBm%2FDEimoTkQkwKtG4G1l0ppUEMY6WsarUhSt9ZYjQBOOoE153s3Zjc6HE064CX%2FDifqoZY1pzEUeWFd8MIxHEwZHJ7KHVP%2BalqCJFGZgmnLMGlnjIlWA%3D%3D\"}]}\r\ncf-ray: 9e731b992d9556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98064,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ad6a3a1c9160f89d264dcb3b7ba38273","sha1":"573cff03b16478a4e8e94d5deec2349bdac91418","sha256":"eedd261ac3c786551610eff424d8135ab5d6b44c77d37e88932ad9a3418a23e6","sha512":"bec6661ff6eed90370d4cf92ebb46838d4367272d75a381e5be3dd2521915df4b73febdf610857d03d2b72a483c13d81bd93722fe1ac7759782af75b92c8655e","ssdeep":"1536:2iQ5svW/0MAr9fXkqfxsjp4aKhbZIXbjs9e9nHfbORlYtLGR53ssaLMsi:2LtMMiXfK1pQKXbj99n/y8lGRpl","tlshash":"a1a312a3d4ed169f82f912219363e1ff7d57e2a9a42cb0b774379e3210a43d87ad0614","first_seen":"2026-04-04T20:37:24.622523Z","last_seen":"2026-04-04T20:37:24.622523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/koinslot/KOINTOTO_HadiahHiburanTerbalikLurus_Menu%20Promosi%20Web.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/koinslot/KOINTOTO_HadiahHiburanTerbalikLurus_Menu%20Promosi%20Web.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Oct 2023 09:16:49 GMT\r\ncontent-length: 17066\r\netag: \"65193901-42aa\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nset-cookie: SRVNAME=119; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaNqtrHXQPGZ7Ay2iyLAobZVUXZ4w5wfBdfVX5P30IJPzLUvTlowiTgWGuKaYTcxa51gagjB9HoASmbJ9t3KmMnDsBWJBNHBPOIgEyO1pr41fpHo2b1rZS2DJSvWtQmxNA%3D%3D\"}]}\r\ncf-ray: 9e731b992d8f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f2bae7a114bc636dc5cf1af7756718e","sha1":"3b365f6b3973096d3739b64874725cc99e1002a4","sha256":"25e36eec5d789c7d91526fdb709b64dec4c52f815f180a74709a704b277524a0","sha512":"927491fde23694717e32b886f663d314717c48111b74b1efc614aade907a8e78d5ba9f366546ee6d81e5ec9976e85e445cac08ab9512fbeb1932203fa4db60b5","ssdeep":"384:3Ix9nfa6vg9uFnvtq6AJZJXv6ycfIC989Dmox3DPTwZD:3InjgC4HJZJv6ycn98pmoxzTcD","tlshash":"6872d0c55d0b1275b0f59cbde0b13b1a130aa05e110987c191fb7eae7dc0acc52b96b9","first_seen":"2026-04-04T20:37:24.6234Z","last_seen":"2026-04-04T20:37:24.6234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/KOINTOTO_Bonus%20Refferal%20Togel_Menu%20Promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/KOINTOTO_Bonus%20Refferal%20Togel_Menu%20Promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Mar 2023 04:15:01 GMT\r\ncontent-length: 38484\r\netag: \"642269c5-9654\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nset-cookie: SRVNAME=119; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b59crfZcGPfC6ttIXb4rVejt7oO7cBF%2Fcxi1W%2Ff15Gus0i1Rq9kpfLHz7bFlopVfvnHFY81hNOVWYT1xInPoUi1rbGBTkZxIiPg0me6KAW%2F2VqNtF80A8yNuf0Nla7pJVw%3D%3D\"}]}\r\ncf-ray: 9e731b993d9856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5fe4f3854d8e83f918ca5f12501fcc41","sha1":"fb858ecb1757a378bfa2f491dcb067f1ea9af211","sha256":"30a779b0abe8770187523e93740b1b3d4b0ea9b5d760d86e43dda5684775a658","sha512":"0baa5eebe71d68a1944efabb4e243822ddaef188d505c2825c7185add9d10e7912c1ecdb972cc6c222e3dd85bdcc8d34a491e02176f4713f009f134a5e0b2f00","ssdeep":"768:yCbR0n4tXlj0+Ydcng6U5jRkLxRTVMVeIHremjUkVwZKnds5BumsqdyDh516eDt4:ym9pljO96UNRExFVEeIHrLg0aoEFUR4","tlshash":"4803f1c137c84ebbf29acc45dc27dec70a390955188875cf365807e509b792bbaba44b","first_seen":"2026-04-04T20:37:24.624432Z","last_seen":"2026-04-04T20:37:24.624432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2C%20TOTO_SPGG_EVENT%20BALAP%20TURNOVER%20PILDUN%202026_MENU%20PROMOSI%20WEB%20.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2C%20TOTO_SPGG_EVENT%20BALAP%20TURNOVER%20PILDUN%202026_MENU%20PROMOSI%20WEB%20.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 01 Apr 2026 03:07:57 GMT\r\ncontent-length: 30534\r\netag: \"69cc8c0d-7746\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eu6L%2B%2FqkXkiCsCJWhVwAh%2FSozpINNNJ1ACZbuk7Riv6q7eLc4B54qdu%2FYE72uT%2FtnTafaeXrRydTV1uZdiMjT%2Fbv3aAdwGyc1hzh2vXN5AJL3OxGuevvvportjyoeLqftw%3D%3D\"}]}\r\ncf-ray: 9e731b993d9c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"579515d3baa22b9ce46746506d8c4d12","sha1":"75b72a8449fbf9e16e5c28d2e39193e82cbc78d8","sha256":"eb00000b289a787b51857064e921661ba9e0c941d817c91cae5eaf5d174da3e0","sha512":"0e26f5336a317bd1768c9de023c02637a25f84b467d51fdd706260cff03fab456da9c34598d3aeb70198844b573a0e41c01a4f72abfaac5d3c40254c33ab49fe","ssdeep":"768:eYyCkVqWFzGIwGyd78z8C8iGsEY7K9+FwdLxc5:evVFCXGydYDRGs+9+SdLa5","tlshash":"b7d2e171efc342b7d93a823a9ca11f5dd36fb61d521eacb8f1485a0653841c9d3c215e","first_seen":"2026-04-04T20:37:24.625259Z","last_seen":"2026-04-04T20:37:24.625259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_ff.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_ff.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 19 Jan 2026 09:53:51 GMT\r\ncontent-length: 48176\r\netag: \"696dff2f-bc30\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2iScdFnuHJ%2FSVctqLk7muIwdNH%2BtipPxrXV54hFroc%2BsjAS1gF%2BKp2311xOVvPYvh%2BX8VUtZx2%2BABoLF9wXwIhJ3gq%2BjvNfiLXorO4aX6aCC4lN7rJ1uIFZ5gI5zPR4xQ%3D%3D\"}]}\r\ncf-ray: 9e731b996daa56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9e7a532a1b6a03445c0f3ca92326bb7","sha1":"36ed53d38e21ee6e1181248bae15153b5c555103","sha256":"364276488333e4cd7791e93c47b1c9f79a23a425ae49e055035f2bb8373c5def","sha512":"9f087697b035f0beedb7df1f7ea926cbd9875a779d4900633c095134ea2807d23e8323486eae7e537d5a268399497301209e156d91fe573461f954d130ae1cf9","ssdeep":"768:XE31S8ceSb9hcKXL5jYt6PGxygRv1XxiQ3U1csZ2Ic8xn9JsI871TmGej69oDZvK:U3Hyb9xVktxV1h73OHJxfsI87M/6k3qT","tlshash":"8723f1f9d6a2678cdcf1be7a9bc1b43eea0690256eb4f1584713d2803504e93453f239","first_seen":"2026-04-04T20:37:24.626012Z","last_seen":"2026-04-04T20:37:24.626012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.DHRz0lt6.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.DHRz0lt6.