{"report_id":"b7ffc546-bd1f-4373-9673-5c87cefd0a30","version":0,"status":"done","tags":[],"date":"2026-07-23T14:19:30Z","url":{"schema":"http","addr":"tknishop.top","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"title":"Bitget","dom":{"size":24039,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17475)","md5":"b20a0731dc631b7bb05178d883174789","sha1":"0106bbfa753a94939097e45936fd97a15ab4425b","sha256":"29007b054dccb1db52d1c8697a8c540c02ede253e3b2def9ab87a66e14aa165c","sha512":"243aaf36c103a32c6a4a877508193ac501a28452142de8c4e6a4f16804d7c12ea458f029ca6b096f4310a2c9c0e36ac20cb74620302388c03bb4c4baba7d1438","ssdeep":"384:/6wZCxv2pqXJeULEG2ws3bq782lU82d82A82WmYKew:/FQxv2pqX8Q2wsrmYKew","tlshash":"bcb2ad32a51550a302b395c1f060be1975abe31fc61bc0443fadc6a85fd3db8b8ba975","dom_hash":"domhashc5f918cc466b552cdc996371642dff42","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tknishop.top","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T14:19:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"admapi.embersilkliving.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"admapi.embersilkliving.shop","ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-23T13:50:25.386246Z","last_seen":"2026-07-23T13:50:25.386246Z","alert_count":1,"request_count":1,"received_data":11320,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tknishop.top","ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-07-23T14:05:33.004834Z","last_seen":"2026-07-23T14:05:33.004834Z","alert_count":0,"request_count":39,"received_data":3467572,"sent_data":17831,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.waw856.co","ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-29T15:11:07.045165Z","last_seen":"2026-07-23T13:50:28.361193Z","alert_count":8,"request_count":8,"received_data":32253,"sent_data":4337,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.chorurkdoee.cc","ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-07-23T06:19:45.079144Z","last_seen":"2026-07-23T06:19:55.589706Z","alert_count":0,"request_count":17,"received_data":7546,"sent_data":9057,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tknishop.top/assets/index-b037c65c.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e0b5ac4db2d1444ea9a02cc4d1589ff","sha1":"96974bc127d0f3702c7518107aa9bfe89ee7a4df","sha256":"ed10005d009ab03c183c160d8027fc4b509f2e80b40f91b102249b46541df72e","sha512":"1880a09c25d837a9b264e8531e9e1a436be855fdbf82fd53c416cc6558633c73e341c50bb39d1a9a175ffd604aa74d0727f55e923393deb7865df50513b27096","ssdeep":"1536:4cORZR6neyXR0sxLDN+8N5BS4VXGtmvHFPUF5Ft5Z:4B921LDE85pHc","tlshash":"31b35d8998070ebf5cfd084ca55b560020691fd35c89cca7b3be6e553bfbc94639a728","size":108321,"data":"","first_seen":"2026-07-23T06:19:51.094595Z","last_seen":"2026-07-23T14:19:33.736111Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-9093b9fe.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"993c7b915a5c1ea32f15f0769ac46af5","sha1":"98fe2a90ac7cb41f3a726bbae34fc58fbc23f372","sha256":"f983ed22a749b32aa0c3e27174bcc8cb87e841ef5023dfde5743d33fa6e432e4","sha512":"1b2ac0a44146448b6b465bbcaeac4e42c09c967aecd711126c4b8c4d8fbaf811126ba1411910807b58ed58ce5210e75ee08e667710bdf2b62f628e7972a2510d","ssdeep":"96:kDbqPIlf1l9YlqWqD+wS0M9cib1dQUgAaXGycOHlG3hvGXu35mTIqyhw7DjR:kDmPIlfRYvqiwSLqibwUR3OHluhvN5mf","tlshash":"a0a1c84df8038979aa67545054480012319d7ff6b10948f6f6feec0767798fde782721","size":4963,"data":"","first_seen":"2026-07-23T06:19:51.123381Z","last_seen":"2026-07-23T14:19:33.728334Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7d764b0b9e8bef95dcf9f0f849edccc6","sha1":"15be8ee3a96501522a2bf45a99f67f824c8aea40","sha256":"8b8989047e79dee3c51c15e6775949819e5a84fea6abe9c0a4c705c19c380e1c","sha512":"3ed96dd8987dd6f0f5b1b37c1e7a922483c12c15802fa75cc1a7da653e06d5bcb19dc86de0b6d94558bef150d65911b020ec0639f2d3ef3844bfd33f5b78cc08","ssdeep":"","