{"report_id":"ad517511-3910-4c21-ab79-21cf5f7b34b3","version":6,"status":"done","tags":[],"date":"2026-02-23T14:28:29Z","url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"title":"Голосование","dom":{"size":120777,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20734)","md5":"09b178435a678321175ba761ebfd0d12","sha1":"2ef58a42e86d0a54ee655c2102641f083959ab79","sha256":"1a5bf3e926b33b44a28302523286399775215313391942a200bccd45d5716fdb","sha512":"da1c7fab08a008d4dba69eb7038a9553f1e4cce697dc8bb302181bdbfe5ccb27066f49ac8cfbcc520b39514a5b6368e38270e28b69daac0ffa37b611d1fa0920","ssdeep":"1536:Ymt18guGyDjnBHya+UStllPjGplgqxIc5Uh0RfUUkcUO7wmGZ9Nb61XGQKJZi:YG18tzB8lGeqeasUMO7aZ9azKq","tlshash":"5dc31a5596813117b4ab87142b85a70472a28203ee6fce6db5edb30f8fc7ed954623cc","dom_hash":"domhash3ea52d9e4d6b75f7170c18712e0599f9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-30T14:28:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-02-18T21:02:15.36127Z","alert_count":0,"request_count":2,"received_data":80156,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hetalis-vita.click","ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-02-23T14:28:30.371291Z","last_seen":"2026-02-23T14:28:30.371291Z","alert_count":0,"request_count":7,"received_data":1903089,"sent_data":3957,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-02-18T18:41:13.386267Z","alert_count":0,"request_count":1,"received_data":27907,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":6,"received_data":205410,"sent_data":3324,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3258b81ff391e172b1d9e6f21e8050c0","sha1":"e21e3a517ec365c413c1d162ec2ef4f665c4efd2","sha256":"021d3191fec84ba521282e3b6925e2255f180b5cf305ee2c0b082eafbc4d0950","sha512":"bf97596659a8c62ea58b048c13cbcab9ef944ffe084a1f365cb69c626c84858eee04fa7164d773f5f72ed448f545ed4bb1d3112b77b2cc6304f2317e21448d50","ssdeep":"","tlshash":"af90040154113554711530dd1134c35d7575f075fd45f7303c0f4f0000c0507054c501","size":41,"data":"","first_seen":"2023-03-07T12:57:58Z","last_seen":"2026-06-06T06:54:56.008178Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"df1702c29c50f0e77985dc71f4deacd8","sha1":"327d8f81ed76989ce10de126fd273b9ef6c09932","sha256":"31afeaf0e517ca2dc045bf40a04bbc8bed1d3f95857c5803258bc2dd579015a5","sha512":"7a3e43cadb878820cc78792d4c05ee3b9dc76c25794af37dcba94b9df9f4a5a7e094d7ffd29cdcb7f7a7e144fb18be5224a2bed0ec2ce659a886f626e9837fcb","ssdeep":"3072:lER1IH03ai2tvUxENCWJ7Oj8nI5TckagCQbjVY5U1D1lk4A/:gIHgajtMxE0WJ7O2IzCSjVYoDsF","tlshash":"066400fb39a12f66cbda3774e94ea34ae0423f0d4f4475f9a4039128f16c2865dfa512","size":318608,"data":"","first_seen":"2025-07-08T22:10:30.23472Z","last_seen":"2026-05-07T21:34:48.865626Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/script_vote.js?DSOnZCWKig032Ly","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T12:41:10.757722Z","times_seen":166477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/script_popup.js?KibLfn5AqNcO2k0","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55020803bd639711e6bcce09e9e83ef4","sha1":"09712786ab3233462f54a0d904380753f3db9a18","sha256":"96f6abe2ae550b8283c579ca6e9da3a5e5d163b9984f669e8f174b503edb89b7","sha512":"c9f4ad6b562898419366bf4b61973a8b458072db8336a3fa21cdd4853134e72b17b9ed79f8915feacd434a8cd70d3ed7a40c3a9776a052e46e1dd6eb1f6c152f","ssdeep":"3072:2pp/p/wHX03InR6YKPzqx0bBC2f7OTiTY5XckaMCUDBV05UPjZlk4AC:IR403sR6TPOx0M2f7O8YHCqBV0KjQ0","tlshash":"71640efb3aa16f56cbda3b34e95eaa4ae0423f0d4f4435f9a403d128f15c1961cfa512","size":324131,"data":"","first_seen":"2025-07-08T22:10:30.229505Z","last_seen":"2026-05-07T21:34:48.856441Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"04799d4a2e453de4e95a8789bde19aa1","sha1":"35185ad98851aecc4d1bf9fd69