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG2lOhGvthDFo2eIqCav4ETxtceG2OkY6FmFGrQWQILwKd8PTylhsKO-Z7EJCGvr92l5E4kY1_U\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\nx-goog-generation: 1775025322409828\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 221034\r\nx-goog-hash: crc32c=KeKdVQ==, md5=OHYy2aaml1PM/uCQj7i6jQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 68218\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":221034,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36687)","md5":"387632d9a6a69753ccfee0908fb8ba8d","sha1":"1412fdcbab5d336073a3c5ec215e3306d3f43c6f","sha256":"dd8a501df61c89d0de30f15d8aa68d6a21f6779c3fabbd849b3bcfd15301fb01","sha512":"ee0a1d9ab22b56b349ec45b3a3db9baa313204e9d0ad957a249c149db3ae4cfbbdf785bd60dbb586448cf57d269b741ebe4d7353badbda8c84c0e64e26bf3a60","ssdeep":"6144:1tMuoTGhHxd+olP5nZfpUqa8wrrLIgXs4y:rMuoTGh/+olP5fUqa8wrrLIg84y","tlshash":"a9245bc4b18af53887eb34e6547e2002f63d6d18784c8564f75cdeb63da85899233f2a","first_seen":"2026-04-01T07:22:48.458243Z","last_seen":"2026-04-05T07:54:59.878329Z","times_seen":279,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/kt/bootstrap.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/kt/bootstrap.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnUAaIAinjIDCntqO%2FWhwsuomRjF0belfd8a0wtTQs7jZkd0%2FwHA8u5awmqXe%2F7wXI4hRDQl20V5RfAjgXB5el3ejuqVYTUmnPSAxE1d%2BV%2BGA8EyyTTTsoufUF0lLV3Cow%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c3ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T07:47:47.779011Z","times_seen":479204,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/kt/style.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/kt/style.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Dec 2025 03:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930f9d5-1f57\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 1718\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qjm2fVkzJsmseObDeyrEiawiSdyLsz2bBmvsDB375%2FQYDlw3KdaaL6hJF%2F2BBeQpx%2Bk0nNyw18z7oGuBBnhSp7%2FVov%2Fxne6xAbssmJktEid4R%2FpeFrWiOKuiWCRrTkyebg%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c40c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8023,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"16ba83c0221906914cb7dae9aa261c49","sha1":"8dfaef51eff60c368d1b8d47e3651d2ad10e5618","sha256":"1f2c661020f839d06a8181c08a81cb72fc266bd8a665556ca036c3d9372bad1a","sha512":"2368e03dc85d39849150d26c39d17f8440c9747646ad5a8a9a91c83bcd019499bbcab86e21201c523e5a9ae542409d668d0cd848810d213142ff39d4bfe71e92","ssdeep":"192:tsbfFlOUc5RIIIF9F3v2r+h57V+UVgbd5szF5fFwNOdFoFl44G:6fFoUbJF9F+ChN0D4FtF8OdFoFe","tlshash":"a3f10f879aa71801b183d0b42f7a57d3731d800bd4aee56a7b84b19ccfc45a9e263b4c","first_seen":"2026-04-04T20:37:24.627293Z","last_seen":"2026-04-04T20:37:24.627293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/kointoto_referral_menupromosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/kointoto_referral_menupromosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Sep 2024 05:04:52 GMT\r\ncontent-length: 15376\r\netag: \"66ea5f74-3c10\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qe6DCtcIKI6KaNJ70fULDLzc%2FQeVvC0zhaTVUyd0Zb0iZNFkrwHFu0FM1Tyw0MvGj9nnvxp%2Fly%2F5SSj2u9H5HxoktLqcVsaQ56FNJP0%2FTewVTzvWAFwTBI0tA2FAR6e4w%3D%3D\"}]}\r\ncf-ray: 9e731b993d9756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f2231930881f5a2937bec18514764708","sha1":"fe7447f606b56750c0780e8f88ca62adcc9eb004","sha256":"de6e125226e308bee262656f88ba2a4d939084ece4d7f2b955bcf5662b27c3ae","sha512":"7f477c75f2e8065fc0e1068bc10508947e38f2e844d3ac53433b6bda77a2f0991b2b36ccd98b42e5ed1462739492f99ff3141b2f3dffe4882dfc7fd5dc740f45","ssdeep":"384:yRmHLHvpO4nk4y1Wan0k2K8B/h7CCIHF/aizuVIZYNbte:JrPpOqkdDn0tBZ7CCCqVgYNbk","tlshash":"f162e11197cecf1ae35b78788c85cfd3916c993f3f9630192c32a964c40997066e5a7b","first_seen":"2026-04-04T20:37:24.62809Z","last_seen":"2026-04-04T20:37:24.62809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150__LVL%20UP%202026.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150__LVL%20UP%202026.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 10:23:24 GMT\r\ncontent-length: 35338\r\netag: \"698c589c-8a0a\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhRdt0M3IPIlL7ggSjHUIUBYrMIji1BzuLFIRmj1BJGzelS4YSQJAnib%2BZuXL6i9jsP%2F%2BZT29UJQKAnx3Ji3cdK4ihUBR0uJFhxicOy8DUlwrPrWLrLjQD%2B4YJa0Et8DVQ%3D%3D\"}]}\r\ncf-ray: 9e731b996dad56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76c336c9dadf3369f268594b29f3a679","sha1":"714f4736e5c4e808177dd40ab56426ccdec33eb2","sha256":"feb602d9d9ac0ee222bd2de8732667679bba0060e0d40bc651b95dc57ffd026f","sha512":"46dbde7af61fc97132be758e234b7f471c6444cc9dbd410de68d087ed445d27f229cd4a4ce7a755a5a4e6089b044f5cc2c44721330e919f1ade628411a9461e3","ssdeep":"768:/nUzYx+nySQHBlIdWAXs/vcceXeMYbqWZUDRlc7xdk0DuY7BxtK5yLB:svvQhlIZWkeqIO0xdrCY7BUsB","tlshash":"32f2f17c352ce699fe4841f75ab14b957ba2236214d0b5c4a8c1236886a7c8386edccb","first_seen":"2026-04-04T20:37:24.628823Z","last_seen":"2026-04-04T20:37:24.628823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/css/kt/custom.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/css/kt/custom.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Dec 2025 03:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930f9d5-9993\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 7887\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9GEAln7v1mIIuGqwGETV%2BpmUdZ2ORjFD7cNPDaAW1H9Pwct9mA5DVZ4s%2BrbLfSasjF8jqpqN9EM3zQRUih6gHFl9PQJCk10cLifwdLpGm8wMHV82fZypG5U98vkHI8AyQ%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c41c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39315,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (649)","md5":"0092a8b4f53f24740ba539407bd88f91","sha1":"04e01202de2a0a66e0c092dfd53c8d419d55b7f3","sha256":"ce4993b8cdc620135f16461ec7a699add48540f65e79b503c8a4ab88ac152865","sha512":"4e383616c8790325294899b337d8e69a916ae65d13d4bebaa43e525cc65790da82d1ce6205b77e11ad374d789f6026f19c8e336bd0ceb671f392030b6f5730bb","ssdeep":"768:vNV3FyFUF2buXBNJ9hhZnjZnStFQ6F5FCFKyiOalFz54/fxrprFOZoBmw1ZLagFs:vNV3USEbuXBNJ9hhZnjZnYO6H48ybal3","tlshash":"ce0397a7ea572845b01fe0a86f61ebe5333f4043990f8d79b7a175bccf810e94162a4d","first_seen":"2026-04-04T20:37:24.629718Z","last_seen":"2026-04-04T20:37:24.629718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/css/desktop/app_wlb2c.css?v=hd7buzlfkdnkkorfr9av","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /css/desktop/app_wlb2c.css?v=hd7buzlfkdnkkorfr9av HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 08:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6708e815-7544\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 