tlshash":"37e0abaa3229c03456f08b3e6dfc0c17fa576b324d8c0a1bb8f0e9091e7dd1020b88d2","size":420,"data":"","first_seen":"2026-04-22T17:43:43.839491Z","last_seen":"2026-07-23T14:19:33.824174Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"88eb93418bae9d8798503b3f91ebeba6","sha1":"578232a94a811037ffa3836c603c5a2ee6ba820c","sha256":"8f01f50a3ad1c6d32e57c9cbc936acbde9c3ddebc850dd91ae3a00ed2aff3a0a","sha512":"58414507c96729a4200cf1ad5037bac863c019d05d46a133826bd8bce9683a400344d0c5aa4bf1b17b7b9b705ff83f73fe8f49a87bbbfe0b88ee33909edd5806","ssdeep":"","tlshash":"39f00e811ac0386223a10180b6bf34dc522d61193303969e0bfcd99c2e031b8d433aaa","size":493,"data":"","first_seen":"2026-06-29T15:11:12.711052Z","last_seen":"2026-07-23T14:19:33.825386Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T16:00:03.084559Z","times_seen":7926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d27730b20247c23e73ca7ccd1899c28f","sha1":"7e3cb0040725e46d5a00025e8508c28af69e62d5","sha256":"9e20c65be5eeb6ddbb9589be9082fbef102730cd3134fb8d21e6ab2b2ddd75cc","sha512":"79fffea66d275083f6c6bbccd53dce34724f43b8402d8430fd8f508cf970ba14a8fa6add189f519353ad31bfa60f9b14d897ae1a1e6c841f157a0046d41c4975","ssdeep":"","tlshash":"f5c022c4a0d3bf204722204961ff34e8e03b001e704d870aae94e9492b228b08233ee8","size":192,"data":"","first_seen":"2026-06-29T15:11:12.716183Z","last_seen":"2026-07-23T14:19:33.82701Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-23T14:41:15.104758Z","times_seen":1739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88e0999c1b192c465356ffb8b4e507fd","sha1":"8324569b119ffb05a667657d871151e7b0839013","sha256":"f77cd4891f28c2105f69612e3469cbb9826335edc6e983294f481d18dcdeead7","sha512":"6d92fde2a46d1821934c0418e563845149adcdc3e0bfccad216dc9a78bc2e8b63630fd3f5ae5a8e4b5c43b95c3d10ad1910f6e6b800850ee694f6db3de685c10","ssdeep":"","tlshash":"d011abfe191a70296303404f976b7801642260b9001a184173cc9a9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-07-23T06:19:51.151793Z","last_seen":"2026-07-23T14:19:33.828576Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-23T14:41:15.106392Z","times_seen":40614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-23T14:41:15.107163Z","times_seen":42178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-fb2ec18a.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a15673940d1530a16a8ab87e1e071729","sha1":"acf8620e6f914c7e8a5b374e1c4073abdd616740","sha256":"0720d2f4fe846fee4df428ac7cb55a2cd4b1bf27ddd071c50c5a6a32be69fb45","sha512":"6c1153cd30e1cc93e02ba9aa88fdbc3c7da40c932575537e7fc045e4452f8948263bf5523e710131356487a50439bc7af832cf66f2e6de9848c59053f6a6f1c3","ssdeep":"384:+rZ+AcIJVHlfJg3HitQO64BPYJuBsXdd1rdImo/lSpJjk6ofcPUOSJMQCzUim2m6:+rdJVH1JgyQ4AJux/lSpsNOSJMQCzjLT","tlshash":"5a72b642f90a963de9b3709105d90001721a3fdda04ed8ebb1fd4d47a762eb4b705bba","size":16515,"data":"","first_seen":"2026-07-23T06:19:51.105846Z","last_seen":"2026-07-23T14:19:33.791682Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:19:33.830441Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1ac039a330c609bc29c442ea6817970f","sha1":"a6263cde8b0c08b69ca5929b0c43d4cdfa1b7fca","sha256":"2c9ac521712fe8917e9ae67aa36d97219701454bc69289bdcc0f23a5732f278b","sha512":"3aa7e2ec06d3bb45c92cd201ec15ce324cd16c95086ebe0ee50db24592701c5b13d3ec1acba54d4b92ded16d437dcda29c7bdcab75697f01aefcf76a53ae1462","ssdeep":"","tlshash":"67c08cc8a0c22d2017966ca051af3af4903d803b708d1b829de8d84c3e270f08237fe8","size":163,"data":"","first_seen":"2026-06-29T15:11:12.738954Z","last_seen":"2026-07-23T14:19:33.8311Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95f527b45a883152c8ea523100b322bf","sha1":"169e8f2bce35bd6acee6f18e02cf11dd8cf27059","sha256":"8401bdbae613bd3f65cfa4fcf0b2cf148e8a3700650343d05f875522f2523140","sha512":"07a906cd1866fd1286c5b52108f9cb2e789b33d6b5fb964cf0e91f23f649595ce3359badfb6bf1a95d8777dc95a4e2fb0ff869412746f