e9ffa13b241dba","sha256":"827a31951e5d88a97d9a833e0b281a0c1daf037c76a56ff88aa1cba72d9cca6c","sha512":"e12fb760cccea64c2ca06e7a004af107a250decb2a805497e1db08f24b22afeb317af794a672f964cd4c23a0733bb7583ebe507356acbfa435f43b60589133a9","ssdeep":"","tlshash":"8f4195cf15bd663e807710485b8bd0447126206ba85fec25788cbfc64fe94e5f761ae8","size":2112,"data":"","first_seen":"2026-02-23T14:28:34.958297Z","last_seen":"2026-02-23T14:28:34.958297Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-06-07T08:16:34.757425Z","times_seen":27513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"i.ibb.co/FhL9Q0x/1533908.png?bYVE2L4UlI0PHqG","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /FhL9Q0x/1533908.png?bYVE2L4UlI0PHqG HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 27544\r\nlast-modified: Thu, 14 Sep 2023 13:13:30 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"053ecb0cda1b6092b49957028094af3c","sha1":"b1f93668c137c54b80115111bb502b756da52610","sha256":"20e9c16713edf2f62880b40500895077a27188ef4096868ecf45bb10a773ac2c","sha512":"4faea5914d12bd2c899e39ad99cca0b38296ccf6102b4d1f2ba7ba77407d93197e24aa3d86a429f5220bc7bcbd1f7440ebb8201fde5405e4daa6f11bf28c5744","ssdeep":"768:RkBZxaYs8h2mwqT1pL7/NeJ3ldB2yBljyT6kwIDFrjWX:KwG9w4vRWldB2yHjysIDFk","tlshash":"1bc2e187e47cac5bba197e0d311a671a571df39031a63a3f326971fc11d6d638282363","first_seen":"2023-05-02T00:48:11Z","last_seen":"2026-05-28T10:50:48.295345Z","times_seen":162,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":11,"connect":22,"send":0,"wait":22,"receive":39,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hetalis-vita.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 21:17:42 GMT\r\nexpires: Thu, 18 Feb 2027 21:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nage: 407426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-06-08T11:56:35.016536Z","times_seen":9208,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":68,"dns":0,"connect":21,"send":0,"wait":15,"receive":3,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap\u0026subset=cyrillic=ext?SHT5XwYovyCNmiM","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap\u0026subset=cyrillic=ext?SHT5XwYovyCNmiM HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 23 Feb 2026 14:28:08 GMT\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4c8ef72eb043b6205edde8d9e910787e","sha1":"fa8b1cd29ea6e9bd2113a33d10ab096306430f37","sha256":"0031e12119f0b0e9820611dc4e888b0decf9c9924e4b2bea291397e70105305a","sha512":"80bf1edac61df533f32176b490302e90a6213b72b5ea335092fa25128a4229cc7967e5c4cdc6cec06c923335260d0ecb779fad1b36a26ff616b4eb4465e34e7f","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/O:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVs","tlshash":"8c721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:44:13.889102Z","last_seen":"2026-06-08T11:27:30.789863Z","times_seen":4225,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/QCpyH8sc/1.jpg?w9g7njIUpys4eZf","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /QCpyH8sc/1.jpg?w9g7njIUpys4eZf HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39415\r\nlast-modified: Mon, 23 Feb 2026 13:15:17 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 83\", progressive, precision 8, 808x703, components 3","md5":"5b74780c387f91ee8ccc6d8714770dcc","sha1":"050594f9c1e981076c9200aec78346fb68f973cf","sha256":"d1033ce7ed8e65fabb7370f07ffd4c4ffd1b304069cc3295283192721196b272","sha512":"eb1cb410d85066edac6d36cbf6849156212f914cd0e3eee3fd9554c575f34ec93c3bd743286c12e81a781962edd94560d91479ce1fd2ed168f7058d0d26816aa","ssdeep":"768:PqYUOlZjfjBBQif93ItGkQnZp5hB8qFfCKQY/3srg0rWRD:EO/fjBWilQpQX5hbCC46RD","tlshash":"af03f24adad28fc0f0791f79cd92208177fd7892876159ec5e8634c01b9a9e64cc9cb6","first_seen":"2026-02-23T14:28:34.949933Z","last_seen":"2026-02-23T14:28:34.949933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":97,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/bg.webp","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/bg.webp HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/butterflyy\r\nCookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=3600, private, max-age=3600, must-revalidate\r\ncontent-type: application/octet-stream\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\netag: \"68033295-14e6fc\"\r\nexpires: Mon, 23 Feb 2026 15:28:08 GMT\r\ncontent-length: 1369852\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1369852,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, interlaced","md5":"02d0a2e50fa38b06ff76bff85f8b86b9","sha1":"d2f17dd219a375adf0421dc11defd5b04651d357","sha256":"17e4cc4296fc0f2b05fb4e146ca44d9a7cd10058a29fdc74bcf118d4be19e1cd","sha512":"254fbfcb75ed1cead1a79d77ae85b115001c46936f462e10f10708d9fd1292b2e400ee51027d00b3ecaa06787deeab08a027647abe823c7ffa5b3f24f2ff1773","ssdeep":"24576:afz4P8QgidwFGbpMbiHmnam0eurg7CwnxcdlbX+LxvBQ:afpifMbAmXR7tnibOLxvi","tlshash":"5e25336aef9c4539da66984f8f944bbb2ca9b38169b7500cf309c371648dcc6d93db01","first_seen":"2023-05-02T00:48:11Z","last_seen":"2026-05-07T21:34:48.851831Z","times_seen":33,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":553,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hetalis-vita.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 21:17:42 GMT\r\nexpires: Thu, 18 Feb 2027 21:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 407426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":164,"dns":0,"connect":24,"send":0,"wait":9,"receive":3,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hetalis-vita.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 21:17:42 GMT\r\nexpires: Thu, 18 Feb 2027 21:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 407426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":71,"dns":0,"connect":28,"send":0,"wait":14,"receive":5,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/person.svg?eMfpousFlRxQS6K","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/person.svg?eMfpousFlRxQS6K HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/butterflyy\r\nCookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, private, max-age=3600, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\netag: W/\"68033295-27f0\"\r\nexpires: Mon, 23 Feb 2026 15:28:08 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10224,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12d2641692b5ac1d90737afbce11d112","sha1":"dcb4989bb943ed7443e9270f0c5f86096e482780","sha256":"43ca05d41dd37fa93d20dcee9fbc31e4fb332fcc7576805b15ac706cdb7328a4","sha512":"50f8110be933431d8e569aaf81ae41855272f912f48471f98a0d0bb7fb47f086ec94441754da3afd730f1b2d6b21f169b55a4ce4aa84f6a20f85baf6e881ed09","ssdeep":"192:BF6GwXuzsYaykENCmX79MwZY6xSplwHP+pVXVq5dg:BEGounxNCmX799ZY6xiYP8VXVSdg","tlshash":"e922c7d71330d3dca8cac94fff26adbc555ab4be4e6b52c1809e992894879c8f602c54","first_seen":"2023-05-02T00:48:11Z","last_seen":"2026-02-23T14:28:34.951919Z","times_seen":83,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/present.svg?SorLHEIhaiWwebk","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/present.svg?SorLHEIhaiWwebk HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/butterflyy\r\nCookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, private, max-age=3600, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\netag: W/\"68033295-b75\"\r\nexpires: Mon, 23 Feb 2026 15:28:08 