{"report_id":"af33740b-d9be-4a78-9eaf-1c605a1a5547","version":6,"status":"done","tags":[],"date":"2026-01-26T09:25:59Z","url":{"schema":"https","addr":"infostart-en.ghost.io/get-live/","fqdn":"infostart-en.ghost.io","domain":"infostart-en.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.239.7","port":0,"asn":54113,"as":"FASTLY","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"title":"1 new message","dom":{"size":1479,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (443)","md5":"02944712b2d8a00f7613a81fa69a7139","sha1":"7be82e82f2395576730995c62962a39d220e733f","sha256":"46c18379a00ea78fd94fbb8b2588349339a95b3caaa1c3b7fc8594487fd3319b","sha512":"332f8e1715139aefdae1fb120bcc73dcf7bf94a0862ff80d5abee6fef7ad0e84c35d1c673985809520cbcf827c25ec14c0ad9a689b29be8861b17acecd01b8d2","ssdeep":"","tlshash":"a431e0a3e38f644d3101c12850f1f6b81f3ea559bb015f357c35b773ab8dac65492951","dom_hash":"domhash003fb3f0de8126b803198d4c3d676989","first_seen":"2026-01-16T01:27:36.085462Z","last_seen":"2026-02-01T23:40:08.89107Z","times_seen":3830,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"infostart-en.ghost.io/get-live/","fqdn":"infostart-en.ghost.io","domain":"infostart-en.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.239.7","port":0,"asn":54113,"as":"FASTLY","country":"Norway","country_code":"NO"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T09:25:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-26T09:25:37Z","timestamp":1769419537,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45122,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-01-26T09:25:37.533611+0000\",\"flow_id\":1762730596959089,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.43\",\"src_port\":45122,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"lzrst43fyjj7.amalia11-8f7.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":939,\"bytes_toclient\":3559,\"start\":\"2026-01-26T09:25:37.525169+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"vsa66.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3274240,"first_seen":"2020-03-11T12:02:23Z","last_seen":"2026-01-19T15:39:48.184753Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-01-26T03:49:02.869286Z","alert_count":0,"request_count":3,"received_data":6054,"sent_data":1685,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"69739ea5573778076836b53e--vocal-mochi-890c51.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2026-01-24T12:06:48.760339Z","last_seen":"2026-01-24T12:06:48.760339Z","alert_count":0,"request_count":1,"received_data":613,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-01-26T02:30:01.543322Z","alert_count":0,"request_count":21,"received_data":1186100,"sent_data":10274,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"infostart-en.ghost.io","ip":{"addr":"151.101.3.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-10-02","domain_rank":0,"first_seen":"2026-01-16T18:41:07.703636Z","last_seen":"2026-01-25T08:56:17.920113Z","alert_count":8,"request_count":2,"received_data":87129,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Ghost:6.13","description":"Ghost is a powerful app for new-media creators to publish, share, and grow a business around their content.","website":"https://ghost.org","common_platform_enumeration":"","icon":"Ghost.svg","categories":["CMS","Blogs"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"api.npoint.io","ip":{"addr":"104.26.7.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-01-31","domain_rank":1425348,"first_seen":"2018-04-25T05:15:26Z","last_seen":"2026-01-25T08:56:17.861271Z","alert_count":0,"request_count":1,"received_data":1284,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":4,"received_data":620318,"sent_data":1961,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-01-26T08:57:17.750099Z","last_seen":"2026-01-26T08:57:17.750099Z","alert_count":8,"request_count":8,"received_data":97702,"sent_data":4228,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"infostart-en.ghost.io/get-live/","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"151.101.3.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20149cffdc3c2617f208d3afde1ca1a0","sha1":"4f9ee5a3abe3b02f572e0ad416520a8cc601fae6","sha256":"177b1439363af96c42cd7371cca28de7b3a19c98a4f4767b89d3a4b47b60db91","sha512":"72ba3f79694a757c66110beda93d35df18acd2edb5e56b882087604f237dcc3de00ee1d89b076499eca0d4325d9fb392e5ebd203e45c86b5b15b39ec2113fabc","ssdeep":"","tlshash":"55118968bba301252bd382bc2fadd704581be48f9516ea083d3de8600f1074d4433ce6","size":903,"data":"","first_seen":"2024-11-21T06:43:46.363817Z","last_seen":"2026-07-13T03:24:26.027397Z","times_seen":2929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/assets/built/source.js?v=384f091dfe","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"476b743a6cd085520c0a97e9c99909f0","sha1":"d4404057356d9925dffadf151843dc870ae1710c","sha256":"3bceafa53269a4c05c1f59e9293f7915e7e85a4119d0647ce5299b2b40941137","sha512":"3acaee33159fcaaef0f27c658b425e6f5b82f5868ab87da43932866f850fe8e6476ada8838cf76d84c97a11d8bfc81e206abc24b21f3b750e6cbc53b686fad17","ssdeep":"768:yemQ7qZZ0sMcrtR17FmPUGFMZRyxfjUp7LDArx9/RTZfTkqr2IRRMfogj8dFV:3tgt317xnZRf7LDArxjTZ79r2IRqZgV","tlshash":"1c334aec315176b703d76176617fa60e23321aaaad0a80407c36dce66cb8d59523ff6c","size":52705,"data":"","first_seen":"2025-02-27T09:33:32.959405Z","last_seen":"2026-07-31T19:03:04.61032Z","times_seen":2438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/js/send.js","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bec1bf7b21e4b9ae69140d1cdf451a6","sha1":"035400a694f160c82569540df1b9f88a1989b9ee","sha256":"63f9370ac3d0b3f8bc30708cd02a5966e67d0753d32d9354d1fb3b166c50c68d","sha512":"ea93cad309be05ae236bd2b6a18dcdaeec9dbff4132a9a72642e16bead5a9753a29b3862a1d862b5d5bb730208cffaf427f54e4e1d1de75bffb736df513b598c","ssdeep":"96:9IhxzLr0NsTaKl67TdpgSDiXEeONiFWic8hDGi4L8hDGi+dicWi7xkPSaOWP/Ff:az3usTdlwpNDiXEFNiFWicYGi4LYGiGI","tlshash":"41c1c79b288a06