6327\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FDlkq0GsaHv%2FHEhM1D7Ld6JtVNg1SlNhWmDCpdbxQ8lBqguCR2hWv2P%2F8wGoBzQCwvTbdiC9G6z6bxO8MPT06G3ZKwMzdFssLnzC2f6flODix4MY4xtWzdDKL6Un5EbHg%3D%3D\"}]}\r\ncf-ray: 9e731b8e7c48c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30020,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30020), with no line terminators","md5":"d8be27ba0a30be0a0d98b8710dedcd6b","sha1":"6ff5c8730f664a3d481ab543020d661ae50d04b1","sha256":"9e9a1f30fe058730ba878648f916e35b11c7e26bfac7406e84684aa434a953a3","sha512":"a6da4d3e6e18443b33042e1bacb6a70b00d7ef21e515f3a591244cc69e206b4271e6d86b1f8beedb3e469b5e572dcf17cdf204aecb14dee751273db2d7687e4a","ssdeep":"384:JHdjbbJrD5qa+UbxSyNN05N8SkYv49qtwsAf+q0y9z4fgAy:JHNbbJtdNN0Ygw","tlshash":"66d2851e6a85242ebc13c972f160cfcc913ae686df270abdb4537a2457d13e61d339a4","first_seen":"2025-03-19T08:25:18.529385Z","last_seen":"2026-04-05T04:15:33.746436Z","times_seen":38,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/pandawa88/idnslot.webp","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 10:48:32 GMT","end":"Thu, 02 Jul 2026 11:47:14 GMT"},"fingerprint":{"sha1":"CB:82:FC:AF:C6:58:D4:6F:13:F4:6C:7E:E7:06:2E:8C:DB:45:A4:8B","sha256":"DA:CC:54:07:F0:B8:3F:12:7D:34:75:25:ED:B7:E7:AA:EC:99:B2:10:E7:9B:78:3A:9A:E5:25:81:FB:E6:02:78"}}},"request":{"raw":"GET /banner/image/pandawa88/idnslot.webp HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/pandawa88/idnslot.webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REEKpP3yustEHQv4nzlrNzBUUBSN%2Fq7P7GAUL2BV5BNBIbAXHNzFc5t2Gy0OqrYZypfsNh5y8mByeRQTGn0PbnhRVarLVf42Q0%2BIJXgeCUXhrSI86cOFbzwaT2UYEpvQGbWy0A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e731b8f3e4856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2362,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/lazyload/lazyload.min.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/lazyload/lazyload.min.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=eyJpdiI6IlZCRTg5eDRSSmpzcmNYdStYSzBvYlE9PSIsInZhbHVlIjoiU2lYTXVYUVJPV016T3JnTnZERTJMcFU1eDlqZlplQUlwclVlTDVaaitaRG1NcGYxVFVZNmZ4ak9JNmFvaGJTOS9RTCtPTTFoMlRVcmpjZDFBKzNOdkI3alYyZmtkNjNqVXNxVFFCZDBRVUlwR0F5QnBPMisrajkvbVp4SXVDd0kzMzZwQ1NVMXpKQ1VRK1IyZFN3SGtiVVdoTmhEQ0RsR0EzbzIrUm04N3kzcWFIZzMvenJ0QTRNcGhVVXlVV20zbWhrRlRoa0EweWVoNzF2YW9hRnpPUnIySDJGZDE2QklBQnJhNm1BNC9hR0tNdk01cnArTDA3QUU4N1dxUGlycit1NDFYbFhLUkJjUnhicHZKRGVlU3pjVWRVRHZEcW5uSHEvUjNwTFArWC9uV01EcnJuZ1hQYUU4V0ZjZGlWdEJ3VWhVaEZ2WGptM2ZqSi9XZXdFNDBlQzJzRFo3T0dXd0s1OWMwYVVCOWZYQXZnSjJEQ0YzMWliR0dOY1p4eDJablhBWlllWEFDYUtGVUgzaWZXaHRLOE9KTWJJZWkrMVR3YzYxMU5LbHIwYml5UUxMcXQrWGpRcC9ZMzRBSHdDQys0QkV3aWxqWklVd0VhSGNTNXFST0xEMm1GbC8rWU1ETThjNjJOa2dYVHduU0t5V0NDUkdWL09iUHA1RThiWHQiLCJtYWMiOiI5MWNkMWZlOGNkYTY4Yzc5NDJjNTRhOTE0YjI0NjgwNTRjM2Y1MjIzNDBjNmFiOGFmNjRmYTUwZGI2ZTE4MGU2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 302\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\netag: \"66f0d1c9-12e\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqaAGlb54n7dl0aNm0GzGobidO9MHxgPBqyrUz1IPSUQwU%2FhgJ0SLu9ZvKMoXv80OroJLux4VQBbmj%2F1zi%2B852KLBjdWqKjhQtu9b4VhklQpgkjGD5PS33Iq39Nzw84Jcg%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc57c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (302), with no line terminators","md5":"b146e6b18fcc9e31420381cbb45f3ffc","sha1":"ad6f489d6d0023081a2764ec325748fe44b28308","sha256":"cb6c4b3798c87dfc7047631020f67f717645017f2651a3f2d5541572a1dd56c1","sha512":"d4d1a4f89354add25a329fa716ab055fb19559f33bebe180dabf9c95672459f78fe3e848bbf24c303d6c49af1d67d813d1e858d47d76f98176a602d1af985015","ssdeep":"","tlshash":"e6e07d828409243f6593447734560250a9680116305dc23616be64ab409bc234ea3416","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-04-05T04:15:33.661343Z","times_seen":24,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG39GwLOmjgzbgPSVum3kEO3EY6EPq3TcfYpS5OesdXP1Nl6Y7cTHMCJ2W5g_Pn17DmiV__71kQ\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\nx-goog-generation: 1775025322452557\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 102822\r\nx-goog-hash: crc32c=hFCQ7Q==, md5=o0EHvHObuB0G99tq+zMwOA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33243\r\ncache-control: public, max-age=28800\r\nexpires: Sun, 05 Apr 2026 04:36:52 GMT\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":102822,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"a34107bc739bb81d06f7db6afb333038","sha1":"20bb592771e40219a7dda6d2b4cc282cee8f9e40","sha256":"9425d68313193308ca41f1add499ad9e42795a203939eff76ec2260920ad9c66","sha512":"8f61e2dcee5b7de5c5f09306163a4ecc1115ab0e64b7b96f89fbab4e7cd8541e5dd5df136c59540fbc7fafdafc2abd1ba7030cc2d34376b14d251c9744e38acc","ssdeep":"1536:E5ybuRri7PfJcgIckNmeuRnbyusirwpDwLCPoR3CRM6fpN:E4buRu73iXuRbyT83CDfX","tlshash":"9da338d67282b03493f785e7a17fa216b73a191c740d8410f17cec6a396a9878177f2e","first_seen":"2026-04-01T07:22:48.430783Z","last_seen":"2026-04-05T07:54:59.898486Z","times_seen":318,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":19,"dns":9,"connect":3,"send":0,"wait":20,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_mgp.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_mgp.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 09:06:54 GMT\r\ncontent-length: 58088\r\netag: \"69b2822e-e2e8\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OaeJ5ROvWOp5CgULkOJNuxX9vtZz9BI%2FhzOLYZ7VwT2bFwxiHsdKsX1s1a4A%2F4Pi7siuPAAq4O9zhbcROy6UhsnYkSpp58walTw2SXUs9pU2hzarOsRuNvWgsklfFtNzQw%3D%3D\"}]}\r\ncf-ray: 9e731b994da456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67db2c87a5757a6d0497fb5ec1e2e758","sha1":"bfc34ec1a382e69f995fc3a900fce7a48bcf0b23","sha256":"c549a31b4040822d167a9f67fcab87fd0a88d673b54449948fb4c252bb7f9303","sha512":"29bf6f5967104bc3dc466070ce20bbdd773fb8f0ffa0921a84b82c82f9f717e30241cfe4c2382a0cb80beee2ad74bca5f7c086d488b4c069137e73a53cdc16c7","ssdeep":"1536:huVeT9u7hgoEXmWDZsHiW5lTcQhKVe9iGcvNBmnedA5T9:geTTWd5hfhcv3mned29","tlshash":"f843021abd28a17cf1403732d8e98e95dc2fa9c6a68394582bd647d0f8836df2c74d1c","first_seen":"2026-04-04T20:37:24.632425Z","last_seen":"2026-04-04T20:37:24.632425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.xhyEK0_l.