3673ca957097bb40614","ssdeep":"","tlshash":"0ac08cc5a0c26e111603645860bf38e89034402678881b428cd8e95a3e220f09233edc","size":148,"data":"","first_seen":"2026-03-01T13:48:48.202711Z","last_seen":"2026-07-23T14:19:33.831941Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a77ffc8fcd5be8f12fb99bc8118151ea","sha1":"65c43d3029a382b86defc99c54613aa6a32ea375","sha256":"40516dd855287dd360d48125cb9de73ff1ac1d47f2faedbac5227338bf02948e","sha512":"3f80885ba525b9069484a79918215f8e3f8f830d5e81286b8772be124ed6928c6a994c91617a57d7558ac347bb079f660f65aeffebd15768b4e403210299d170","ssdeep":"","tlshash":"64c08cc4a0c66d101612652010bf25e89034402770581b068c94dc482e220b18233e9c","size":141,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:19:33.832632Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0814ed4dd397ce915831558e5ebef734","sha1":"86fb82582b6a9cf331c17c052709477615a591cd","sha256":"7695807745f4202749dd404dccaf3ee553ecc8fb6475ad53b0746fb7f21132c2","sha512":"f9b0648e8ec0c9b10f1073aa8154a32bc230db7ee91a3f2f0e056959258c886df849514409201cc0bdc70035b3e9eea502da45fda9ad5db158fc0ed434c11082","ssdeep":"","tlshash":"6ec08cc5b1c67e109652751060bf28e8903680267048ab428ed8dc892ea20f4823beac","size":158,"data":"","first_seen":"2026-06-29T15:11:12.737881Z","last_seen":"2026-07-23T14:19:33.833341Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-23T14:41:15.120289Z","times_seen":1728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"346b7d79f44e3955f117d2e00060ffbb","sha1":"d6ce6029544ed201c661859070e0a997f6297559","sha256":"761ab00d6ff8b8877d70673e07dabfa8f6e3a1db3aca9c41ac3e5c622fb3669f","sha512":"3be9adb9846628275ca4791e9b8c3af308e881fe45d5aed1a936a7f7c7b5b5e1d3122a476ab8baec1afee17a454d0f6e096d1e8f5b0c4e0d2313bc6b733867cc","ssdeep":"","tlshash":"b8c080d560e26f041656541510ff75f45034502ab64d6b9ecdd4d8453f720f45133ebd","size":177,"data":"","first_seen":"2026-06-29T15:11:12.752747Z","last_seen":"2026-07-23T14:19:33.834547Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"79226b5e7d00c742cac4671cf028939c","sha1":"dce40ee9a2fc665950d5fb177c3bac47d4a1a58e","sha256":"afc1a0c3757fe1da8e081254849d384f8c7ba8d2b78b2a44f1f098fa16a2dfa1","sha512":"318b3dc0dc40880936e3cc9ce9906f9604e333fc811f1c7f56b87e9740a331dad9f8385c4768b6df21449d86e837b9c415256bf081169d7f6faf4771cfd8d747","ssdeep":"","tlshash":"80c080c4b1c22d001557541165ff38d890354016714c1b56dde4d8543d224f04333ddc","size":160,"data":"","first_seen":"2026-06-29T15:11:12.740269Z","last_seen":"2026-07-23T14:19:33.835134Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"36ceecc4afd68bb41726f5cb20015630","sha1":"14c5346bce16f8196f6fcfd24cf16d01677ba3bb","sha256":"23311ade957fecc4e79ee0c3e9b69623d442cc7f21e55217ecb0e4bf1a3fc644","sha512":"443296c79e56f99b0ad221e8999a6b30975f837205e86ba127a20e0635196ad815a600fbfc9fba7301d21532648746444e9269e84440f1f43085e248a2b51b22","ssdeep":"","tlshash":"b7c08cc9a0c77e209612642010af35e890758037b08c6ba28cd9dc982f620f09233ee8","size":158,"data":"","first_seen":"2026-06-29T15:11:12.707087Z","last_seen":"2026-07-23T14:19:33.835704Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.098872Z","times_seen":1627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/currencyItem-145ac5b8.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8554c0329141fe7a9af651182d092735","sha1":"cfd41e3dfcb5c465b7f3f10ffe21bb3cd034afef","sha256":"5c185154f66340be8eb050bef7e0329c01d07e3406cf78b28afb1d33276dc85d","sha512":"33a701c10c0f88d3528f08f856f1e9b67e4287dbce1bf0bf35a223d08142584ec1433b37cbbaa3c2d4dafcb3f3fc79b8fd5ba8942b5a48140b3e8c298273ca56","ssdeep":"","tlshash":"7031cf89690086b2d3bf1492d0a40434131ebfc53116c6d5feed14243b134b8d36df2a","size":1531,"data":"","first_seen":"2026-07-23T06:19:51.14004Z","last_seen":"2026-07-23T14:19:33.732221Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-23T14:19:33.836877Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