320677a3ba8717421afb70b02b4d40c2097f7c82511f75c55d5b2fed","size":6084,"data":"","first_seen":"2026-01-24T12:06:53.574048Z","last_seen":"2026-07-08T17:20:52.299343Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1775de3df2479941b05a1e078302e343","sha1":"25f1ade7800e6ebd461cc7f4e35b30d4fa506a25","sha256":"360cf3f7de62f7ff3bb5e1e4a188a2b3f84e1fe9febce384e61642d7e7639810","sha512":"82df1632401e99758a6cb8c2a9a7f3a96e5c57d41a099c6d3115eaadb7eaccc5e6ffcadb1542e54073c0c895d71666c0fc3af1cb14ef775f9e723172426db99a","ssdeep":"","tlshash":"0e4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f9bc78889815afb6","size":2306,"data":"","first_seen":"2026-01-16T00:36:18.049129Z","last_seen":"2026-02-02T04:25:37.158236Z","times_seen":6382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acc00e9a9520ab9b8da0b41d15f3cc61","sha1":"09726d17a48a19f608c42130efc3897feb053bb9","sha256":"5ce08c35299502eaeab5a9c5f423e0d166cedeb733598901b249e34f71b29a53","sha512":"0685cb29b4865571b433981e675c7fc86f75b69faa5afdce94b3f3ca3be6e44bb926f74090e110ed153bc12978b278479c811992faa11390de23ad01d4667195","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DxSLi8","tlshash":"9f822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-01-16T00:46:03.938554Z","last_seen":"2026-02-02T04:25:37.206715Z","times_seen":6215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88cd1743828445891d1345bde0d815d","sha1":"fdb25960fee006428223fcb93685b19627ab265d","sha256":"a81f6d02ac083745c52c5c5086ab0de2790c2771e90ff86e3335b36248ca633d","sha512":"beffdc348bb05cd1dde045b04c8a58ea5be644efbbacccc60cf99ead18c2fab6ee02b9983aa026a80d9b8e485a08cd5be80b40ebbff5cfd4a888829822decabb","ssdeep":"384:UJw/U5YK8Hx9KJ8ThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJ8ThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"6352c6a7b2a4782d42379712708f3204f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-01-16T00:46:03.943832Z","last_seen":"2026-02-02T04:25:37.147019Z","times_seen":6166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/get-live/","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"151.101.3.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e896bf9305a71c12d1d8289be655e557","sha1":"12b1ea1e7f3ad802bada31043f8dc9b0b1c760ff","sha256":"0131985899d457c029b7f5689f5528cae99879b0c1864d68035a1b0c6b405b88","sha512":"7a84ff2b00464c4b8aa5535da51f7c58f51815341e80080d22721567597beef610e99b9f5f06e0015d6ea92d4f4d71a05d069170c4fcf71a59b504b9af01446c","ssdeep":"","tlshash":"6aa002565591356075ab1a495ce6c1552cf05019160da492fc1cd02685b5e922d56dc8","size":60,"data":"","first_seen":"2026-01-24T12:06:53.582958Z","last_seen":"2026-01-28T23:38:07.717953Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/ghost/portal@~2.56/umd/portal.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"63a526286c756773a48c9102baccfb5a","sha1":"b67ccf8bb9d832d9c49a7033bc7596ba8972afaa","sha256":"6c474f7206bd6c119d2f8c79cc355672c15671a087789f452cdeddc52afab994","sha512":"eb07069dede204fbb072fe142eb04bd5c03ad9a4c0b34e717fd3d395548c4997383d4c89922e9da980d5e3808eceb00691ff94a17864b95925736afb64d63c3e","ssdeep":"49152:V1uddzIsrK3qGdESaWUp8snDF2t+cPe20i+Gb1NsoFR3qaZhpKgf+LGP:rR0i+aei","tlshash":"94a57e98a64472b10b810195790f361bf3e944786b4ec3a1bccc491d13e5a6ebf7f9b8","size":2093261,"data":"","first_seen":"2026-01-22T11:12:51.606541Z","last_seen":"2026-07-03T08:13:13.655627Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-16T05:49:24.003579Z","times_seen":31023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69556a5bfb875a197d2be084/1jdqqeu3g","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aec1178dfdbccad6c1c08879daeeeb1","sha1":"eb2bbc6cc38b26f2c8ba350c69ef2f3adbc1ffef","sha256":"b331718c04a3c7d59b488c32df993cd6fc26b3e0f880222e193591ea45c7cc20","sha512":"dba6b62d3d14a624883e8143b195c5dcafb21c33f011554520a32038ae3344f21351d4c8d08e11bb8002658d1e52d2e16e3443aa271b4c09d774ee89bce0c387","ssdeep":"","tlshash":"8a412fd25f8f1952936a12d85cbefd0f347330e68cdc6892874c486572656ed26ced38","size":2123,"data":"","first_seen":"2026-01-16T12:08:03.565566Z","last_seen":"2026-01-29T14:47:12.699675Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-16T07:26:19.76501Z","times_seen":93628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-16T07:26:19.585858Z","times_seen":67100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fbdd6ec3a5616e962956b260e1d7d69","sha1":"507ffac3af35354ed8569bf8c854a2f60bb4b228","sha256":"80c8577ad3deae94e66209fb4c3b4afc9ffc54ff29a28cd8c964a58df65cd8dc","sha512":"e3c2b7cb929349a474a6165893a0ff071a7b1ad4e3cde52baa47bb5829d96cb3cc0232a028908df343a5111a389958d437d65f4592952d69ef95385742273305","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fO7cErQYIMPdLMz9o115:kyWFW1W+fM4fVkBLMz9215","tlshash":"6b34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-01-16T00:36:17.965194Z","last_seen":"2026-02-02T04:25:37.179513Z","times_seen":6381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92975e60cce969371e9525690ad90033","sha1":"673122a33295abb580cf5bb8d13c4aab9e5ae28e","sha256":"7f627e5d720029b3be876785df15878d4dd9fd63961dc86d2e42ce55d3a4112f","sha512":"b6fa6378a343ad1a01c8d4c4839e30a4f992625c763db0880d696f2d4f756e8ec8a5d5766ce1270e790d85ca6aaf17f222610ee301faec0f69f8b28567e4adf5","ssdeep":"96:zNC9Hqt7pEma7hY/rcK+JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"a8b1859af247b456c156225150ef3b1df33a281ca61ccdc4a665a5f218784cba077f39","size":5261,"data":"","first_seen":"2026-01-16T00:46:04.016993Z","last_seen":"2026-02-02T04:25:37.1621Z","times_seen":6216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/get-live/","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"151.101.3.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"836887b9dfa81b7dae1d149df9718edf","sha1":"8306d6b89bfe613327ad597c8e73a08ce5160648","sha256":"aca7657fb5c29ea4d39fac75047c62399c8219c36057aa6ae1b9441052737daf","sha512":"956d20e939fe83452662b8c258a7106468f5f4f9c03cca6da0e51a733e91a987b435bf13860a9b981f0537e16b5c9923799d92124cd2ae62d2acb12c8d6b4c3a","ssdeep":"","tlshash":"500178ba9c3d05333e92f78807c35006b080ed571aa8d486700e9b510f8103ba8642ea","size":697,"data":"","first_seen":"2026-01-24T12:06:53.585081Z","last_seen":"2026-01-28T23:38:07.72091Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/sodo-search.