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2933,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a2a11ac9973dd9e58db8f9f217ed720","sha1":"275c779f352fe7fe570ad2c7ec12995f6e3482a9","sha256":"6dac003ea6234f536c9ac175921959a0ab5180e61190c89090be9d01a2e0e10c","sha512":"ba5048d77aac99bb492985c606c137ca44a704bf09eccc2a82582be248675aee9117d8549f3a110988123b866257f41b67917eba086c9d653ae347207c1bc43f","ssdeep":"","tlshash":"b85154d9531c19ecbc974eaddb11212c501654b64f269bd9487b8eb09681e0dfe37cd0","first_seen":"2023-05-30T13:24:18Z","last_seen":"2026-02-23T14:28:34.953027Z","times_seen":32,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/script_vote.js?DSOnZCWKig032Ly","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/script_vote.js?DSOnZCWKig032Ly HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/butterflyy\r\nCookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, private, max-age=3600, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\netag: W/\"68033295-155ed\"\r\nexpires: Mon, 23 Feb 2026 15:28:08 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T12:41:10.757722Z","times_seen":166477,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hetalis-vita.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 21:17:42 GMT\r\nexpires: Thu, 18 Feb 2027 21:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 407426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":70,"dns":1,"connect":8,"send":0,"wait":8,"receive":10,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hetalis-vita.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 21:17:42 GMT\r\nexpires: Thu, 18 Feb 2027 21:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nage: 407426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-06-08T11:56:35.016536Z","times_seen":9208,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":168,"dns":0,"connect":21,"send":0,"wait":11,"receive":1,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hetalis-vita.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 21:17:42 GMT\r\nexpires: Thu, 18 Feb 2027 21:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nage: 407426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-06-08T11:56:35.016536Z","times_seen":9208,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":70,"dns":1,"connect":25,"send":0,"wait":19,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/butterflyy","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T14:28:07.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /butterflyy HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 23 Feb 2026 14:28:07 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412; path=/; secure; HttpOnly; SameSite=None\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":100072,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27493)","md5":"55f390c9a2ed995f3447746c86806d32","sha1":"dfa8db11823bdd148ad31e68485ec8d4c9ac19a6","sha256":"edc4fffd4031d65cdc3a19116d5d18e7d1531b8291cf1ac294445ca37d10f6e2","sha512":"3ad33f7c307479c7b6fbe39a707f230c1cc19f2bd7344f00c76cd6f42647a3f5c50b5041a23a0955e4b9400bcf41833f26e53c8343409b04ab617f1261182d28","ssdeep":"1536:jmt18guGyDjnBHymillPjGplgqxIc5Uh0RfUUkcUO7wmGZ9Nb6WXG/0JZi:jG18tzBylGeqeasUMO7aZ9bE0q","tlshash":"51a32aa99691312674db86542b9a2b0073628303ee4fce6c76ee374f8fc79d494523cd","first_seen":"2026-02-23T14:28:34.954347Z","last_seen":"2026-02-23T14:28:34.954347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":168,"dns":65,"connect":50,"send":0,"wait":217,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/8PmYGzZb/2.jpg?f8p5AEsWiul9va6","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /8PmYGzZb/2.jpg?f8p5AEsWiul9va6 HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40013\r\nlast-modified: Mon, 23 Feb 2026 13:15:25 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 83\", progressive, precision 8, 808x652, components 