{"report_id":"a80ec19f-6265-4ebe-a0b6-5a54ba893ccd","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-02-17T15:02:47Z","url":{"schema":"https","addr":"myzoonegaraticketsnow.com/","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"104.21.15.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"title":"Zoo Negara E-Ticketing","dom":{"size":57105,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42862)","md5":"3e23edd47314130d22cd9ee50bc70258","sha1":"e76ed3a4af27ab8a15fff3a812fe6655695f4df0","sha256":"dec3cbc4aa5dfff54b71d1e98808d85258a4dcce964f075bec8755daaf5d0a11","sha512":"7efb351fdf60be907dfcd7949a1170665a1b796c0e64b8d44921ebab43891408f7e8c47892a936f1b344a53fd9afc7184ae475e535d62516c14b7108cb575380","ssdeep":"384:1CTQzbeVNr5/O5chsETfVR/wJdZaLFPmpR:OQXoBOcO41LFUR","tlshash":"4443c6d000424ebe5c575bab75ede71af096d18ac96fa19ebbce01672bcfec10a55300","dom_hash":"domhashcacf5b3f874d03274a5dc51cd97ab90e","first_seen":"2026-02-17T15:02:21.78108Z","last_seen":"2026-02-17T15:02:50.637843Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"104.21.15.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T15:02:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-17","alert":"Detects file containing Telegram Bot API","trigger":"myzoonegaraticketsnow.com/static/js/main.fa052155.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdn.mouseflow.com","ip":{"addr":"104.18.27.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-06-06","domain_rank":53921,"first_seen":"2012-07-27T09:45:11Z","last_seen":"2026-02-10T08:23:28.602673Z","alert_count":0,"request_count":1,"received_data":80619,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rezervtemka.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2025-12-15T12:38:06.57368Z","last_seen":"2026-01-07T15:59:05.480775Z","alert_count":0,"request_count":1,"received_data":815,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"myzoonegaraticketsnow.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-02-17T15:02:16.713992Z","last_seen":"2026-02-17T15:02:19.798954Z","alert_count":2,"request_count":13,"received_data":1478934,"sent_data":5940,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/static/js/main.fa052155.js","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"307200d5eeaf5e8b12eb49339a6a019f","sha1":"7f78a72906f65f9a83e2e1b2f43e84acd7c009fd","sha256":"08c8da9144c1f6a9460e96aef5577d5ce55e96ab9517f98a2bb531ac8f789b01","sha512":"ad7d394ebca829d0d23988f5c37f39aa2bef9c962707759fdb4756ac3c6c6c159313cc6f0de8956465a2ec4604539ae72065b1d687bb85995503678cdb732a3f","size":385428,"token":"8543540060:AAGACdiDjWePKg-JOO58cVdWk4VObbo0D6I","is_revoked":false,"bot":{"token":"8543540060:AAGACdiDjWePKg-JOO58cVdWk4VObbo0D6I","user_id":"8543540060","username":"gkdjfdjkgdfjkgbot","first_name":"gkdjfdjkgdfjkgbot","last_name":"","chat":{"chat_id":"-1003847829880","title":"ZOONEGARA 🇲🇾 | X","type":"supergroup","bot_is":"member","total_users":10,"active_members":null,"admins":[{"user_id":8420764048,"username":"bostonredstonks","first_name":"Castello.","last_name":"","is_bot":false}]},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"14760d78ae1ecad7dc65fdeee77246d5","sha1":"89ec687139acc6f233f9ed3826aafdc3df73c8e6","sha256":"68383cea28aedd158b67eb521067571013ef7dfa57073fc69fc2fdc22fcb1104","sha512":"6024387879436943ef46c50f69695e8f337074580e54aed32701e63b91a7df89b54c7652775e3cd9fd44a95c227afe93c920e2737fe0af4fb9658330ddc5958a","ssdeep":"","tlshash":"ead02e2528a4882063a8018aa2bbcfa4378010185801e88034c9cc3e7a75ec7440a5dd","size":249,"data":"","first_seen":"2025-11-11T05:15:22.125482Z","last_seen":"2026-02-20T18:13:41.857074Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/static/js/main.fa052155.js","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"307200d5eeaf5e8b12eb49339a6a019f","sha1":"7f78a72906f65f9a83e2e1b2f43e84acd7c009fd","sha256":"08c8da9144c1f6a9460e96aef5577d5ce55e96ab9517f98a2bb531ac8f789b01","sha512":"ad7d394ebca829d0d23988f5c37f39aa2bef9c962707759fdb4756ac3c6c6c159313cc6f0de8956465a2ec4604539ae72065b1d687bb85995503678cdb732a3f","ssdeep":"6144:/WnWUkfqhyTSVzTtMsS5bNcvd7xi4fvPxE5vT6AP3cunr8gudc:TUBtMX2dG3MguC","tlshash":"23845dd4b252f5656fb301e640bf040af33d1e1ba80d8860f165fc9a79a894d6277fac","size":385428,"data":"","first_seen":"2026-02-17T15:02:21.787442Z","last_seen":"2026-02-20T18:13:41.853892Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-17","alert":"Detects file containing Telegram Bot API","trigger":"myzoonegaraticketsnow.com/static/js/main.fa052155.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mouseflow.com/projects/67ab6561-c163-42d5-9f5d-0fbea9ca94c7.js","fqdn":"cdn.mouseflow.com","domain":"mouseflow.com","tld":"com"},"ip":{"addr":"104.18.27.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76971abd370b09c7a8e7a966d4ab5f2e","sha1":"038adc07191ab674e298808a2256eebc399f72e9","sha256":"bfe09c4a7a11a7b73245fd3b626540514e692f992e0963554d1c80d99cae5d77","sha512":"1e998db6c179ca2f77d1d16d037636871e410173725b00dd883d74a4ab84e0cea0dcd68cc252afe5f066a14c56509e116dd65ec616e1edb5ac8bd26dff0c2e65","ssdeep":"1536:fl9+nyBIQI6lzHJzH7vTKikIYk7FID9C+qm6M1XMt6F4Ld2wPu6rmNF1RwqgX/8V:t9cyrlA6SNF2A","tlshash":"fc735a6a3371313f418397b5a3df160f30399499a7014cc8e6aaf8d4bab0d4b1a77a5c","size":79904,"data":"","first_seen":"2026-02-17T15:02:50.651521Z","last_seen":"2026-02-17T15:02:50.651521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/3.jpg","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /3.jpg HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c6-27737\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VP9wrPkTJHi6po4QB2k16ywPX%2FsQfLESgNSiYDGnu41Fn3ct%2Bz3mOPyAUcgHz7ifuobiCZv0eaC%2Fl2UWDH5aOYvXpX9X9Ae95mF2roCl7jkBX5m%2Bbm0JWt8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ecce5886c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x600, components 3","md5":"4a0533526f60cedef3b1cc040403c41b","sha1":"ee0e647695f806a38fb325d4cfad5384f2b71664","sha256":"5abb6c35cef1a418569e1595784c7c1e3e67a9209e20a6006f07f33a9f93d9c7","sha512":"8c1db8d037cccbfb15eb260e923964f9810bd6a6fc8c71c8509a938a765c1b69a647678ffd6ff04a5c487dc9daaa114f43fb67826911033c0a8a04a3ac634540","ssdeep":"192:W/QtdB3/EEtAy4aP7KW537KQ62hnzUpA+BDnOx6WpkBaI:HdtEoAy4sP5rMInweAOxPpkz","tlshash":"ee02bf255c91cb931cb8704355fadeacf9339dc5de4cb97adcb18b86a06807a49410c7","first_seen":"2026-02-17T15:02:50.64105Z","last_seen":"2026-02-17T15:02:50.64105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/logo.png","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c8-153f2\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhJB5nqgxgHl5eMXOiC3VCv1hzw41eK0zl5QiaZE3dz5gI5DebINp%2BXjX1p%2FbM%2BahUrzDuOdDlQVptcs7ehYskVTPoooIMkSdMM2NxoVVWeWrWWkwHeQwj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ecff0686c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 