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9186bbe5d64ee138809c4554a7a89e80","sha1":"ab78fca58733a2208a23878bd2f5f08d57459926","sha256":"441fc7c10f50e067f7cfb899278836a10b608b5850aa6917d15386b848eebf29","sha512":"d301f07c03850dfb2c7fe50bfa0f18fbf4c093e4d8a07c05722437621c1b09776785d9a26f4d1899ed7532631f17867cfb5ce45aaaac0750cf507ebac0e99233","ssdeep":"3072:zQmucSvoCk0QNXtv/24t9s1hJ9D2xs/7P/aa6XVIjOSALAY:hZSvQ0QK5Dss/T/F6gOyY","tlshash":"4c443cdc32aab56257d216e5106f1507b3392d162c0c4814f12cfddaaab690a61fffbc","size":267348,"data":"","first_seen":"2025-11-18T13:48:07.745618Z","last_seen":"2026-02-06T07:31:08.026908Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/public/cards.min.js?v=384f091dfe","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"91fcf6fd1c2761b582cda90883e5ff94","sha1":"c9c4aef48fd4c48f1a38d4f37460150385d5551b","sha256":"0fa389a717242bfe900c9d688e7e086b5db05a740db66317011ae6c09be3eb80","sha512":"9fa6d7a307e6483ed83fa43845cce9bc993ee188fc4a5ce6a5d1c0e9e657bdfb401096634513b50a3418ee83e158c2c67ba22a4d7dd8bad93bda5c98a0d2d4d4","ssdeep":"96:u8PUphCyqtL9LYedNLYCKX7jKjh9CQrclQ9xtCNDFmSe:8phCyqR1YedNLYCKajh9CQrgQ9xQZTe","tlshash":"b8e1049632682b3642966ee357dc12d07ea40ac9f20e0a746077ddcd16b9cc243b93e7","size":6892,"data":"","first_seen":"2025-06-21T00:42:26.174777Z","last_seen":"2026-08-16T05:37:43.957108Z","times_seen":4011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-16T07:26:19.813566Z","times_seen":42602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfe84b6a5531200f7f95ee1b6ca3a3a0","sha1":"e7229874b18fdd6226ed0badd6a581f7149b19b4","sha256":"43088514522c69d45e037c712fd4574c3789e8ff3091925a9b711a4694af06f5","sha512":"0212809e8a78cb918811579d519f6d2fc43ac74039911c5d33f9142931a7cd44951c9c4e910d1efc72669d56f1e2d3fb3921b68fd002ef6c0f967d70cc03a287","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY8dZPkx3u4V5pfYMrlSf:4nmuTilGhmSx3u4V5pPrlSf","tlshash":"0fa3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-01-16T00:46:04.021813Z","last_seen":"2026-02-02T04:25:37.215613Z","times_seen":6200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/public/member-attribution.min.js?v=384f091dfe","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d7f9c7c5c4b0f99bca6af29aaaa4df","sha1":"f64555987bcbaec6537a84dbfcb7a6014a463b8c","sha256":"8d97fc3ba6ae7b879296907086fd0cd2e7d40651d9be04a6ce72255b7096a702","sha512":"19f7362ab3ff62e3af85596a08b7940b2dd653a894ed7c7166b91ecd57e78af957257e6968336bc0af493bab58a2ae8a544d6ecd633a20faf352a96a388196dd","ssdeep":"","tlshash":"b85185f72508621353f10220886f138072224ae9186650b9baa9895339bdf47d5b3fef","size":2972,"data":"","first_seen":"2025-10-01T17:11:02.568426Z","last_seen":"2026-08-14T17:00:03.099604Z","times_seen":3218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-16T07:26:19.840127Z","times_seen":93600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324110,"data":"","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-16T07:26:19.719563Z","times_seen":50197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-16T07:26:19.616733Z","times_seen":51717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embed.tawk.to/69556a5bfb875a197d2be084/1jdqqeu3g","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /69556a5bfb875a197d2be084/1jdqqeu3g HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69698502adf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1723\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c3ef6db1eb05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"6aec1178dfdbccad6c1c08879daeeeb1","sha1":"eb2bbc6cc38b26f2c8ba350c69ef2f3adbc1ffef","sha256":"b331718c04a3c7d59b488c32df993cd6fc26b3e0f880222e193591ea45c7cc20","sha512":"dba6b62d3d14a624883e8143b195c5dcafb21c33f011554520a32038ae3344f21351d4c8d08e11bb8002658d1e52d2e16e3443aa271b4c09d774ee89bce0c387","ssdeep":"","tlshash":"8a412fd25f8f1952936a12d85cbefd0f347330e68cdc6892874c486572656ed26ced38","first_seen":"2026-01-16T12:08:03.565566Z","last_seen":"2026-01-29T14:47:12.699675Z","times_seen":60,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 702677\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df78b256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-16T07:26:19.646367Z","times_seen":50008,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:41.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Mon, 26 Jan 2026 09:25:41 GMT\r\nage: 3122857\r\nx-served-by: cache-fra-etou8220168-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-16T07:26:19.817081Z","times_seen":21368,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T09:25:37.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infostart-en.ghost.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 14532\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3KwS%2BlMiOlMtmIuhUqGylwfOwRqcy%2FdPBnROUnLWY5hSNbRWQ4nEW9wv816QhSJHiKfil9ZpAZjxN8qvP5OaXuIHhPTEufnm7xENa8wNNCIFYUbvynVrIxpeG1dLvFBkGYu\"}]}\r\nserver: cloudflare\r\nvary: accept-encoding\r\netag: W/\"index.0d931d4281.html\"\r\ncontent-encoding: br\r\ncf-ray: 