3","md5":"39b2e30b51a77b7e385780c8311903aa","sha1":"775f344166c9d5791435d2ea18fd570b130884cd","sha256":"af7111a83949b52abeb1e13d2352769dc4a42c3381f0fd44070360e1c7d0a9e3","sha512":"95b8a71e95142eb2b2715c2140292cfb5dbf6e0d68b166de9bf3107666803f1bdea2a475d7ce1cf1ccb643aac330dacd9aa4a4c02db2976620e0f53f2f4999b4","ssdeep":"768:Pfbul0YYDHq9Q4S6R3fnnug+6qh/2yUS21hMEqfBCWtDlkuQkhmvBPE:7y0ns/pR3Po/usn7HMpc","tlshash":"2403e17ad3a98090c29e03375a072bee69d56581d36ad526efc3cc2e417afb07f51243","first_seen":"2026-02-23T14:28:34.95516Z","last_seen":"2026-02-23T14:28:34.95516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":58,"dns":11,"connect":22,"send":0,"wait":47,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/service.svg?6dDF2vgYb9O1KB4","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/service.svg?6dDF2vgYb9O1KB4 HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/butterflyy\r\nCookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, private, max-age=3600, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\netag: W/\"68033295-1862\"\r\nexpires: Mon, 23 Feb 2026 15:28:08 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53d50151e2ed5648188b61672afcd08c","sha1":"2194da828a80f3e0f0c950214474b2db5f8d12df","sha256":"dea97ed608237309ccbf4c8213e1ce535e3e26d654fb7c3808f56e47fb8795b2","sha512":"3e582a16d5fd45efa7449edd3df2b81fc1082780ab851540c5155bf8bf50ee7dc25c5fd8a7213ae3efa2460e19291d8ff834f3cc676be5420ccb6debb8b431e9","ssdeep":"96:un4yrvGvQRU7SzSk/xqyRCCB8nbe86GlD1cMRgeamG1f4GpbCBlL9uUubjut:undv5RbxunNJGMbqV79ZbCt","tlshash":"23d1c7ca63246278b88a8badef34b9f0311760bd272556d8c6ed5a509487fcdf518cc4","first_seen":"2023-07-31T20:54:17Z","last_seen":"2026-02-23T14:28:34.95588Z","times_seen":37,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetalis-vita.click/97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/script_popup.js?KibLfn5AqNcO2k0","fqdn":"hetalis-vita.click","domain":"hetalis-vita.click","tld":"click"},"ip":{"addr":"144.31.49.13","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hetalis-vita.click/butterflyy","date":"2026-02-23T14:28:08.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetalis-vita.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 10:06:03 GMT","end":"Sun, 24 May 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E0:72:C0:1F:07:36:85:9B:A1:6E:05:6F:63:28:41:24:AA:41:1F:47","sha256":"93:FE:10:7E:CA:08:4C:E1:46:03:69:93:30:97:07:FB:DC:BD:2B:D3:03:44:90:8C:0F:75:C3:09:6C:E8:A5:22"}}},"request":{"raw":"GET /97d360f06ca5ae463713fb6dd3f3cb96db54dd6bc2242e39ec09274d884ec7f5/script_popup.js?KibLfn5AqNcO2k0 HTTP/1.1\r\nHost: hetalis-vita.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hetalis-vita.click/butterflyy\r\nCookie: PHPSESSID=6aa02a4a47e2a5a4e091d2d12b685412\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, private, max-age=3600, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 14:28:08 GMT\r\netag: W/\"68033295-4f223\"\r\nexpires: Mon, 23 Feb 2026 15:28:08 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324131,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55020803bd639711e6bcce09e9e83ef4","sha1":"09712786ab3233462f54a0d904380753f3db9a18","sha256":"96f6abe2ae550b8283c579ca6e9da3a5e5d163b9984f669e8f174b503edb89b7","sha512":"c9f4ad6b562898419366bf4b61973a8b458072db8336a3fa21cdd4853134e72b17b9ed79f8915feacd434a8cd70d3ed7a40c3a9776a052e46e1dd6eb1f6c152f","ssdeep":"3072:2pp/p/wHX03InR6YKPzqx0bBC2f7OTiTY5XckaMCUDBV05UPjZlk4AC:IR403sR6TPOx0M2f7O8YHCqBV0KjQ0","tlshash":"71640efb3aa16f56cbda3b34e95eaa4ae0423f0d4f4435f9a403d128f15c1961cfa512","first_seen":"2025-07-08T22:10:30.229505Z","last_seen":"2026-05-07T21:34:48.856441Z","times_seen":25,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}