-23T14:41:15.101262Z","times_seen":1373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-23T14:41:15.103089Z","times_seen":1180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f0aea3d7c150ded151c26860543077e0","sha1":"493bc6a8d726acf0cef18b833a8a1de89f999166","sha256":"3a41db3d58a3af7282fbf13affaa9f28a1995b5fe80c762f1911baf8c6386ed1","sha512":"8b1a793927ce985a3cfab4951d263a34c2be30184da4811c5cfc526fa50f1c1530d8fd9abfce78a3a2d4dfd1be75458f64eaa9704b6ae40b72734dcc98adea1b","ssdeep":"","tlshash":"a6c080c470c22d501506951124ff25d450344016704c17529d94dc4d3d220b45233e98","size":151,"data":"","first_seen":"2026-03-04T14:29:59.283294Z","last_seen":"2026-07-23T14:19:33.839717Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7c584ad45b14c8b9a8987209ede8e30b","sha1":"2f0ba6d002be81de4cbbe2acce57d09f6de6f0f6","sha256":"17bce869104a72837dc14ecaba35c4a31ba50e2b35b5ddffaf6dcbcc3eb103ce","sha512":"389debd56986aaef4b909e6cb65e4dbe67ca14f5cde2c39750b80f807d991cfb3d1d309e13aa915ccc9d31d306bb2baa900aaee39c1b65c485ec1b90932d4d40","ssdeep":"","tlshash":"d3c08cc8a0c22d105a06645014af24e4b0384026b0482b028ee4d8582e634f88233ea8","size":145,"data":"","first_seen":"2026-06-29T15:11:12.75599Z","last_seen":"2026-07-23T14:19:33.840762Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/filters-9f59856d.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fd4e1351ad54826bc18675eb60cafcc","sha1":"a3477e637841d0d02695b2e3846067563d089dee","sha256":"8bb387178b2eefd9876cdd86b62cd7cb49809d595668a24098c5911ee7d97e37","sha512":"156f6aa39601f24f9b274d5244320d341c83f0b3bc413181d0c7fc9b60d7190c975fccc4d2622dcf4d4bb948f832f1858d74582d3b77bfca532277aee3b7c6cf","ssdeep":"","tlshash":"356137edfdd3b13796ea59f945284410b28e6f10786e094df54fd0425a33888e0bfb64","size":3220,"data":"","first_seen":"2026-07-23T06:19:51.078553Z","last_seen":"2026-07-23T14:19:33.793026Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/en-77980464.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0f51664c4a95ec186da44bb1242a718e","sha1":"0a79a0166a62c4f403cb49bca01ecc940e366d00","sha256":"3b94c01bce51d90bf2158336f374f673bb4ea1a0da32bb867d4cedf22580f263","sha512":"68c09682718fc03b25a91095fbb83506b39dbb8adc47dc80482cb582915d4bc42e6e929e185ffd6b4ac2f1d65d457f252127edba5dfbe94191e538238a8adbe4","ssdeep":"768:KGtZcEw/o7ruOdg0si9AMCYrAaAMVUoP6+6sPG9wOmwO6fpk7aORRw4XmM4:uponuOdV+YrdVULsPWw7RRwtM4","tlshash":"fc23f7897e1698aa05f3133774de6a1160fa0ac18256c85f0fecc5fc53e2b62a363775","size":46903,"data":"","first_seen":"2026-06-29T15:11:12.635159Z","last_seen":"2026-07-23T14:19:33.764014Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-07-23T14:19:33.841523Z","times_seen":1116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5657a58eae951c0b69ed25728c9fc9a0","sha1":"484e4d827ab06f3315bf26704d7887b7485c227d","sha256":"10c7ce135a1b8d6cea26c0951a9acb31408986df8ab19dc1c272051dcf74b4f2","sha512":"86730b18df1c34162b4ada8a5912a94eca25be75e44cc760a34a2a8f070b031dc6cbd93a193589223fbb63a52ea526f0fe78c603c09dcff59efa7dfd824e4ed2","ssdeep":"","tlshash":"7dc08cc5a0d63d105652a41119bf24e890384427704c1b928de8dc483e660f0c333ee8","size":158,"data":"","first_seen":"2026-06-29T15:11:12.754054Z","last_seen":"2026-07-23T14:19:33.842313Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c0684ac40bb2075c0ec9bdd2d0c8a71","sha1":"b6ac0bb2d293a5fdf228b86388e8e1cff45bb555","sha256":"7c5eec04f6754f0b45b74b5f1243f97394721a128af33d7878e4babf0ec121d6","sha512":"fbc6d13c24b17226955828bf89c992b95e67034b0e2f7467f632ffe9949ed679d95ceab9df727ab72a826f105c2480b0c65b179fe8fa035468264a58a8602834","ssdeep":"","tlshash":"4bc080c4a0d37e105711645160ef35e4e035445f744a575b9d94dd453f624f04233edc","size":162,"data":"","first_seen":"2026-06-29T15:11:12.71488Z","last_seen":"2026-07-23T14:19:33.842965Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/charting_library/charting_library.min.