9c3ef6cdac96568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2253,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e8b180ecf23aa586f9571cb11c5ff517","sha1":"8f70d82469d0d7411b6442190e7e9ab76c5d1e02","sha256":"14a059c42405dad882b98bd518a605e9c306b77ea40ec4a4930bfc4ac2255f6c","sha512":"9330c3889f1630f632d88739c924b5e72d92292c0779597a3a0494027ea143602810a4bf52bc1c75550afcef292a2abac60a850da1b37c6d8c1e382549a8bfdc","ssdeep":"","tlshash":"da412a3556c0c4460173914a3d91aacdff82424366559d4c32bf2fa72ff1d46cc5b465","first_seen":"2026-01-24T12:06:53.565096Z","last_seen":"2026-02-06T22:06:31.488413Z","times_seen":14,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":50,"dns":31,"connect":1,"send":0,"wait":23,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"44b9fc99078bcfe4490fb15034bc1e15\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6db6ef35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"1fbdd6ec3a5616e962956b260e1d7d69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6db6ef85695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"1fbdd6ec3a5616e962956b260e1d7d69","sha1":"507ffac3af35354ed8569bf8c854a2f60bb4b228","sha256":"80c8577ad3deae94e66209fb4c3b4afc9ffc54ff29a28cd8c964a58df65cd8dc","sha512":"e3c2b7cb929349a474a6165893a0ff071a7b1ad4e3cde52baa47bb5829d96cb3cc0232a028908df343a5111a389958d437d65f4592952d69ef95385742273305","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fO7cErQYIMPdLMz9o115:kyWFW1W+fM4fVkBLMz9215","tlshash":"6b34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-01-16T00:36:17.965194Z","last_seen":"2026-02-02T04:25:37.179513Z","times_seen":6381,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: \"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 717531\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df089f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-16T07:26:19.719563Z","times_seen":50197,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsa66.tawk.to/s/?k=69773314b377b20ccf3ee39a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTU1NmE1YmZiODc1YTE5N2QyYmUwODQiLCJ2aWQiOiI2OTU1NmE1YmZiODc1YTE5N2QyYmUwODQtYmZGN2QxS281RXdKZVZWSVN1bFhxIiwic2lkIjoiNjk3NzMzMTRiMzc3YjIwY2NmM2VlMzlhIiwiaWF0IjoxNzY5NDE5NTQwLCJleHAiOjE3Njk0MjEzNDAsImp0aSI6IjJ3bkExMEhJNlBFaGN1ekRKS3hKRCJ9.wBxpYPsvVeX6t9ZCn6esSszGpdVu4Ho38L6YsTyn2WOaCAiv8F83DA2IZFxuf0a0thYkyi8we0vszp72bjd79g\u0026EIO=3\u0026transport=websocket\u0026__t=PlvduTR","fqdn":"vsa66.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=69773314b377b20ccf3ee39a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTU1NmE1YmZiODc1YTE5N2QyYmUwODQiLCJ2aWQiOiI2OTU1NmE1YmZiODc1YTE5N2QyYmUwODQtYmZGN2QxS281RXdKZVZWSVN1bFhxIiwic2lkIjoiNjk3NzMzMTRiMzc3YjIwY2NmM2VlMzlhIiwiaWF0IjoxNzY5NDE5NTQwLCJleHAiOjE3Njk0MjEzNDAsImp0aSI6IjJ3bkExMEhJNlBFaGN1ekRKS3hKRCJ9.wBxpYPsvVeX6t9ZCn6esSszGpdVu4Ho38L6YsTyn2WOaCAiv8F83DA2IZFxuf0a0thYkyi8we0vszp72bjd79g\u0026EIO=3\u0026transport=websocket\u0026__t=PlvduTR HTTP/1.1\r\nHost: vsa66.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DcKgoy8P4opmHh54K6QyRw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 26 Jan 2026 09:25:40 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: /OrbM4X+KOcmcj5jwOERcGg+jjA=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9c3ef6dfcedd5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":24,"connect":24,"send":0,"wait":461,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:41.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 41275\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 26 Jan 2026 09:25:41 GMT\r\nage: 1504871\r\nx-served-by: cache-fra-etou8220027-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"af6cdae6b691e36469ebf1236b6950d0","sha1":"1ec559e3a8b57cef79442027efced08fd1c94525","sha256":"9da7dea80472d42a75a732f16a7525dac50c70b748d529554aa7a60c926b2950","sha512":"3be99f799f9e982e26dc1ebf50a3e87fe6c01426b836cec800348ec5636381e4b79fa25346581deb0abe507300c5bf083e836dda90f670b29c6af0bf6dcfbda8","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSoG+E5ove:Q/drlyogMVc6FIKV+ZLBSoG+ET","tlshash":"42545d7d86606deeea94902d86db3b4af58c3c0453ed1266f66442cb27f643a33487dc","first_seen":"2025-04-24T02:04:43.117648Z","last_seen":"2026-06-07T06:34:43.665874Z","times_seen":464,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/img/favicon.png","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:38.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Mon, 26 Jan 2026 09:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 4685\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c3ef6d0fa0a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4685,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"cfe4ef94963311e844768bd81ca6ebbd","sha1":"015e54fc9631173a10ae22eecde299b9e6224de0","sha256":"45db9493825775e9ab1dda33c8fb1ae0a57ef80001993bd5185c33abec79d0c7","sha512":"05c0c8db398f5f0325742b2af962f7f791961d6e6f16f3faf10e33ec5241929457b4cc29ff549434153f712d94284153a1b02fcd1e604eff37a71752e4af47b1","ssdeep":"96:1j9jwIjYjBiUDK/D5DMFGak2E9xr4HsysXwLP7RLlvaQxnbA:1j9jhjYjBlK/VoGj2E9tZXgP71lCebA","tlshash":"dca16523bafd107f0063926372ad634d7aa19153daab049037fdc2361f9ae56ed072c4","first_seen":"2026-01-26T09:26:02.720938Z","last_seen":"2026-01-26T09:26:02.720938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/css/style.css","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 14532\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFeOBN4nzU4Lg5RgKVzeFGIyKBH3U%2BCtBNwsplcDhobB8euBPcjaeNJPZ9IlSCQCLF0cbLdw987QB38%2Bn%2FhDJ12HR9HGRTcU8JPZledDwv%2Bfhy%2Bamt6FJpdbk%2FI9VyehJ2OLz78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"assets/css/style.d21b0fc2ce.css\"\r\ncontent-encoding: br\r\ncf-ray: 9c3ef6cebada783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5928,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"cd8c559c2087a2d541c60eb8353b2aec","sha1":"c12faeff5eb10f0d0053b3059bc4f975a6c4b9a8","sha256":"3c0284b63de04848742428f55f2a27bbc18dd4291477cb5f323168dab2ff51a5","sha512":"a710011c9218873c856dd15eef3477cc6fc97fc39579c0138f9b814391e5921d800858fa3067cb9b7d6a6bed8ea60d6fea3ba039ffe3a2eeb93886479c372161","ssdeep":"96:xi9rJpD/K0lcS0Og/jmYqXn/bbh1aPmvNUQzW5TqWLDx1s:xYvKg30dgnzbm+vJW522Dx1s","tlshash":"bbc1aca5ea51118312379b786b73a7b9fe6d10a34b0107b97fd433608fb50a99d20ecc","first_seen":"2026-01-16T12:08:03.546833Z","last_seen":"2026-08-04T03:36:55.684745Z","times_seen":24,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\nage: 2353679\r\nx-served-by: cache-fra-etou8220150-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-16T05:49:24.017655Z","times_seen":26483,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":78,"dns":1,"connect":46,"send":0,"wait":34,"receive":7,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\nage: 3213134\r\nx-served-by: cache-fra-etou8220126-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-16T05:49:24.003579Z","times_seen":31023,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":74,"dns":0,"connect":31,"send":0,"wait":41,"receive":22,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=69556a5bfb875a197d2be084\u0026widgetId=1jdqqeu3g\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=69556a5bfb875a197d2be084\u0026widgetId=1jdqqeu3g\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/json\r\nx-served-by: visitor-application-preemptive-d8d1\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-7-0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1723\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9c3ef6dc2ff05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2962,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc957855418d945e5326c4335d526035","sha1":"fb9dfa468fc6cfab5a8ebc5e32b7146b4ecfb8e5","sha256":"0274bd664b6da33f0c2cf9d73b6ead9957b04ac6f805e0f775b3069d0b6283cc","sha512":"a948df51dfc96ce3174806b0f60f8d9d0d0b326be23fb9aa0e3371328557b68945cc218faf2b48a4e0111eb338db73e61333876b5a23dc1f97b279f38bb55eea","ssdeep":"","tlshash":"ee51232a9906de3553ce925771de3a27a93dd423e3c4194de0685e39c3ebacc211174b","first_seen":"2026-01-07T07:41:36.127684Z","last_seen":"2026-06-25T04:48:59.39373Z","times_seen":88,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/img/video.mp4","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/img/video.mp4 HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3510917\r\ncontent-range: bytes 0-3510916/3510917\r\ncf-cache-status: HIT\r\nage: 14532\r\netag: \"assets/img/video.77e9c1e40c.mp4\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y41ZIPnrVCOHT1tqhRpSuTqnCgCG7NH9I7W6wvXRzML49MxCiyb4iHxW3GwGbR9d4rsi6lDvg3ZCmpebF0%2F0qJGEwqgO0Lw7a7BSYlIhGC6PGkktOiulRmbyIaPxg%2BA6wyQDmPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3ef6cf2c28783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34671,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"37dd6d0a1d0f2fed413367277c06f481","sha1":"d08fe6d083b2997c8ac26c9c32828b759a3b7227","sha256":"78430a15c89f9a20bb71375d078d3d91f9f3e1ca3a8fa2a0f27fce1082341faa","sha512":"9fe5a0c3115b192b83c5ae017e60c4bcc8fcda6894c97d8f986d6ab840cdc82e22cead123ae150d1019e53738589b9c37cf1ec446f621558a38180f5c15c7161","ssdeep":"768:kg5v4nwCvZDxVYFUE7EI/C5yW/E0m2s1VjLDiIgSyThmKEJqqkp:kgVawK8q5TEf2s1VXp8hmRLkp","tlshash":"41f2c08a5fc91176ff74df7c244fc268dcd06645c809e3dfa528979262ba25840bf1b2","first_seen":"2026-01-26T09:26:02.730042Z","last_seen":"2026-01-26T09:26:02.730042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9c3ef6db5eed5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-16T07:26:19.840127Z","times_seen":93600,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"586d518585b166811a617b7f5060f71e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6dc38065695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"586d518585b166811a617b7f5060f71e","sha1":"6ea81179776e5977ac49304b176923e61409393e","sha256":"2cc3a63ae0b79ab96b21a927c9f9a192ff287e877df5e54ee0b0dbe33debb900","sha512":"df7a3a88b5effe5f52c27897e20995a32973ae1b34aa260e42286833c68838afd61fcd0d4cc057ed5d8c941280e2e5167cdf394add607763363bdc96f4a099ac","ssdeep":"192:ImwHJ/LrnzPLEgVE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:sxLrnzXE1iN+xkDOy+Hp8/5Avy","tlshash":"18224369ce504ea702c29646399f35437624829b1f54382eb78891ac0f8ed6f71f77ce","first_seen":"2025-07-18T03:22:00.530906Z","last_seen":"2026-06-13T18:18:43.529078Z","times_seen":30250,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 253\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":253,"data":"{\"p\":\"69556a5bfb875a197d2be084\",\"w\":\"1jdqqeu3g\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\",\"referrer\":\"https://infostart-en.ghost.io/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"oiiVfW6iZNXWVhAa_TQmb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-13ff\r\naccess-control-allow-origin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9c3ef6dd487c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fc611021408d3803eb6400a04cc132e9","sha1":"288202c9946b98115a65222d568926b48435760b","sha256":"7d7fe63aab27434ecf4edfd3914e2a9f7da3d61ccba1dfced93d89decac710cf","sha512":"73cc70254efe96f5999891ed28621d2d7376e49feac0b1231b3aa4116e5c71caea72750e4cb8bbdd002ca6b42f645f62172e108e817987ff2028384c79668b0f","ssdeep":"","tlshash":"9c11a50a2ec83e25a537f6420dc63d812ecd917230e87099eafb4e643be05790a13c33","first_seen":"2026-01-26T09:26:02.73586Z","last_seen":"2026-01-26T09:26:02.73586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 896169\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6def89d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-16T07:26:19.813566Z","times_seen":42602,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 896169\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df18a256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 896168\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6dfd8b656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6db6eee5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-16T07:26:19.585858Z","times_seen":67100,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9c3ef6db6efb5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-16T07:26:19.76501Z","times_seen":93628,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 00:24:20 GMT\r\netag: \"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 614362\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df88b356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-16T07:26:19.647244Z","times_seen":34280,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/img/ledger.png","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/img/ledger.png HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2048\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 14532\r\netag: \"assets/img/ledger.89dc04f8b1.png\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrxWr3LmxTQ7%2FNEdd9kQpbpxIHyj94q90sJ5%2B8wrczcjYPAFW9j9OE5FDTWHwuCTqVrpa65uVc%2FBn8MrcVec%2FPY2IAffKp5v3wKo7h72yFnzW3jzn7FIRexeNBb32z6OtULvoic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3ef6cebae4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 389 x 130, 8-bit colormap, non-interlaced","md5":"f049634926622bfc63d664be434fdb45","sha1":"75dbe80579c5a3e6e5c373b1d5bae95d8be7ef6d","sha256":"74262d4236ed88e73dfedfceccd1dad8905da60615b2a1c9c7774689027f3ab2","sha512":"71f3a0a62e821d88266132f62e40a89a8e98eacad9fdfe9620143c97dc9941b33e1c727b693028f28f26912f009d223347fe998ecb43d4eae4c94258d24e3dd9","ssdeep":"","tlshash":"4f41d4277bb58bf84d18e5778d0268c30460a9e04e5801696332ae6a2d3aef70630229","first_seen":"2025-01-13T15:16:00.048356Z","last_seen":"2026-08-04T03:36:55.687238Z","times_seen":349,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"1775de3df2479941b05a1e078302e343\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6db6ef95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"1775de3df2479941b05a1e078302e343","sha1":"25f1ade7800e6ebd461cc7f4e35b30d4fa506a25","sha256":"360cf3f7de62f7ff3bb5e1e4a188a2b3f84e1fe9febce384e61642d7e7639810","sha512":"82df1632401e99758a6cb8c2a9a7f3a96e5c57d41a099c6d3115eaadb7eaccc5e6ffcadb1542e54073c0c895d71666c0fc3af1cb14ef775f9e723172426db99a","ssdeep":"","tlshash":"0e4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f9bc78889815afb6","first_seen":"2026-01-16T00:36:18.049129Z","last_seen":"2026-02-02T04:25:37.158236Z","times_seen":6382,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-served-by: visitor-application-preemptive-35l0\r\naccess-control-allow-origin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c3ef6dc481a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: \"acc00e9a9520ab9b8da0b41d15f3cc61\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 709726\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6def89c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"acc00e9a9520ab9b8da0b41d15f3cc61","sha1":"09726d17a48a19f608c42130efc3897feb053bb9","sha256":"5ce08c35299502eaeab5a9c5f423e0d166cedeb733598901b249e34f71b29a53","sha512":"0685cb29b4865571b433981e675c7fc86f75b69faa5afdce94b3f3ca3be6e44bb926f74090e110ed153bc12978b278479c811992faa11390de23ad01d4667195","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DxSLi8","tlshash":"9f822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-01-16T00:46:03.938554Z","last_seen":"2026-02-02T04:25:37.206715Z","times_seen":6215,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"cfe84b6a5531200f7f95ee1b6ca3a3a0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 896169\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df18a656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cfe84b6a5531200f7f95ee1b6ca3a3a0","sha1":"e7229874b18fdd6226ed0badd6a581f7149b19b4","sha256":"43088514522c69d45e037c712fd4574c3789e8ff3091925a9b711a4694af06f5","sha512":"0212809e8a78cb918811579d519f6d2fc43ac74039911c5d33f9142931a7cd44951c9c4e910d1efc72669d56f1e2d3fb3921b68fd002ef6c0f967d70cc03a287","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY8dZPkx3u4V5pfYMrlSf:4nmuTilGhmSx3u4V5pPrlSf","tlshash":"0fa3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-01-16T00:46:04.021813Z","last_seen":"2026-02-02T04:25:37.215613Z","times_seen":6200,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: \"92975e60cce969371e9525690ad90033\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 883134\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df18aa56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"92975e60cce969371e9525690ad90033","sha1":"673122a33295abb580cf5bb8d13c4aab9e5ae28e","sha256":"7f627e5d720029b3be876785df15878d4dd9fd63961dc86d2e42ce55d3a4112f","sha512":"b6fa6378a343ad1a01c8d4c4839e30a4f992625c763db0880d696f2d4f756e8ec8a5d5766ce1270e790d85ca6aaf17f222610ee301faec0f69f8b28567e4adf5","ssdeep":"96:zNC9Hqt7pEma7hY/rcK+JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"a8b1859af247b456c156225150ef3b1df33a281ca61ccdc4a665a5f218784cba077f39","first_seen":"2026-01-16T00:46:04.016993Z","last_seen":"2026-02-02T04:25:37.1621Z","times_seen":6216,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"69739ea5573778076836b53e--vocal-mochi-890c51.netlify.app/.netlify/functions/api/tawk","fqdn":"69739ea5573778076836b53e--vocal-mochi-890c51.netlify.app","domain":"69739ea5573778076836b53e--vocal-mochi-890c51.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:38.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /.netlify/functions/api/tawk HTTP/1.1\r\nHost: 69739ea5573778076836b53e--vocal-mochi-890c51.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1\r\ncache-control: no-cache\r\ncache-status: \"Netlify Durable\"; fwd=bypass, \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\netag: W/\"43-0gGey6gsvFHHuZ1G/eW1nEuHLEY\"\r\nnetlify-vary: query\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KFWSYZT72KZ9T3NDKDW2SHPQ\r\nx-powered-by: Express\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bcd38f89d0cb0c0643dbeedb505cfb42","sha1":"d2019ecba82cbc51c7b99d46fde5b59c4b872c46","sha256":"2909b330fda42ca9da4cbdc0079bb36a633706a87eb946f1f558d42b8a74c708","sha512":"4ca73e725c23b4e9bd31b7d323547fb1e5b8e7718f95a7623b46b7b9c2e01a94e92e5c773bd064c6f3e0c088c4e7e7fe8f4fc27efb870290ba8e1276bac5e129","ssdeep":"","tlshash":"06a0220220fb8c82030ce08b80e0e8033bc3800280b23ce0233008c002c030c20a3800","first_seen":"2026-01-07T07:41:36.149211Z","last_seen":"2026-03-26T17:01:21.866958Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":159,"dns":41,"connect":22,"send":0,"wait":1405,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/assets/built/screen.css?v=384f091dfe","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"151.101.3.