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3pVHYJGMAzOQ2tZqCbXcD6HSLBWVLs2V-2POwSqaBaWwwQc9AtV6w3Dg9RJBevcELx7QJx24s\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\netag: \"c96a39460d2b0a92409b2b92f3da88f9\"\r\nx-goog-generation: 1775025322366857\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74\r\nx-goog-hash: crc32c=pjIEnA==, md5=yWo5Rg0rCpJAmyuS89qI+Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 74\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-04-05T08:23:15.275149Z","times_seen":13024,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/TOTO_Freebet_Bettingg_menupromosifff.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/TOTO_Freebet_Bettingg_menupromosifff.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Dec 2025 14:10:38 GMT\r\ncontent-length: 26998\r\netag: \"693c225e-6976\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrroV1P7o5%2Bt3YoHkyEvGekIfHI66KE6xTCaw1kxPikCu2ftILl01jBbaASC%2FV%2FBWITj8qkx7PJf88b%2FDKjf4PDmTgJq7KQe8MiP9fEk8j%2BE1%2B7sZzvwmWV%2FjFK0WROn9A%3D%3D\"}]}\r\ncf-ray: 9e731b991d8356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc8cc8ba71e24734d9c4052b1f445c27","sha1":"441a3cbb3d1454abc8607b140099ed71103d2970","sha256":"0d6c899adffb17c08289e231924a8edc6410d5629e84ea528f0af7c8963862f2","sha512":"af2772c2b625d6d2aea1c2186b446458d48201ac71a42d2278bcf29c327d0473d903c70a6b37a445467da3a7d97737e1a2c03bbaf648f1c6e688a21dce8231e7","ssdeep":"768:7YyOpfK+U/n/mz2SG4OOGhGF4EWNL9v4MLim9U:7SpfUSxojEWNLCMLiaU","tlshash":"64c2d180ea603b19fda39ab4e6d36f5251cb5f21df9271269537836944c848c3b4e5cc","first_seen":"2026-04-04T20:37:24.633808Z","last_seen":"2026-04-04T20:37:24.633808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/kointoto_cashback_menupromosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/kointoto_cashback_menupromosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Sep 2024 05:04:52 GMT\r\ncontent-length: 12526\r\netag: \"66ea5f74-30ee\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nset-cookie: SRVNAME=119; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJHNvrDj5OghgcAK4b%2FNDtf1prvwpNAF6dA1hooFkyoP3LpuYynMvr%2BGXKWYUtzeNSIM73Cl%2FD9ps0DKw7pe3TQYPvmMFnolY8xaDXNobK4x8RnFeh0iy2ytYeSIilTThQ%3D%3D\"}]}\r\ncf-ray: 9e731b993d9656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26f0004e10d49d2c66896d14d52cfdbb","sha1":"de72c3547cd2790c83823d225def9343949b2327","sha256":"711ceb55764b0f44188b1769b84c4cf37c61b91303b6d89eece2035f63535c92","sha512":"33c67b68cedc05de87e71e70c2390355bdd32b6ee745b2701179669589cddac524b58801d58233c06f60050316eed2ce6758e8739b653af79c1e08bf3ccb4f15","ssdeep":"384:1oBuD8BVoJ7DyaX8vp2xqDde2xvzRqHmowXLh:1npJdXwwwdeoOJW","tlshash":"8a42c1229b1292394f130f6a28415744f9c854f63c6eedf49a766b22fd83a06974363f","first_seen":"2026-04-04T20:37:24.634666Z","last_seen":"2026-04-04T20:37:24.634666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/popper.min.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-5039\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 7301\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMsA5WHuTbazyb6n6QojKSf2jIDV3FjoFAytGCYOvXIb2%2FAcWeZVuNe3kKp5kucRuCoJfw4MCXAcLk7x0YmTkXuU1uFm3PewWnDOnssmQ2Etapvr%2BAo3%2ByUoFDLCEVJcoA%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc54c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20363)","md5":"c055b8c12988ec2b1f7238d85e79f4b4","sha1":"5958a52438c8d753d692b11b5419bd1490c2655b","sha256":"58cb6a78afc204b7165e947c965cbce6296ee0e587fbab3e12c0d2b6378e9004","sha512":"b8fce0655dc9e77b23efdcec09eba16234eb2e59067b182ada5d01d75fee0f0c02f423063d47720a928a58d2edcd61582ad0c70bfeda75b7d4a2f4387970f848","ssdeep":"384:fYhLSLf4UzgCyKnxRsyPMbOXrEQAkxHOxvqAQD75zfS5vIXm3YzGp/ARdOgHhgzX:ILSLAUzgCpRMbcxHOxvwD7pS5vezy/Ac","tlshash":"8292b3dc3294b0a647ab91a7a07f960eb2335875610e9410f19df2d97c30ef9a13bc79","first_seen":"2023-03-07T23:52:11Z","last_seen":"2026-04-05T04:15:33.65209Z","times_seen":634,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/kointoto_mystery-box_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/kointoto_mystery-box_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Dec 2021 06:18:54 GMT\r\ncontent-length: 94128\r\netag: \"61caac4e-16fb0\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nset-cookie: SRVNAME=118; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKmKd6g6y9gQOTmure7Ym0aXrBeszPhNd0WOa5GpBs5S%2BCWvVbi9fGYFgQkwC3O0YMwY%2FoTSRKIwz0sJJgy1skH%2BSda%2BYNvD2JkhgO%2FUQ3IDhUZFI1WEUCUvpGicAq9nzQ%3D%3D\"}]}\r\ncf-ray: 9e731b992d9256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b4d46631085c90fc48546136ca01230","sha1":"3f609dfd4ef335f5b150bfb94f3cded2c0ad0ed5","sha256":"fc065b001a0bd50de99527b2d64fdeba00bf12704a3865de3e1b5b72b7c2d23f","sha512":"55ac6d42961c6a27e00c17eaa17b4ac89fc8c97583c0a7844a5ce7acdf384d7c25b1e1ec44a92ff67161d01ce9c7a201573c89ff8cbee26e015efc9f1048b8c2","ssdeep":"1536:lBrzOOQYn0wnH3cK0SCvF9nLC0TAzr3j5hCi0jnPWE+kXuVY8h54ad1Uiexx/E:lBnt7nT0SuXmLrT5hwOEFaYu/1Gc","tlshash":"79930263a45c840f4cf71b3ef898091f80edd583b6676493e80c15ed3a7e5ba0692d6a","first_seen":"2026-04-04T20:37:24.635978Z","last_seen":"2026-04-04T20:37:24.635978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.DazHfinG.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.DazHfinG.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG29MduznFSbR_i6WoOHjfMTPMGjmZ1BGof3JPu6fbhwBpOQFjZwf3F9b9UGdTQ8FmaABd-JDTI\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\netag: \"2d77a6aa353e00f553a63318304ed405\"\r\nx-goog-generation: 1775025322347891\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 546\r\nx-goog-hash: crc32c=k77Z4w==, md5=LXemqjU+APVTpjMYME7UBQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 546\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (545)","md5":"2d77a6aa353e00f553a63318304ed405","sha1":"79829fe224284805c193a91d2fd444f246271fe0","sha256":"f068996cda742dd6fdb0e857c16b010966bf690480381465595e2b22935de2cb","sha512":"8a7fdf55c616c0d7f3f6d03d2196d7c4d82cb385c2dc73ba36ab9a08ac2f43cbee752de0e10302fda3277fa54813cad993b838b0ae98ac1f17e3d5001a67a228","ssdeep":"","tlshash":"fcf08bc53592f5ea02ab59c548379003f3298818b4baf580e614c5f12493057471ab27","first_seen":"2026-03-18T09:33:42.028688Z","last_seen":"2026-04-05T07:28:09.617507Z","times_seen":1181,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"60c7b310-ce19-4cb5-8137-5d8ce9362a2a\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Sat, 04 Apr 2026 20:36:54 GMT\r\nset-cookie: __lc_cid=a1f0fd4d-6bdf-491f-a4e7-fabe36f0054e; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 04 Apr 2028 20:36:53 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=df85dc28672eb5eb6ce128c4a959f097068be5a22407d80c40e5744d854e00e5c30131904d61a6cfbf670c31e857beb4b1a4375211f4b2b8bd61d21ea541; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 04 Apr 2028 20:36:53 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=a1f0fd4d-6bdf-491f-a4e7-fabe36f0054e; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 04 Apr 2028 20:36:53 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=df85dc28672eb5eb6ce128c4a959f097068be5a22407d80c40e5744d854e00e5c30131904d61a6cfbf670c31e857beb4b1a4375211f4b2b8bd61d21ea541; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 04 Apr 2028 20:36:53 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1775335043\u0026tag=8cf4e5821ed6378f5974a49ca69562388cec0cbf; Path=/; Expires=Sat, 04 Apr 2026 20:37:23 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8ede4e85f94f760568bd820da5a5f8d1","sha1":"469d36fb138f647d025a5748a093d4aa45402e2c","sha256":"bee682902137b5af5e001ad674005c8ded4ad8a7b37ec2ec70f09fb92ac91ea4","sha512":"b982c0654aa83f7b801885b786503d7ebec09a5ca820b07ed3070429ae86d24330600a9a47e7ec156dad41f9cd57505d0e870e6ce2a3861a913873da8ebb2798","ssdeep":"","tlshash":"c6d0222f43932ec29fe80aaf9e010a045022591284e81ce980f5f0a94b58e51270b11b","first_seen":"2026-04-04T20:37:24.637356Z","last_seen":"2026-04-04T20:37:24.637356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8G2GK6T5T5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=G-8G2GK6T5T5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\nexpires: Sat, 04 Apr 2026 20:36:51 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 155485\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":468170,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"9341a0b82ecc5f99bb15efee2cb7609a","sha1":"1c3856e63db82d5192460a81bd144a3a579e6c5e","sha256":"eae8c2c2718be29a5ef02429827267ae8a1ac99acf80a60334734bdf7ca27934","sha512":"e178dae5d626a0bc3581121cdc814118c9b9359dd741e2d1db0165071492c6f8436bfa7c4c928bd1442330c14a66af1e3ca2be61bcb9e8ca824e18c40f34cdfa","ssdeep":"6144:Cz3eqQGzLr8DP9aGb/F8x/OW+/5EiWz1SoRSLrgqz+:azH8IGbt8vci","tlshash":"57a4f9ceb3d674225396f478903f018ba57b29e2b448c8a5f189cce41e7469a4277f7c","first_seen":"2026-04-04T20:37:24.638129Z","last_seen":"2026-04-04T20:37:24.638129Z","times_seen":1,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":114,"dns":0,"connect":31,"send":0,"wait":62,"receive":87,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/GIF%20WHATSAPP.gif","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/promotion/GIF%20WHATSAPP.gif HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 410726\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jul 2024 06:11:35 GMT\r\netag: \"66863d17-64466\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Sun, 05 Apr 2026 00:36:51 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b8ecb615fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410726,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"06700578ffca727ef87795db95fa13fd","sha1":"558691889829b233580f128821a7c04782959bb0","sha256":"b2a9e55c39b7f160a343da651423d1ffcba0c6d6485f864548f180b61967add7","sha512":"7fecac3693003eea8b3aae9fa34e34c259ff8accd636d073adfdbce62e27aabe8b3641b7cf20849d4abbcfecd27f3db861617247ff451368e7d7df1a96290ec9","ssdeep":"6144:orPf8UaQA3OcfOh8fvh5BJG5sJyW/kGXq2VdtIMFjfXzOfFKTRBNAI8vCq32h:EPlMnHBJG6TlXq2Vdt7XO4ovp32h","tlshash":"bb94127ee7685f83ee419132017feb175434c824b61a0636ef4ea12b7dd62be4c226d1","first_seen":"2024-05-27T04:55:11Z","last_seen":"2026-04-05T04:15:33.68761Z","times_seen":154,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":66,"receive":24,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/js/vbulletin_md5.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-1639\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 2041\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LilySYhn16%2BtcimZbvkKbPOG9gBgB3Gp4hNXalnPexZ0Gkd9zIHjC%2BiTMbl6Hj%2FPHlhJUC3fO1MiXedHDFyhDwh0xp8dLE5JBJTYe%2BlRSgMa2vCq7eqjsNm41fOHjVFcw%3D%3D\"}]}\r\ncf-ray: 9e731b8e7c4bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-04-05T08:07:24.982012Z","times_seen":1767,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=13527582\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fkointt-alt.xyz%2Fpromotion%2Fwl\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__ogfwz478e9","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=13527582\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fkointt-alt.xyz%2Fpromotion%2Fwl\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__ogfwz478e9 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://kointt-alt.xyz/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://kointt-alt.xyz/\r\ncontent-length: 389\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":389,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (389), with no line terminators","md5":"6bbcccf9bc8fe83bb2bb3cb46e5fef45","sha1":"6b03e68452ef73224a81edc16edc5034b088e13c","sha256":"a1142330d726e1eda6b394191fd02b5520bb3ed0c7a37055dafe4bc9f6f34f02","sha512":"b4347c9199a6900bf929785d875d470ea65f8135ce476bcd4d1500e43a2cadb07fac104f9014f55779bc4ff51e4c1eb133f2c43e812b4010372dc6b4a9b7b8cd","ssdeep":"","tlshash":"bbe06833e60a5831b5c697f5d8003a03a93442b2a446e9f8f0690210535f3cd9320717","first_seen":"2026-04-04T20:37:24.640399Z","last_seen":"2026-04-04T20:37:24.640399Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/Kointoto_Deposit%20Harian_Menu%20Web%20Promosi%20copy.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/Kointoto_Deposit%20Harian_Menu%20Web%20Promosi%20copy.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Oct 2022 08:30:16 GMT\r\ncontent-length: 12706\r\netag: \"633fe398-31a2\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35Pj63nMcyRDwGL13PbEtAVtAmRzytuJGVvGe8QrvYPL2Q%2B2BaePB178hsEgt%2B3tuwA5ekLnL7YrBJor%2Fd%2FLA0j9Qo08GMuphsVAY8Y5sVco4zp1A4ZC%2BgZu%2BtzaFWs%2B7w%3D%3D\"}]}\r\ncf-ray: 9e731b992d8e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42dff39e54b04af77c5968e55be43d22","sha1":"c00c41d084faf75fb63575690e1750982968b148","sha256":"0918881d1bb4e7c08c4f48dcc42304339b19ce00598c54dbcd3b69733a16a0ad","sha512":"c2a948b457ba3da09924819af9cdb845263aa93923faec314d357bd763d7fa6d8a2b515e757239c9be0cc8d87920007c09adc46bfb16f91fc3499390145bd858","ssdeep":"384:CIg8kVcXQ518L6OhJfeGKys+ARxkqAcvTN:LghqQzdOqyspeYvTN","tlshash":"d342bfff94ee4b7141b5b8209ee1526d4e2c650f289c4a06b03e72cfcb2d063ad9254f","first_seen":"2026-04-04T20:37:24.641275Z","last_seen":"2026-04-04T20:37:24.641275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.6/customer/rtm/ws?