667 x 500, 8-bit/color RGBA, non-interlaced","md5":"90d2100be04a99c40117e24f49003868","sha1":"1fc6ab58bfde223c2a74ac766389912bf1128c2c","sha256":"288145a728505978024266115dba99333173ff44f1fd7da87eaed34413c63bd5","sha512":"bed3a7d7aabbab45e7c5333e2bfd5c5236afe52cc6f3c789ead8c3c0d53763edec684ccd586476303aa7f1c6020bbbf6ca87d62a0e6f624ee405ed57815f0dd6","ssdeep":"1536:UzpEq7ElglrxkXjYAu/3s8TGTSAbA3NkbDau0LV9qD7gFkeck:CmDlg5xWUBT6FniDvkPk","tlshash":"5183f10938fa5874cac36a7ce8d4866a7661d5c3daff653bd08444014471fe89bac2fc","first_seen":"2025-11-11T05:15:22.120367Z","last_seen":"2026-02-20T18:13:41.847884Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/2.jpg","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /2.jpg HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c6-156b3\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJSEn3EBeXL4F1LYjAoipTEYq%2Bu%2FmfcTCeHD8Vx4kOSBVTv5ZhULvf9GaMcon6qQJzQNs%2F%2FLm20tBWy7tjFIDqTu7nLqITgWrXDCDpgC7lS3DkSJ%2FaW1YwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ed0f0e86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 770x507, components 3","md5":"2cddeb68029686969d84596d900f514a","sha1":"0d7d012c05c2ca5fbd267503d1622ceb26e4c529","sha256":"fc9771da7030e46fa9facff8f16b903dae41d76a61bfe4e139001ce62fc55617","sha512":"e7ed68ca8cd7b342424304f6ca621e3957aa4c304a40ca7355cb31ff7f395a8db6f7b35da2e8c039f5e7abc8bc22fa52a4639aa32a7db9d8f31813c69ab02a0a","ssdeep":"1536:SUZoLK50CSHpev27VEXyB4XfFdOyolAuBdpQT+rKUcpXmp0u40NU:S3LK56WyBa5oFpu8KUcdwNU","tlshash":"648312191f1815679e64ecf9c5a3e4b71b6445a60010e3adfdd1f8630c26ef0d8e83da","first_seen":"2025-11-11T05:15:22.114859Z","last_seen":"2026-02-20T18:13:41.855056Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/favicon.ico","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:35 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 19\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWcGKV6AhSy5GJ34VxuOoVEEw6cFb2kXXhBw3bjzbS3cDSozzai0V1YYLfYvsruSL%2FvPBnzmjGREiui9kkRAE7OidWT7QUhAHT8ltN%2BSsN%2FdGBb05106h4A%3D\"}]}\r\netag: W/\"699034c7-1ea3e\"\r\ncontent-encoding: br\r\ncf-ray: 9cf629ee0a5886c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125502,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"0c3d9a313d768d6e04d177ff28e0d026","sha1":"b41bb4c928c6bf0daf85a75c2ef056f3a95a20ef","sha256":"4081ccb2dfb76b5ca5b6ae9a1077226847dcda7ece4c0c2b88ca042ee217d390","sha512":"42c758f77a05ff82a8a2218ac04518230dba64fa22bb747542eaf9f5ee9a55e5d349dc79081e79620dc3f81ed3cf8322112c98f47eaf83e9177cdb7e843f17d3","ssdeep":"1536:j/J3qf5zaATh393Jl3waG9I32++xBl9aN:j/Vqf5zvNt3zAaGW3219aN","tlshash":"f0c30381f901c312ca670278ac19c9e9d62dbe019f6d68f33de1b74f2eb4e947046275","first_seen":"2025-11-11T05:15:22.117309Z","last_seen":"2026-02-20T18:13:41.851626Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/static/js/main.fa052155.js","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /static/js/main.fa052155.js HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:39 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034cb-5e194\"\r\nexpires: Wed, 18 Feb 2026 02:56:53 