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-23T14:41:15.072132Z","times_seen":1251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/vendor-348cf0e1.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"adf78437db266dad9d219a7ca154bcb2","sha1":"4751a690339ce8334071fc1de6adcf389b457423","sha256":"f479ad074d75a53b1d447d33e9224daea0b6cb3fc8652674a4d9b73ed13d9446","sha512":"6f8d735d41343382cb99672e6c04fa6bac1e2db0198c8d9f6ab2902754119086f9ed0c8b1231bb408218689fb325c21576def254a67fdca7f76216b94785ef68","ssdeep":"12288:CcFae4xeZMRVDwifmzbB9dw/Xbri8L1w672vI/+a8o2aqWl6yj4Ga2BD:CcFn4xLVUUmZ941w67viaqWl6yZa25","tlshash":"3d1529c57292f06147ab24e240bb0006f3396e59744e84a4f1add8db7d79d89a2b7f3c","size":881262,"data":"","first_seen":"2026-06-29T15:11:12.695981Z","last_seen":"2026-07-23T14:19:33.788295Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-23T14:41:15.113531Z","times_seen":4374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4a548aead5e9a1cfb34a9824980f06c0","sha1":"5b133fb3054832ecb1f2c4c2e42fae6cf879978b","sha256":"2fdb02712e27bbd63751de6c27e7e193e9f9bd1b3d1d6a401f7e05924da93c9a","sha512":"ae2b7c6abaa71e50bde7fee19f2cb8a442dcee124f9f26263aebbaf094acd3ff7a4b1791b99e997c0871d84e742c8eb41aa6632f10cc7f0eac00d6b79bb8f344","ssdeep":"","tlshash":"15f00e8155c0382233720540b5ff24dc933d71592307859f4bbdaa982e476b4c077eae","size":512,"data":"","first_seen":"2026-06-29T15:11:12.742764Z","last_seen":"2026-07-23T14:19:33.846864Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c02f76b8d173e1d0afc93a75753a8a9a","sha1":"5a3ff21341053a0ce6dec4cab0e4a8739bc8ef19","sha256":"e6dbb4df2b7605ab60ad69cc08ce5e7acbb99970e89f3e34e52bc5df7a19b3bf","sha512":"f1be22dcd1d064fc9038900bc3a7555b233735cdcda79b27c8cb0ccafbc58d4402ed5ac8189dba463b6b589aac7e4fe5324246c7d94b127d7dd8bd39f8773b3d","ssdeep":"","tlshash":"74c08cc5a0c22e101a02641419bf79e4903881a774481b138ca4e9692e220b09233e98","size":149,"data":"","first_seen":"2024-12-26T23:29:40.15335Z","last_seen":"2026-07-23T14:19:33.84794Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0cfeff5ac7a0fe13d1d6c59c656a8191","sha1":"2e7938dcb94dc32bdbbaffd147cb7fbb4906e1bc","sha256":"3ff8af045dc8bda6cc30b9863ddb4aa5fca07055001d79700bc5c957c1695780","sha512":"dd7af19be1158e20e32a6cd4ddd570034f223b04efe38fd6e5624ef045c9f4f5676c691af8b1f4290ab0306b1892281d7ceceac875de148238d4c3f0282a5028","ssdeep":"","tlshash":"dbc08cc9f4d67e20668a651070ff3ae89024802a70485b6b8e94de4c3f772f09237edd","size":171,"data":"","first_seen":"2026-06-29T15:11:12.73505Z","last_seen":"2026-07-23T14:19:33.848646Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-4f4afda7.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82798a2fc7298522ac5984c2865c838c","sha1":"7fa14afb916bf5d532c2f45b0cbe549ff087baf0","sha256":"4148645dd50221049c0ccf2df751e40b51d6378bf78c401b476ec7781d792482","sha512":"3594273e23be72a75b552a4005321f3a368b6f24de4ee7efbf7bfe85d84f1d1d6b5b36cc3345e9a79c1e20a97fb336f14bbdee530f0624f51f8a33bc348a0e20","ssdeep":"","tlshash":"fc01f8f8fd1d8ebb0ea20a4001902601140a2fddfa1419f198867d6a2be5940dbce32d","size":776,"data":"","first_seen":"2026-06-29T15:11:12.662053Z","last_seen":"2026-07-23T14:19:33.810178Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-0ecd4a18.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2427da983230e050fd689ba57a17f70","sha1":"a108d381359f65c5a2672793806ace604ea8b0b1","sha256":"052b12f726143bc891bd039421f8cf3e715739043ba2dbcca9e370520475ef3e","sha512":"68a0214e3a703cbc2ba074511135dc0e102048a8d73f9fbc7e8f1f2a8906a29e827a6e13a4b029d9471f42407e62ae2d09944f060305889658a0246922360efe","ssdeep":"","tlshash":"e8e0681f2f6ad0b2a7f2ccfde2231952a3182b041314c1f8e5471a04b3789e7605f368","size":388,"data":"","first_seen":"2026-07-23T06:19:51.091865Z","last_seen":"2026-07-23T14:19:33.730323Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-23T14:41:15.11264Z","times_seen":1615