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/rtm/ws?organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FNlpI0sunkIxQeJ+dgvGEw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: yFuAiCkFLUlFi5cpn+p6oo8Zhbo=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Sat, 04 Apr 2026 20:36:54 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":391,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/css/shio_svg.css","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /css/shio_svg.css HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-97f\"\r\nexpires: Mon, 04 May 2026 20:36:40 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 453\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktHJjGAQvCHVZdpt%2BikQLPCE%2FBMH9yAK52vGPyiCRL%2FRRh5KH6n%2F8%2FGhZyGDNqi%2BBeUtPZWvSOi3LwgBRB3VRk6KZEWg%2B%2FmPXWNAdsp3prasn9wViRcMC%2B5wJFYlWgnKbQ%3D%3D\"}]}\r\ncf-ray: 9e731b8e6c46c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c40ec89e8a103f2e51b90dce6047474b","sha1":"d90eaeecc694d94c5883004e05ebfae4a6cbe846","sha256":"e01ff4e0e870caee450fc361c0393c4caf42514432c9e7425da4268a25f2d607","sha512":"99d21e9206a85fcf389900b7b91b391186ee98ff8b5f89dcd0a6152d12b0070bf09d7c4f634e5aa9a5bf851c910f2b8483ed70b99de99535ec7c3f05a9c5eba6","ssdeep":"","tlshash":"76412961809a670349226ab065dff791eb197356236cf23621e73084bbedf4cb91cc34","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-04-05T08:07:25.072365Z","times_seen":445,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 759\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"af2159c9328b32d1debb53406cbedae4","sha1":"cb6f4011a57e2d1f0f5ecde1001a1593b3cdb377","sha256":"1cc6c99b7a37836bca694b5b3d2bf664ebaa826c81a558b502264a311b54b5a5","sha512":"d030f41ed894aa86040f6d6c2b9a252660c2fd81704756e353d96d4ae83934d802f2a0391e2526c9691a1b5b50d14739f889bd2da731a434859ba9ae4f838581","ssdeep":"","tlshash":"3a314173aa10d91d72748231b99bb08e895d534e8644acf2b29412fe0ae0ed58273e29","first_seen":"2026-04-01T07:22:48.549986Z","last_seen":"2026-04-05T07:54:59.873811Z","times_seen":271,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/WLB2CTOTO_650%20x%20150_mgp1.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/WLB2CTOTO_650%20x%20150_mgp1.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 09:06:28 GMT\r\ncontent-length: 47302\r\netag: \"69b28214-b8c6\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bzsm4V0xNqXSzjVDIDZOeZd%2B%2BPpAB68%2FRNjawlHDe1htUq43qsmYUT%2ByfxCUwZcIInclDUHaijaPap4TOW5LJDh3W7AHtmTHEYGzMw1GmH83inkDRYvhvctc5yXOQz6G4Q%3D%3D\"}]}\r\ncf-ray: 9e731b994da256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac2326fe1ad990416f2427aaeda4e604","sha1":"7ab400756985db4192917c7ceeff1b3749d5b0c8","sha256":"7c8846f1925ce53dc0f8a7f7dd7d31112d3637c93b1650f28f66b08121cf3e00","sha512":"448266b6a22bb1d9862943382808a5a655a42a36026188cdd1ede6eb67ec0490b97c5255674fbeecf1f5d8f91573b6c67a72ad50128ffeece453d7057a77f282","ssdeep":"768:xzMz7LhN7+Q7owkjGOblIUrD3LjJpHB/pvR0WjKFPrbeTxtTevBp3So2r:iHLhN7zoRnblHrjLj5pxWPrbeeZp3Soe","tlshash":"a623020992a6592dee669939c4e473ebb93c37bd01c37f88dd1d8e485a88e53dcd020c","first_seen":"2026-04-04T20:37:24.642972Z","last_seen":"2026-04-04T20:37:24.642972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.jvSlFlyI.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.jvSlFlyI.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG39DlNT9H0_3UrwvekrldU9svS60bNTflGg_Xg10RMvtGZulNQcchueL415g4j8UaOuncD_0sY\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\nx-goog-generation: 1775025322417327\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 446604\r\nx-goog-hash: crc32c=SljERg==, md5=qixmWPNSY3aS6m4XdxSaRQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 125743\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":446604,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aa2c6658f352637692ea6e1777149a45","sha1":"a3030810c807764b9cfbf723f92872796bcedfb1","sha256":"bd90d8518757fc4dff0e1890fbce3e0e8d0be0fd23e1398d96310f95cd6550db","sha512":"f7a805b0c2b0e533ca2efcc8c0129b04894c1efaad4045d834830b2e97dd21cf1446d289b939a8d413c9ca74a3b781afec0923099111dac1f132ba8d3131d708","ssdeep":"12288:3YfiJ1jPkC8nMQviHXnK1rhNhQO/tWXEoSQXGtMf0Fem1D9ZBcF4/uMdWoK5ATEr:3YfiJ1mNh6XGi","tlshash":"c1946bd07242b938dbe7c19b90bb1609f73d3d09b42e9660f1ade85e33944489277fa4","first_seen":"2026-04-01T07:22:48.511782Z","last_seen":"2026-04-05T07:54:59.889634Z","times_seen":279,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/js/bootstrap.js","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/js/bootstrap.js HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Sep 2024 02:26:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66f0d1c9-20235\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncontent-length: 25067\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0tMfTJLgQmn%2FdZCv1U44lM%2BLTMJVm9cq3QUR8L%2F8Kj8y0y5qWmXXJyjqZWxVUtjRjDb3daWS6K1RLiHW%2B3juHBOHgE%2BYFcFDpfrQAdXEqVT1j%2BJaGsyJF1whIiPoXHx6A%3D%3D\"}]}\r\ncf-ray: 9e731b8ebc53c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"7f827fe484ec04346553202782b0664b","sha1":"a9465bbb5a0aef24f9b25184e3da3637634635f1","sha256":"a65d5b4abb65aad37f302c96f1751362e2422a8869f7f889112556d77e384813","sha512":"b0bdd14fd41e96eea34eaa16515cc602e9896b26a48743fa59e988fe05dbb10c457f92f426a17832fa9179e7e126a1d2e535c926a53fc1a41d1eaebb9c00f38c","ssdeep":"1536:5ZMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:J59siWFUOvhMEq1rdK","tlshash":"2fd3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2023-03-07T12:09:05Z","last_seen":"2026-04-05T08:29:58.63083Z","times_seen":1038,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/assets/img/chat-square-dots.png","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /assets/img/chat-square-dots.png HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 