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfaqFgELTbIQ%2BiRSiDdd6ucfNteyJHhivmBITiM3%2FxiCNh3bj1aDTb32WctOcYQz2%2B%2FLvsoqK8A5oMvlL6PVxzMa89RoukEpEXmtEot5rA4ipN6Gy1zdLhM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629eb9a4486c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"307200d5eeaf5e8b12eb49339a6a019f","sha1":"7f78a72906f65f9a83e2e1b2f43e84acd7c009fd","sha256":"08c8da9144c1f6a9460e96aef5577d5ce55e96ab9517f98a2bb531ac8f789b01","sha512":"ad7d394ebca829d0d23988f5c37f39aa2bef9c962707759fdb4756ac3c6c6c159313cc6f0de8956465a2ec4604539ae72065b1d687bb85995503678cdb732a3f","ssdeep":"6144:/WnWUkfqhyTSVzTtMsS5bNcvd7xi4fvPxE5vT6AP3cunr8gudc:TUBtMX2dG3MguC","tlshash":"23845dd4b252f5656fb301e640bf040af33d1e1ba80d8860f165fc9a79a894d6277fac","first_seen":"2026-02-17T15:02:21.787442Z","last_seen":"2026-02-20T18:13:41.853892Z","times_seen":4,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-17","alert":"Detects file containing Telegram Bot API","trigger":"myzoonegaraticketsnow.com/static/js/main.fa052155.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.mouseflow.com/projects/67ab6561-c163-42d5-9f5d-0fbea9ca94c7.js","fqdn":"cdn.mouseflow.com","domain":"mouseflow.com","tld":"com"},"ip":{"addr":"104.18.27.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.mouseflow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 08:27:51 GMT","end":"Wed, 08 Apr 2026 09:27:47 GMT"},"fingerprint":{"sha1":"D5:A9:86:E6:A0:DC:64:7F:A3:1E:92:DA:77:24:7D:7F:D1:77:C0:DA","sha256":"82:B8:90:59:B4:46:7B:AB:19:55:29:D6:34:19:2B:EF:29:C8:52:16:F8:28:05:84:87:30:F9:28:2F:8A:DB:22"}}},"request":{"raw":"GET /projects/67ab6561-c163-42d5-9f5d-0fbea9ca94c7.js HTTP/1.1\r\nHost: cdn.mouseflow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 9cf629ecbb1e723c-OSL\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 27 Jun 2025 01:33:04 GMT\r\netag: W/\"a7215d6d3e7db1:0\"\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nexpires: Wed, 18 Feb 2026 15:02:05 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nx-mf-script-region: enforced-privacy\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nx-mf-continent: EU\r\nx-mf-country: NO\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79904,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"76971abd370b09c7a8e7a966d4ab5f2e","sha1":"038adc07191ab674e298808a2256eebc399f72e9","sha256":"bfe09c4a7a11a7b73245fd3b626540514e692f992e0963554d1c80d99cae5d77","sha512":"1e998db6c179ca2f77d1d16d037636871e410173725b00dd883d74a4ab84e0cea0dcd68cc252afe5f066a14c56509e116dd65ec616e1edb5ac8bd26dff0c2e65","ssdeep":"1536:fl9+nyBIQI6lzHJzH7vTKikIYk7FID9C+qm6M1XMt6F4Ld2wPu6rmNF1RwqgX/8V:t9cyrlA6SNF2A","tlshash":"fc735a6a3371313f418397b5a3df160f30399499a7014cc8e6aaf8d4bab0d4b1a77a5c","first_seen":"2026-02-17T15:02:50.651521Z","last_seen":"2026-02-17T15:02:50.651521Z","times_seen":1,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":121,"dns":96,"connect":1,"send":0,"wait":207,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/3.jpg","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /3.jpg HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c6-27737\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYVM8K82uCAWN1%2BHDBrsv0158SZOJjdA4fn8KjE9V2d5TegfeXTs6B9F%2BFapB5adNbzw5gRNFRkkrvbMnSPbnrn72JB4iCrzGYZCzu2ZLYHKaLqQCZ6JZo4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ed0f1186c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161591,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x600, components 