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://infostart-en.ghost.io/get-live/","date":"2026-01-26T09:25:36.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghost.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 17:04:22 GMT","end":"Sun, 22 Mar 2026 17:04:21 GMT"},"fingerprint":{"sha1":"CA:70:4E:00:0F:18:FE:0B:D9:46:0D:04:9F:A5:D2:F7:A3:4F:81:7E","sha256":"37:F5:A5:24:3F:C4:50:50:F9:0E:0A:E3:EB:70:32:29:97:5C:A2:A5:1B:5C:7C:B9:1B:E8:15:1C:BA:C7:27:03"}}},"request":{"raw":"GET /assets/built/screen.css?v=384f091dfe HTTP/1.1\r\nHost: infostart-en.ghost.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infostart-en.ghost.io/get-live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 16 Jan 2026 15:21:40 GMT\r\nstatus: 200 OK\r\netag: W/\"d1bb-19bc765dba0\"\r\ncontent-type: text/css; charset=UTF-8\r\nserver: openresty\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 271881\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\nx-served-by: cache-ams2100091-AMS, cache-ams21073-AMS, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 14, 0\r\nx-timer: S1769419537.001551,VS0,VE1\r\nvary: Accept-Encoding\r\nx-request-id: dea81376-17c3-46f5-a6b4-e49cf58f66ad\r\nghost-fastly: true;production\r\nalt-svc: clear\r\ncontent-length: 9732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":53691,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (53650)","md5":"743968e673ed568844487b9072c3d79d","sha1":"fa76e92c5721e0ad44d9c9d33ee31a6423227031","sha256":"4834b996e9191dd1145c8b25a6685ce6a4f3e8e83fc24d08dea7c87bbcc8718f","sha512":"c55629e28bf2cfc3f862dcc6c69364a5b200263a8584f06ca765da53390b24bb015c6aeb41051bf528a2f617e7848487d3d296498f45372f966b8995d2704dc9","ssdeep":"768:2a6rmPNfGOARgftyVYnxVePnwHCfppBAMyMwtpOBt9tpEyxLxkxxxmxuxW:PePnwHCfppBAMPapOBrtnpirM8I","tlshash":"e9339466fe50333860338a57ebc1674e3024d842aa561fede4c6e15a49c7ba3d73d728","first_seen":"2025-04-30T01:38:35.286559Z","last_seen":"2026-07-31T19:03:04.614575Z","times_seen":2427,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/img/video.mp4","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/img/video.mp4 HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:41.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:41 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14529\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9c3ef6e73be41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-16T07:26:19.752323Z","times_seen":36104,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:39.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 14531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6dc3ffe5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: W/\"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 896169\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6def89b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69698502adf/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:40.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69698502adf/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 09:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 00:24:21 GMT\r\netag: \"b88cd1743828445891d1345bde0d815d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 717789\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3ef6df089e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"b88cd1743828445891d1345bde0d815d","sha1":"fdb25960fee006428223fcb93685b19627ab265d","sha256":"a81f6d02ac083745c52c5c5086ab0de2790c2771e90ff86e3335b36248ca633d","sha512":"beffdc348bb05cd1dde045b04c8a58ea5be644efbbacccc60cf99ead18c2fab6ee02b9983aa026a80d9b8e485a08cd5be80b40ebbff5cfd4a888829822decabb","ssdeep":"384:UJw/U5YK8Hx9KJ8ThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJ8ThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"6352c6a7b2a4782d42379712708f3204f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-01-16T00:46:03.943832Z","last_seen":"2026-02-02T04:25:37.147019Z","times_seen":6166,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infostart-en.ghost.io/get-live/","fqdn":"infostart-en.ghost.io","domain":"ghost.io","tld":"io"},"ip":{"addr":"151.101.3.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T09:25:36.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghost.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 17:04:22 GMT","end":"Sun, 22 Mar 2026 17:04:21 GMT"},"fingerprint":{"sha1":"CA:70:4E:00:0F:18:FE:0B:D9:46:0D:04:9F:A5:D2:F7:A3:4F:81:7E","sha256":"37:F5:A5:24:3F:C4:50:50:F9:0E:0A:E3:EB:70:32:29:97:5C:A2:A5:1B:5C:7C:B9:1B:E8:15:1C:BA:C7:27:03"}}},"request":{"raw":"GET /get-live/ HTTP/1.1\r\nHost: infostart-en.ghost.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstatus: 200 OK\r\netag: W/\"7d77-Y34zZubVkwX86/b/P0cbnGKMpkc\"\r\ncontent-type: text/html; charset=utf-8\r\nserver: openresty\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncache-control: public, max-age=0\r\naccept-ranges: bytes\r\nage: 160006\r\ndate: Mon, 26 Jan 2026 09:25:36 GMT\r\nx-served-by: cache-ams2100145-AMS, cache-ams2100145-AMS, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 9, 0\r\nx-timer: S1769419537.814244,VS0,VE2\r\nvary: Cookie, Accept-Encoding\r\nx-request-id: 8dcc0ac4-cdd3-4139-aa18-888474e4f249\r\nghost-fastly: true;production\r\nalt-svc: clear\r\ncontent-length: 9630\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Ghost:6.13","description":"Ghost is a powerful app for new-media creators to publish, share, and grow a business around their content.","website":"https://ghost.org","common_platform_enumeration":"","icon":"Ghost.svg","categories":["CMS","Blogs"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":32119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10195)","md5":"5b491548f00d90973fa193794632eb80","sha1":"146c6bbdbb2aa1308270418814aab9c8fcfbb715","sha256":"91987ed0399fe76f42abbb8017f1e461593ee9580160d8497611d79807d0181d","sha512":"14d28247ca8dd2db9f1c063da380d878540254aca465d5da4acb02a31e24cc348e3e0f07542e2bfddbab6717a0287d72aaee3037586c3d1a2013a3581962ed1d","ssdeep":"768:XM4g25TCGD+5IZs8BSM/BZMfb9XDv2HEFJVLLMzdo13aK8X:XM4zYIZs0DMhzvpJVsa13az","tlshash":"5ae2092696e4163d161302cd7ae7338dba36d04be65e0ac0b1fcc16d6f82dd18937a9d","first_seen":"2026-01-25T08:56:19.507209Z","last_seen":"2026-01-26T09:26:02.766936Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":111,"dns":50,"connect":26,"send":0,"wait":29,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"infostart-en.ghost.