799\r\nlast-modified: Thu, 21 Sep 2023 05:51:01 GMT\r\netag: \"650bd9c5-31f\"\r\nexpires: Mon, 04 May 2026 20:36:41 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 11\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfo2lpn0faIEyRh4M6DUX1W3kHtjBOC4xgZiPYkjM5G5NumYqJySqVy19yKigmG2vdE2jZSA2EBZIoRbV0v94wVZnPkiCff0c2cBXBaRjne2bWS6mMPepSKgLbMN%2Bq87YA%3D%3D\"}]}\r\ncf-ray: 9e731b91ac93c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit colormap, non-interlaced","md5":"28757a1a241f563121218fcc68597c03","sha1":"607d405683739590aec92cb1b198cb09476583ff","sha256":"9f1d98702facd1372066598400f0259e282675a2ab6c778f007922645cf31023","sha512":"92827bc01e5d07921ddf08099f9f7c0056413167a7e0905ee993f489573fa9cf40027f726554c2701fdbd7a9a5f057de72eb591e7e80b5456ab55b4dac255696","ssdeep":"","tlshash":"cd010eaab50c3abac23980734b633f3d49afff34ab0840096142cc350d2a879c196f53","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-04-05T04:15:33.653925Z","times_seen":24,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/kointoto_5-lucky-ball_menu%20promosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/kointoto_5-lucky-ball_menu%20promosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Dec 2021 06:18:52 GMT\r\ncontent-length: 91254\r\netag: \"61caac4c-16476\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juIhmVmEZHaQZvry9hmOgA8kdrz7aXhFPJuB5ZPg2FITBxrTmi2KdmEEVWRwoB0uAPyDsirbUQNrnZfqJ1Tf6DNUWi8CxtXdVAzixWLN8ib450KsjtjaE6njM6pxBclECQ%3D%3D\"}]}\r\ncf-ray: 9e731b992d9356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ce60673947262eaa545efb4a0c6dcce","sha1":"62b54cacf2885253a0ebb0ba72f1dcbe62fd6b12","sha256":"a09fce61faa3cdacbbddcb7804db7ace73df45bad8d246c64e2849426228e89c","sha512":"f05534d356290b758254f68aca994d58bb80a0d27c31923c829db38bf29089585f0d5b2e1c1c50bd8d0bbecfc844a9596c2d4d7640e77f679931266ed9a24e5f","ssdeep":"1536:gaqxdDT+jmDytlzkZuQzGdws0pJhvbLpIonytWsl7DLcSj3ed4EkC7Wh:gakDCMytxkZuQy6pfmonytW87XcQed4N","tlshash":"c59312214d29cc80ee52ce30e4c9f529b57cd361f0d70169e22bab504191fdaf9bd98c","first_seen":"2026-04-04T20:37:24.645413Z","last_seen":"2026-04-04T20:37:24.645413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.D8au6i5G.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.D8au6i5G.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3OAG-O3ZMHyCJg4eePkhmIxiF-OZ3ZEyFPZI8_oi4pco9EYjW9w4zOWHO3g3ASygbWuC_-Vo4\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\netag: \"e9404262567c5392f0b3616c6ccec61d\"\r\nx-goog-generation: 1775025322368700\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 401\r\nx-goog-hash: crc32c=rYsMjg==, md5=6UBCYlZ8U5Lws2FsbM7GHQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 401\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (400)","md5":"e9404262567c5392f0b3616c6ccec61d","sha1":"6c521021fabce32ca848e5c16b1d28eaf8bf1dae","sha256":"813ff4536b4089189d3d10e0f4cb4404579e6fce59cec959aae0ed0e430014e9","sha512":"d2157c4d7be10122134254cde74eecacf5216df8646252f16f0206e0fb8e51ac93f1c63de3918ce93a5172e20e643c788079d066c640eceeea2bf7c65fdbcc87","ssdeep":"","tlshash":"57e0caca97013de2f5cacdf8c420e4e55af253aa47f083b0c4ce13310311162ee05542","first_seen":"2026-04-01T07:22:48.400576Z","last_seen":"2026-04-05T07:54:59.855569Z","times_seen":271,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":19,"dns":2,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.101.10.202","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=13527582\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=60c7b310-ce19-4cb5-8137-5d8ce9362a2a\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-04-04T20:36:53.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG3mVw0cnR1Ls5K1HrcWpGZ8AIveVoNYPeFAJY5Y7f3xBFtF5zRxi9od3-d6o8bEJwPj\r\nlast-modified: Wed, 01 Apr 2026 06:35:22 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1775025322387362\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 04 Apr 2027 20:36:53 GMT\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-04-05T07:54:59.89031Z","times_seen":24338,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/headerdesktoplebaranKointoto.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:52.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/headerdesktoplebaranKointoto.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48324\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 24 Feb 2026 02:49:40 GMT\r\netag: \"699d11c4-bcc4\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DUJ08LSfP5zR8j2MyhltZKsb%2BnvxM%2Fl8RJ2VKgDoaa3V13pn%2BHwnikeNUX%2Bs7Co58C%2FtdfuC70zEDp6EElyQ29wlGYj1QAwoW2qC3XdNqs34PbzFSeOwg9xpQm9w37bHA%3D%3D\"}]}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9e731b91cf260731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10c0699fa254da282976b39d3e34761a","sha1":"970acf4eb7fd345fd8f474b3c06a34a6f181a0ed","sha256":"d3f74ab6e503267955a19543a894092015d342917240c5e862aa8f164db17c8e","sha512":"458a85b0db92db3a0facbf7e48d79e28a961570629f31ad3a4d7431a2240b7a124d577c5115a68ad8283b81e16e969cfb52d21d91feb0c2c71e32bc805ed274a","ssdeep":"768:xFRLCpF+c0R3PTfkdGboDXOLZxbS54eRjfCYa9P52XJtkWbdETzhP3kmYMfp7w:xFMN0wGca7bG7CYa3Q9CTzBkZMR7w","tlshash":"4023f1851812aa2bd02d997fcc2e4b52cf41b75c21203c6a217ff4588ebe1d637adb57","first_seen":"2026-04-04T20:37:24.647522Z","last_seen":"2026-04-04T20:37:24.647522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":21,"dns":9,"connect":1,"send":0,"wait":196,"receive":3,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/WLB2C%20TOTO_CASHBACK%20SPORTGG_MENU%20PROMOSI%20WEB%20.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/WLB2C%20TOTO_CASHBACK%20SPORTGG_MENU%20PROMOSI%20WEB%20.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 24 Oct 2025 10:12:22 GMT\r\ncontent-length: 19520\r\netag: \"68fb5106-4c40\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nQAjjMP3Mn2b%2FtDR%2BePPVXK4GEc7hgaxeinj%2FlI7WQPOL1YTmK0xeK0LzFsbwpRRvnb7RYCuH4bh7%2BtbyYGRdBP%2BqrHv4pEbvOL7ngVyfPV9x3uGDb%2FNMsCA%2BCQ5s3fRw%3D%3D\"}]}\r\ncf-ray: 9e731b992d8856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bee63dd3efa61da6d6932fcbc6ee6240","sha1":"e90db1869a6d32f7e33fbfb157e1b2003deb9f53","sha256":"d75114e15e871c65657172065f635a3ecdf8ac679e77812ceb7cfd53ddebd162","sha512":"93870f86637dfdf8a72f41ef288319433e5a726ad145833d3648d6ae6ba1715bf70ad41dac9fb0cc6f33691ba09315d0404404fb21bdd16bdcbcabcd09361819","ssdeep":"384:5YNg7H4G2wjdKkWitIuoWh9LLNX3cp9CuvZOmsWPiM+fUd1twVhwKIH2:5Yyj4G2MO8yWNXXuvZKMN1SPwR2","tlshash":"6992cfffca1219cfe851b73515726a4ad3e36829d3f14707412287696321980ff4f1ae","first_seen":"2026-04-04T20:37:24.648373Z","last_seen":"2026-04-04T20:37:24.648373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/kointoto/KOINTOTO_BannerEvent_EventPetir_Slider.