3","md5":"c820c368b71f9a8f6ef6f42c24f5e03e","sha1":"d68693e6f91909fcd6f28da0b986f66acf3a9f6d","sha256":"f690df3adc8d8a331d1a6dd97df22bfb6df8e0229c566d4bce656757643399fe","sha512":"7069490d4917fc67bfe1c9432cdbd593328f0330e453f5e598b9d2cd9a97eb6b80d7b8a6c26e126f2706f60a3156aa965bbf562c5c7b2aa1befc969ee79f7988","ssdeep":"3072:H9Z91dgM3pq3q56rkjuiGqxgXb+lrLI745CjUkvfagnjYtOb/PiZEtn07:791dgMZmZrXiGXrErLK4kxnqObTtn07","tlshash":"ccf31231615aaebb68e57c2202b64e70b97b7992ac3473f3fcf287921131c970c65417","first_seen":"2025-11-11T05:15:22.116025Z","last_seen":"2026-02-20T18:13:41.855864Z","times_seen":5,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"rezervtemka.cc/","fqdn":"rezervtemka.cc","domain":"rezervtemka.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rezervtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 21:28:41 GMT","end":"Thu, 30 Apr 2026 22:25:52 GMT"},"fingerprint":{"sha1":"77:09:48:BC:9B:FB:91:29:8E:ED:BF:3C:97:E0:95:E5:C5:B4:42:0D","sha256":"5D:EE:27:D7:92:C4:33:DB:0C:A2:43:D1:4E:B4:3D:8C:D1:79:9E:29:FE:6B:40:9F:6F:57:13:D4:9D:AE:29:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rezervtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://myzoonegaraticketsnow.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1KWB0SG98Q3YnRxaY8Ox1A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 17 Feb 2026 15:02:05 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: eRAxqa4/wRGFbygBNWItTlLFihM=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1UfZ2IGcJhjC%2B%2BAp82dJDujhmmpwfYP7YqZXtBYMOC4MxtsYt%2FTMQewjQ2%2FR0xlR6UJly8ES0woEjj69Bv2vZNktAITzPkUvRJwOzDRYhAo74tNTz6rBZ4rhVRRkmCfbLw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cf629ee6f51e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7539\u0026min_rtt=7476\u0026rtt_var=1675\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3118\u0026recv_bytes=1166\u0026delivery_rate=564816\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=4de76b3e03a3c81e\u0026ts=114\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T22:46:45.121255Z","times_seen":17925805,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":71,"connect":53,"send":0,"wait":99,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T15:02:04.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjykqBfHMMmZvL8JCEUFt0DzqW6MYkNXVIT%2BVRNU4bkXdagGfu3sOD2JkVnGpZ8enxtfpSHxoiZmdNPCM8t56f9n59peOzeQ%2BFblpbWMY3v40G3%2B56YXNzw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cf629e96d8356f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":917,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (917), with no line terminators","md5":"2af60888b112d262baf992f9525e27df","sha1":"5b083e757fc70d7008b90140d64d9174c3307884","sha256":"a0bb2250f041408f7866ed4ce4a35376e881bfdb8ec69de5e1486fa830c1ec47","sha512":"50f53169327408e97cc9ab40059d943f034395b522853775894ab9ca912682c869ad1141ea17594133df109c4954da0a38b135404f4d58a287a3a8b605df1f26","ssdeep":"","tlshash":"5b1100128c50c45c933002d7f9b7f66cea4578189e00fcc8b4ca1c7b2ae8fda8896949","first_seen":"2026-02-17T15:02:21.78648Z","last_seen":"2026-02-20T18:13:41.852123Z","times_seen":4,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":57,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/static/css/main.fa9fc1e6.css","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /static/css/main.fa9fc1e6.css HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034ca-af41\"\r\nexpires: Wed, 18 Feb 2026 03:01:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=or%2FT3qSC69QoXwZGdBdaB6nJPhtZguNuMF9yzGyZkqDNJ1vpwcOJcilSjw5vlaLmnOu%2Bg%2FImO%2FCxI2Vmw%2FuaolSrJ%2FdOAhnWUIhBWtY2Fu4FvaUuorc5Y7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ebaa4d86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44865,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (44756)","md5":"82075e7e7313bd38464ff0b87f99646b","sha1":"362fed162a0bed71d6afe8114113424e1118ac6d","sha256":"b416bdf3af0640b9ba468b231917b64ced1e4fdafe138fd91737e07f03254353","sha512":"b0cbc1412685e94bfe637b41cea7f46ce941d0f87f22a4ba6d38255019ec53eb40d7dc6d50ff0f96e3601b0ffc38aaf2b1ff8ade1ec984479d797f3439c5959c","ssdeep":"384:/tF8jur7fmJ5dnr/9NN01MwhwnSCj1AbBj3b6n:VF8KvGZNN01MwhwnS9rS","tlshash":"f8136508aa11193e3c6399f6c6dcea5ce11bb0c1debb56de7ecb500546c67f60ea3604","first_seen":"2025-11-11T05:15:22.118414Z","last_seen":"2026-02-20T18:13:41.85258Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/1.jpg","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /1.jpg HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c6-46d99\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzGcjasrWEOjkTMdp6h0Gr4Zelay5MOTLqqAoCSWsgnPul6GdEMDpF9iuZm6XhgmqX69KLZ2Gb7Nn%2BYDA9OOOvLGhf7DRBT2v3EEySGR2BCNmfE2vBgztxk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ecce4a86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 950x320, components 3","md5":"a8abafe3f3d1fec0840402c6787f57ee","sha1":"17b56f77fb47661924520204b13aa5055379791a","sha256":"a46a094aca5297fb0af0284ea8472894e008d648af12b462e104ceac44d5a54e","sha512":"3202ef018ec8999598c79dfed1a4c0a511fda1eabc05fa7c838809f8d03f96c062cb9e66a4ae5eef24d5a9e161cb6ec5aa6fc78c8874ee987b3daa4cc7a88a1a","ssdeep":"3072:jiWLROSv5DJ9BqU42UHwasha9ixDoTraWx3eWAJYid+DzFtN/fVfZzcfBBs:jJdVv79aFQa1COraWx3nAJYF9z/","tlshash":"bc0423e1197379ca38641c29463505e12c5ed7e07f43f69e92fc2b99da8c26660f2ce3","first_seen":"2026-02-17T15:02:50.658916Z","last_seen":"2026-02-17T15:02:50.658916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/2.jpg","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /2.jpg HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c6-156b3\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCWO9qRssr3MDKoPOF%2BmNNfU9DQxoQYH4LTVIAhVdlTy2yUHm8yG54ytWCwEDCSXp7%2BUHs8iefolGcV57JDDvt9ez7OLUmdeyE0IG2Rty5Vljwa2pA1RT0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ecce5586c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 770x507, components 3","md5":"fa1cc922641aaa49dfa6890a1890a11a","sha1":"88a20e68c50b0636904f2e102d8b5e2a9be2d0b8","sha256":"447cb5109d44e1de996b896c294312e45dad71eef7bd2eae6666d7a2a29727b9","sha512":"93bcdf04f9df869cffabc1773c00d9315276cb7c01b8894cea016281c5f58eef72d51b145b698d899ed6ed6bf0d3591c6a41c37de1584baf1b4ab6037c9cf29b","ssdeep":"192:Mdl/4Z+Ql4ohkEDap3txeiL7h5yYhBlqD/HM6zY7dn:sNUz1KeU7hcqEtzedn","tlshash":"5f12ae2d0112c0a5f15c7e7dcaa8fbd50b4e229ed15db132e9bcd48949929e5e0c0eab","first_seen":"2026-02-17T15:02:50.661076Z","last_seen":"2026-02-17T15:02:50.661076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/logo192.png","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:35 