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T16:00:02.524528Z","times_seen":6923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T14:19:33.850616Z","times_seen":4416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"354f7af4d1454b0b09fd313a8bf1d086","sha1":"6005a065acaa787370ea2f37dcde7b7b27d16f9d","sha256":"564865f77e34f7410cfafa208b40a10952d9c0ea988b19e531e54be3327008d9","sha512":"ec4184f213e57457ab8abeeb4ab848573fa2e0c1fd85ec139a2645147d59c00e83965077e9ca4dd94eb4a07a027922ca73c794e71274d364673d7208040034bf","ssdeep":"","tlshash":"b1c022d460a22e001606100410ff21e44020402a720c5b8e8c90c8843a220f44133ea8","size":178,"data":"","first_seen":"2026-06-29T15:11:12.733955Z","last_seen":"2026-07-23T14:19:33.851256Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa0da5020b76710ff92e24f643dac05e","sha1":"68fa842ddba1a7476ac215bbec91e6f9c3331358","sha256":"751dd05c5d7be648924781a2bad4895e9462c243512edaefbd44e505e8fd95a0","sha512":"832669db5fcf81a90a4c60329a0696f0ccd19d42a2a24701ec2d82d67ff5c94f58de1723597181fc205204adc1c664746b4e7a604edbb7f9995de0959b24eb51","ssdeep":"","tlshash":"62c022c0a0d2bd208611204000ff30d8a03a0016788807da8ed8cc882f220b08137ee8","size":175,"data":"","first_seen":"2026-06-29T15:11:12.713351Z","last_seen":"2026-07-23T14:19:33.851923Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"761e0ca3055a6df6b767b9fd2c2c33f5","sha1":"8279710724184971e9032028a86c6b2bd81a6101","sha256":"3299676c7cf244b68eb2f2ef3bda119ec029c9c1b13d03c884c963873001926c","sha512":"40adf5d297017b6579b4690fe47a305d33dd5fb65721ed49b2a224984e8ed3118fa55ac37120a19340ab900a96515068a0fa3d395ded6e278f97429e3fd6fb1a","ssdeep":"","tlshash":"7dc08ccbe0f37f001602642211af34e8a038402a74c86b129cd9e8583e220b59237edc","size":159,"data":"","first_seen":"2025-08-06T15:20:33.623621Z","last_seen":"2026-07-23T14:19:33.853154Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-23T14:41:15.115698Z","times_seen":1361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.110339Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-23T14:19:33.855217Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ec4b2434b443fd9f7ceb7ebfddd35321","sha1":"96d223f929ad992bd4141e3a0c4adadab4aeb226","sha256":"e57f064c1dda986ee2a019d4d71278382e6632edb311e15a83b828997561e9f1","sha512":"3e394f6a587234d4a4c2501f7bc4084b51964dc28f1cd66af26f784bd6268af31ad87f4c16a4925f5e7ef4ccd46d667165311ed369f29b046e6a2c5bd744fc53","ssdeep":"","tlshash":"d3c08cc4a1d26e902786659128bf65e4a034502ab0885b438da4d88c2e620f0e233eec","size":161,"data":"","first_seen":"2026-06-29T15:11:12.745582Z","last_seen":"2026-07-23T14:19:33.857165Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/#/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.111569Z","times_seen":2091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tknishop.top/assets/index-9093b9fe.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.467Z","timestamp":1784816339467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-9093b9fe.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149aa82569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-1363\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8A5iCGXNXmwDrckdWUXlNr4Hrqt%2Fp4STuZAABu8pffEtmRnf2vWkauRDVwOqA5yB0997n%2Bpy%2FYd%2Bu%2F1TZcqvUavkcZ21BrkPFjBAE6IdiwjRL26z4QGUahYGJOu1Po%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4963,"size_decoded":3143,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4958)","md5":"993c7b915a5c1ea32f15f0769ac46af5","sha1":"98fe2a90ac7cb41f3a726bbae34fc58fbc23f372","sha256":"f983ed22a749b32aa0c3e27174bcc8cb87e841ef5023dfde5743d33fa6e432e4","sha512":"1b2ac0a44146448b6b465bbcaeac4e42c09c967aecd711126c4b8c4d8fbaf811126ba1411910807b58ed58ce5210e75ee08e667710bdf2b62f628e7972a2510d","ssdeep":"96:kDbqPIlf1l9YlqWqD+wS0M9cib1dQUgAaXGycOHlG3hvGXu35mTIqyhw7DjR:kDmPIlfRYvqiwSLqibwUR3OHluhvN5mf","tlshash":"a0a1c84df8038979aa67545054480012319d7ff6b10948f6f6feec0767798fde782721","first_seen":"2026-07-23T06:19:51.123381Z","last_seen":"2026-07-23T14:19:33.728334Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-0ecd4a18.