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/js/send.js","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/js/send.js HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 14532\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkkUGyET4C6LtqV3dYpnqfRHFl3hKVy36S9d7Py1G30rf5wcQigbhwYM%2FuGuwOP%2BGscyIAfflXPbbh8z84hHhhiOQBWbIy%2BVR4lPFzZF6DdqOpDkjEmq1Mdqm6BhoyuuCElbGH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"assets/js/send.28edb84f0e.js\"\r\ncontent-encoding: br\r\ncf-ray: 9c3ef6cedb31783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6084,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5bec1bf7b21e4b9ae69140d1cdf451a6","sha1":"035400a694f160c82569540df1b9f88a1989b9ee","sha256":"63f9370ac3d0b3f8bc30708cd02a5966e67d0753d32d9354d1fb3b166c50c68d","sha512":"ea93cad309be05ae236bd2b6a18dcdaeec9dbff4132a9a72642e16bead5a9753a29b3862a1d862b5d5bb730208cffaf427f54e4e1d1de75bffb736df513b598c","ssdeep":"96:9IhxzLr0NsTaKl67TdpgSDiXEeONiFWic8hDGi4L8hDGi+dicWi7xkPSaOWP/Ff:az3usTdlwpNDiXEFNiFWicYGi4LYGiGI","tlshash":"41c1c79b288a06320677a3ba8717421afb70b02b4d40c2097f7c82511f75c55d5b2fed","first_seen":"2026-01-24T12:06:53.574048Z","last_seen":"2026-07-08T17:20:52.299343Z","times_seen":17,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lzrst43fyjj7.amalia11-8f7.workers.dev/assets/img/video.mp4","fqdn":"lzrst43fyjj7.amalia11-8f7.workers.dev","domain":"amalia11-8f7.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amalia11-8f7.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:04:52 GMT","end":"Fri, 24 Apr 2026 12:03:16 GMT"},"fingerprint":{"sha1":"CA:D6:CE:1E:A9:7C:68:CD:41:AB:13:A4:6D:74:32:A6:A1:4A:4D:73","sha256":"91:C4:36:90:08:B3:D5:65:AE:4A:F6:0B:C8:5D:AC:1B:48:85:DF:EE:76:12:BA:EF:B1:95:59:D1:8B:FA:63:A2"}}},"request":{"raw":"GET /assets/img/video.mp4 HTTP/1.1\r\nHost: lzrst43fyjj7.amalia11-8f7.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=3473408-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 26 Jan 2026 09:25:37 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 37509\r\ncontent-range: bytes 3473408-3510916/3510917\r\ncf-cache-status: HIT\r\nage: 14532\r\netag: \"assets/img/video.77e9c1e40c.mp4\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gzqHPUVJseo9Gywp2%2FQrsi5BGo0NbBInO7Vbar08inIhnnAUa1BuObReEITkeCFga13Cgdh1v6W8du5pvIuoiF5VdcuY3CBj3q7KFA47jEikIXs%2B9nWX65bYth7pAkmwoZygko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3ef6cf4cb6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37509,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"d3beb2ee2a4f440d9f6ee9dda1494fec","sha1":"1b32c9578f66faae6b6f3f729f1b21323da60f4f","sha256":"c39d4cb55bfcc647dff0043e19abba4af117c63428b0928afd101bb17d64b0fe","sha512":"a5f03e2933531ded6b1ed2c671331c838be619b353b9c424140896910b829fabca2c37fe87cbac0a812ef7e8c5ed30f3e4ea3c772f3340535a7c7280b7fcad3e","ssdeep":"768:fnPnDFUN6E8DiX1uob5/dYrshmB0e1IS8sc:5wbuYArpqsc","tlshash":"d9f25d9def904012fba1e63d98b0c314f7b0d5e8ca56c35b459952a80df62d01fae4fa","first_seen":"2023-09-20T12:12:09Z","last_seen":"2026-08-16T07:43:07.954566Z","times_seen":652,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"lzrst43fyjj7.amalia11-8f7.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.npoint.io/8fdf67f273c5c9ae24b3","fqdn":"api.npoint.io","domain":"npoint.io","tld":"io"},"ip":{"addr":"104.26.7.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lzrst43fyjj7.amalia11-8f7.workers.dev/index.html","date":"2026-01-26T09:25:37.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.npoint.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 22:34:03 GMT","end":"Fri, 27 Mar 2026 23:34:01 GMT"},"fingerprint":{"sha1":"24:6F:0E:F7:76:5D:B1:1C:2C:70:82:7E:A9:0C:21:60:22:78:28:CA","sha256":"88:51:89:F2:67:30:B4:2D:93:A0:0D:22:27:11:F8:D2:5E:8B:DA:DD:FF:61:BA:B3:64:B3:8A:C2:BB:5F:A9:FA"}}},"request":{"raw":"GET /8fdf67f273c5c9ae24b3 HTTP/1.1\r\nHost: api.npoint.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lzrst43fyjj7.amalia11-8f7.workers.dev/\r\nOrigin: https://lzrst43fyjj7.amalia11-8f7.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 09:25:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 78\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrWSWIZGrPWRdx7cwCDA59n6JMI77ytdWbYbCFlgiqOdRyJnwmv18%2FOd4U16c15UVXK1O34NKMLeqpM0VDUmkC4UBRi5a%2F8did8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: W/\"a9604730cf2763cfb9d078845bc59adf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: ec6f7263-a961-4ad1\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-render-origin-server: Render\r\nx-request-id: ccba2ca3-b5a1-40b4-9916-256e403ba7a2\r\nx-runtime: 0.022061\r\nx-xss-protection: 0\r\ncf-cache-status: HIT\r\nage: 1723\r\naccept-ranges: bytes\r\ncf-ray: 9c3ef6d0ab980b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7b1ad380e3d8102cb9d331e1343391a9","sha1":"4ce19c8bee85ffd958797aa505f1ebb4b4d4f4fc","sha256":"a9604730cf2763cfb9d078845bc59adfc53529b7981f462a4e6a140fc989a8f7","sha512":"634e9bfc0a936ecc6a0eba8d540828e3113a075e05f726fae7083d522dc4025cd402e470ce92afe3ad04b3972d19de3a63d7e9857ae0e67130c4ca2154399ba2","ssdeep":"","tlshash":"3ab0125b20e28d2d55101d3d004f21067077d1773a84309449c10f0910fd074b808600","first_seen":"2026-01-24T12:06:53.568902Z","last_seen":"2026-02-06T22:21:58.153421Z","times_seen":17,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":56,"dns":35,"connect":1,"send":0,"wait":11,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}