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c7-14e3\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtLyYonLxHCEqdmmbObLqmdz0zzrEvw5JWZSy3A1fUhMUc8T%2B%2FAvBhUSQfhRGk6fF4A7ME3%2Biwoh4E10tlgIeNmDuKgb4Zd%2BMYMx%2BJrpQWPirA1Q7Cci6gs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ee0a5286c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-08-16T20:24:38.474954Z","times_seen":14131,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/logo.png","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c8-153f2\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnaRENWIBHEsMTPnW2zroMVAIchHOH%2F07mMOuc03DmL3ucjP1pN3%2BYnNTBBt3IY4RnXLFZ6C2mw12x%2BuqMbvHGxt%2FVlXiCtwtkKg2e%2Brywmi4yid5w4yQqw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ecbe3686c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 667 x 500, 8-bit/color RGBA, non-interlaced","md5":"90d2100be04a99c40117e24f49003868","sha1":"1fc6ab58bfde223c2a74ac766389912bf1128c2c","sha256":"288145a728505978024266115dba99333173ff44f1fd7da87eaed34413c63bd5","sha512":"bed3a7d7aabbab45e7c5333e2bfd5c5236afe52cc6f3c789ead8c3c0d53763edec684ccd586476303aa7f1c6020bbbf6ca87d62a0e6f624ee405ed57815f0dd6","ssdeep":"1536:UzpEq7ElglrxkXjYAu/3s8TGTSAbA3NkbDau0LV9qD7gFkeck:CmDlg5xWUBT6FniDvkPk","tlshash":"5183f10938fa5874cac36a7ce8d4866a7661d5c3daff653bd08444014471fe89bac2fc","first_seen":"2025-11-11T05:15:22.120367Z","last_seen":"2026-02-20T18:13:41.847884Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myzoonegaraticketsnow.com/1.jpg","fqdn":"myzoonegaraticketsnow.com","domain":"myzoonegaraticketsnow.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myzoonegaraticketsnow.com/","date":"2026-02-17T15:02:05.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myzoonegaraticketsnow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 07:37:52 GMT","end":"Fri, 15 May 2026 08:36:34 GMT"},"fingerprint":{"sha1":"95:99:AE:B2:40:1C:E8:F6:7F:06:31:8E:83:42:4D:20:3F:2E:5C:8B","sha256":"B1:8E:C9:09:E3:04:AD:50:D1:E8:E0:7C:D7:8C:E1:DA:52:E6:0B:8B:09:40:FA:A9:A4:63:84:36:D9:33:B6:80"}}},"request":{"raw":"GET /1.jpg HTTP/1.1\r\nHost: myzoonegaraticketsnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://myzoonegaraticketsnow.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:02:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 08:39:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699034c6-46d99\"\r\nexpires: Thu, 19 Mar 2026 15:01:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 19\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKN9OVIsLgoTbMYfw6RS%2FOyzNTkHd8QO0DQ0oIWB%2BTERuJU6mCWXvz2X6IRtBTfky%2FxytqQFjgKM%2B42pQpHefKKgh%2BpLdMBaF87qU7IudrihI8dFbesJBXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf629ed0f0a86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 950x320, components 3","md5":"b60de26fa28a8f82e7f7c7c9d5b4f9e1","sha1":"5e1fa35261b9b66d63965622022aab1a9f030e9d","sha256":"29bd6df5f3b5c32b4697ce601dcd043fc4b6d1a9f785cefab78f7f0efa62d9a8","sha512":"c0fed876b5c423b9b66af67606d571f49fa1664a32057cdf5a71543867276ba956f37bfe2e973d81238a54a3214a05bf33982b149c248e4b9ce9d5dd8647f251","ssdeep":"6144:jJdVv79aFQa1COraWx3nAJYF9zDHim3A7lYJmcsbBpO:j9BfjOraWdAJrm3AZYQbBA","tlshash":"815423854c732d453963983d02798aba3c1db3d16e53f60baeb60776cbcc51860e6ca7","first_seen":"2025-11-11T05:15:22.124558Z","last_seen":"2026-02-20T18:13:41.853315Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}