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/kointoto/KOINTOTO_BannerEvent_EventPetir_Slider.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 14 Oct 2023 08:30:51 GMT\r\ncontent-length: 67846\r\netag: \"652a51bb-10906\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8niqhDPvCmszXRbJZKncQpxE%2FMfx%2FKiLck5siHMzIJEtMGbp%2BWy%2F%2FkJHK28a0%2FIV4DcAU%2BBIWXIQ%2F%2FvQ6Jxd4ia18DmbdX9VDgRHITi%2BrHNnVF8cFXTJi9CRt3YrsLOGQ%3D%3D\"}]}\r\ncf-ray: 9e731b992d8c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1110x329, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1189f8e3231ca1d9af1b5eee607f1ec1","sha1":"d5a353097646aef91b4507ed6ab63bb88dc2844c","sha256":"3abd323676c61b56d739264a188d2274940f5a36524e0c1cd9dfdee1054046e9","sha512":"1694e97761e694b358db4084ffd04208b398388cecf4bb4d1878ae612f9ebeb8ae1dc0b7f9ef6125e24c504f409c1b0e03c5c3616fea582a36849f313313c2f9","ssdeep":"1536:3OibiBgmGQanjm0Y3ULP6T1NTfPZXA0ueT4IAu7/Qw3FGaP7jAaKgM:pwguajOULP6/pPueEIAu7Yaf78aTM","tlshash":"c16301870d2179c7921550ece6cab906f064328693409f86c3787bf7b6b7769a1c362b","first_seen":"2026-04-04T20:37:24.649242Z","last_seen":"2026-04-04T20:37:24.649242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/Toto_Baccarat%20Live%20Proxy_MenuPromosi.webp?=v2","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/Toto_Baccarat%20Live%20Proxy_MenuPromosi.webp?=v2 HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 16 Dec 2025 06:38:52 GMT\r\ncontent-length: 34150\r\netag: \"6940fe7c-8566\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtMS8VS3MGuKwXC29pUypwI69TGHt3b2H2%2BTq3yb%2BPLqHzuBljAs1KxmDtpvwSfeij87B%2BHRnsiV8JdJLrCHWw%2F01%2FTf6gUNeBFCQkiIfpJ%2BgJuHQbkxIP2mBCz99F7xgA%3D%3D\"}]}\r\ncf-ray: 9e731b996dac56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ad87d8c797ff76a1679502ee28ec638","sha1":"860e950edc04ca2b4b1dccc4b76160b6d4d5bf04","sha256":"f07f4cbf7d340bdaf75b16fe5fc56c4a43632fc7c09da496d2f9630a72fd1eb7","sha512":"02d4c253a66aa438cc5bf8041e0ee45393ce259b8759ae6ae40b6f070d097296faf2d0b034efa42ab2afd3983e6a71efa7978e58b458d5842d40b01abd36ea6c","ssdeep":"768:vYyWEemEQ2LzWNKfXEExDvAVGRCfsll8CEvB3y:vSAEQ2fWkfXEgDv6GRCEAdZC","tlshash":"20e2f181e7375615f120aafc23591bd9cefa34a816339f69386d5eab0ade181f40d03c","first_seen":"2026-04-04T20:37:24.650028Z","last_seen":"2026-04-04T20:37:24.650028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kointt-alt.xyz/js/custom/floating_icons.min.js?v=1775335011","fqdn":"kointt-alt.xyz","domain":"kointt-alt.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:51.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kointt-alt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 04:38:43 GMT","end":"Mon, 29 Jun 2026 05:31:54 GMT"},"fingerprint":{"sha1":"9B:F4:08:6D:7D:9B:82:A1:82:52:A2:7A:82:C3:42:09:35:F1:94:02","sha256":"87:BC:9F:3C:85:52:74:21:77:D8:39:27:40:EC:0B:BC:1A:0C:AB:55:1B:85:5A:62:A9:12:89:08:F1:EF:5F:A0"}}},"request":{"raw":"GET /js/custom/floating_icons.min.js?v=1775335011 HTTP/1.1\r\nHost: kointt-alt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/promotion/wl\r\nCookie: laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 20:36:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Mar 2025 03:11:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67db8761-494\"\r\nexpires: Mon, 04 May 2026 20:36:51 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncontent-length: 657\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IDETVTTpeVpDSvURwpJpCGe1V%2BIlWiDAS%2FIB%2Fu3bJSctrMNMjO6fuXH0B10rZe%2FPLKc%2F9MYexQtMRM%2FIhxUai4u4Pq%2FsmF4AsVLdYRGDwvZ8BARD7FBZ9%2BagWtiDncqAg%3D%3D\"}]}\r\ncf-ray: 9e731b8eac4fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (1172), with no line terminators","md5":"a1f9706eeee7690ce0fb65264290a61d","sha1":"f47499adeca0a42d73894a8424a5dc65e1c8cde4","sha256":"afbf313c9cd8546932da922fcd36f00f9e0787370ac0d46ca82d3cb31d15d0ea","sha512":"99830735da3f51fcb6510a5f682638c2ded1a875790cdc5ed9eb928decf8d744a48e107d92af6db421b666a86cc88542c187c2d2a0c86535937143bbe898e15a","ssdeep":"","tlshash":"0f2186a083a6d43d83809166c37493097854302efe529640fdfc8a8b1ba9d4c6c23efa","first_seen":"2025-03-20T08:45:19.929797Z","last_seen":"2026-04-05T04:44:51.214101Z","times_seen":1472,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"kointt-alt.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net//banner/image/promotion/Kointoto_BONUS%20FREE%20SPIN%20FA%20CHAI_DT_MenuPromosi.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"104.21.87.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kointt-alt.xyz/promotion/wl","date":"2026-04-04T20:36:53.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET //banner/image/promotion/Kointoto_BONUS%20FREE%20SPIN%20FA%20CHAI_DT_MenuPromosi.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kointt-alt.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 20:36:53 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 13:02:34 GMT\r\ncontent-length: 33078\r\netag: \"69b950ea-8136\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDbopf8dpGKMLA30ZZdKHjwgw1XSSVXCYbYNpVujqhG0mSdg8UXuS7FZxLlhNDbNiSA0MLT4NoRnUKHQahF612EkXqN29PHwNQEWXNX2QBmL2QYyifxMA3rULtZTndQP3w%3D%3D\"}]}\r\ncf-ray: 9e731b991d7f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b53fd21704021abf69fb0e1ccc5bb9e5","sha1":"19eaa88f22ee76ae18435269da17882e4c3bb9e5","sha256":"16d00b4df838519de41907484c97cc9d2d2705c0dd7d2286635f39ed91e06b39","sha512":"5d4f7bf78d0301d34c0b680a6433d986705041357d20772b92a92c6869620ffeb97f388685f9d4c0272b6fe9d063068b09d2ea49a1786576b74b4af19106e7b1","ssdeep":"768:zYyevG7T5cbxGn4l4nmfI0W1+LhNphfqWY9TYx0+ytWGF:zbuIn4l3I0NpwWYWi+UWGF","tlshash":"dbe2f1f0e99ac69bef35e53cf594f3c59284e45892037c06070eae3e04a81d1e99b893","first_seen":"2026-04-04T20:37:24.651884Z","last_seen":"2026-04-04T20:37:24.651884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}