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.474Z","timestamp":1784816339474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-0ecd4a18.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAGxvKrNgiE1iK6qZSENw%2FQalpa5MAgBP6crzK7PW8YH2CfpTukLpMsTc%2BQc7I4q8SVz6xre9R8NQQAfJWHUNP4vln4uj3ZlUtLPObDDzSRrnUZhEoMsCcUpXGwWemc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ba86569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-184\"\r\nexpires: Thu, 23 Jul 2026 18:19:13 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":1065,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (387)","md5":"f2427da983230e050fd689ba57a17f70","sha1":"a108d381359f65c5a2672793806ace604ea8b0b1","sha256":"052b12f726143bc891bd039421f8cf3e715739043ba2dbcca9e370520475ef3e","sha512":"68a0214e3a703cbc2ba074511135dc0e102048a8d73f9fbc7e8f1f2a8906a29e827a6e13a4b029d9471f42407e62ae2d09944f060305889658a0246922360efe","ssdeep":"","tlshash":"e8e0681f2f6ad0b2a7f2ccfde2231952a3182b041314c1f8e5471a04b3789e7605f368","first_seen":"2026-07-23T06:19:51.091865Z","last_seen":"2026-07-23T14:19:33.730323Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/currencyItem-145ac5b8.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.478Z","timestamp":1784816339478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/currencyItem-145ac5b8.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ba8c569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-5fb\"\r\nexpires: Thu, 23 Jul 2026 18:19:13 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAHnknrCyVuDsqZalK9i6xcmoTRCET6qJIjscQ3tC4LVcfPyoZU6tK559SYt79NnpkuvAXkaIfwDrdBJ87WHHDSoouRMEEF%2BvuZjLTZQsKsPsitZzlCE1QIFpY6VA4I%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1610,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1530)","md5":"8554c0329141fe7a9af651182d092735","sha1":"cfd41e3dfcb5c465b7f3f10ffe21bb3cd034afef","sha256":"5c185154f66340be8eb050bef7e0329c01d07e3406cf78b28afb1d33276dc85d","sha512":"33a701c10c0f88d3528f08f856f1e9b67e4287dbce1bf0bf35a223d08142584ec1433b37cbbaa3c2d4dafcb3f3fc79b8fd5ba8942b5a48140b3e8c298273ca56","ssdeep":"","tlshash":"7031cf89690086b2d3bf1492d0a40434131ebfc53116c6d5feed14243b134b8d36df2a","first_seen":"2026-07-23T06:19:51.14004Z","last_seen":"2026-07-23T14:19:33.732221Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/currencyItem-823d4767.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.480Z","timestamp":1784816339480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/currencyItem-823d4767.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ca8d569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-6d6\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBqmEkcK0kjcEmfipF9fiVsKIms5tsc1KuhZxEgD%2BrYqmjnrJ9Lstce9gwBQbaZUgGYINmMUSRbFXm%2FGiYRwARithE0R%2Bnk2NJfBgs9EcXnfZ7aaIdQpV3DWxyfeI7Y%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":1325,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"f5153d7ad75512408bfedc5aff6db8f0","sha1":"350c5ee39a0504659d5683aaa326bf078235ce1e","sha256":"823d4767bff172ec2727d95da2a1cb6654902551de9253fdd50343ffff7830bb","sha512":"2f0561b7703191502d3ed5cfaa342ebb9f941d841e681a3e9bc7b3881075bbc520ab1208a8a3c779aeb4b94ebf25e5c14582eba9d52aa9086a095b9ccadd0784","ssdeep":"","tlshash":"e731bca453110374e936d4c6aea84108d0163f819007d6dafd8b0a379ccbea30ab0d6e","first_seen":"2026-06-29T15:11:12.672228Z","last_seen":"2026-07-23T14:19:33.733451Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/10-b34a6ea9.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.019Z","timestamp":1784816341019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/10-b34a6ea9.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfBYntwvkhhh3wYQMWAp2l1I88FH9bpuYoNzUHLgyJMPb8kS5ILUNqSLti%2FfJFUBSG1bFsNVlRTQpHz0z49leQDNLmxQskEjmKUeDSskvN29GIqsRFGBgSHK2yFPcwY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb51536b0f569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-515\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1301,"size_decoded":2059,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c63f8e37637e8d29b3dfc48f3064b903","sha1":"19cdc298a4564418550345686ff29b9b702e0400","sha256":"b34a6ea93c1168514fed677d1bbcaf06b7219dfd825c0fee30467478054d2f69","sha512":"e72fe64ef9a671cbbe0a0966a6c41d6139fa5b585753eeb114cfc45ebb82c786a9cd447e9c998abf53d158a02808e69d00e1aedf89a271b8ed77780f163ac2c3","ssdeep":"","tlshash":"a821fb36ff207d3d3ad82291432114b3ce4a478186a4d89101746a1b72703e6f5ede61","first_seen":"2026-06-29T15:11:12.694653Z","last_seen":"2026-07-23T14:19:33.734475Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/ETH.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.025Z","timestamp":1784816341025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/ETH.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-c88\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3208,"size_decoded":2883,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4fe021c8f8c9e7e44ec7e4815469541d","sha1":"d2835938a6b3771b012a15d9a4c2839e7327489d","sha256":"8ab86382438f8b5df315a9d139b7207c502dc055d16ca051a6a4967382ac6ba3","sha512":"858149b1b6e59802f92754f9cc58e4b357c59bc2b9a6bfdb52712723d5c3597f62826da9a003cb50bf7c553259cb968bfe60e2c05a758921676baf069dbe555c","ssdeep":"","tlshash":"f1610945f510ac60a545f984fefa01036b370be499868c1abdcd9f6798250f7d90cac3","first_seen":"2026-06-29T15:11:12.658048Z","last_seen":"2026-07-23T14:19:33.735395Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":2,"connect":259,"send":0,"wait":519,"receive":0,"ssl":516},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-b037c65c.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:58.802Z","timestamp":1784816338802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-b037c65c.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:58 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb51458a54569c-OSL\r\ncf-cache-status: HIT\r\nage: 28787\r\ncache-control: max-age=43200\r\netag: W/\"6a5f0843-1a721\"\r\nexpires: Thu, 23 Jul 2026 18:19:11 GMT\r\nlast-modified: Tue, 21 Jul 2026 05:48:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZF7NMPcJ5z2vqT6WI77ozwJqKIJi1IPWGKmzSC7h%2FYCAV6AS4R%2FMJeVgkWKJ5ke1LfNpxuY9%2FlDsKy8wTwG4RYX6cZAQ1ntFNpIWFxEkw3hHCjSFe1syz6FUhwxU1Ks%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108321,"size_decoded":31254,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"5e0b5ac4db2d1444ea9a02cc4d1589ff","sha1":"96974bc127d0f3702c7518107aa9bfe89ee7a4df","sha256":"ed10005d009ab03c183c160d8027fc4b509f2e80b40f91b102249b46541df72e","sha512":"1880a09c25d837a9b264e8531e9e1a436be855fdbf82fd53c416cc6558633c73e341c50bb39d1a9a175ffd604aa74d0727f55e923393deb7865df50513b27096","ssdeep":"1536:4cORZR6neyXR0sxLDN+8N5BS4VXGtmvHFPUF5Ft5Z:4B921LDE85pHc","tlshash":"31b35d8998070ebf5cfd084ca55b560020691fd35c89cca7b3be6e553bfbc94639a728","first_seen":"2026-07-23T06:19:51.094595Z","last_seen":"2026-07-23T14:19:33.736111Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/XRB.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.028Z","timestamp":1784816341028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/XRB.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-f00\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3840,"size_decoded":3528,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f6ee73da973ab829d7750215f89edd84","sha1":"ef7d9a3f60f6f4530fba367c1ca15e25786c93f1","sha256":"fb6bd9013a4013d812a417b95d834a8717bf0bb0c33f1a7399a562f6c2ffb9b2","sha512":"2c8a8a68d7fee4eab706e59eac32362a315bba39a35f2817b67ff61b82279656fa67792e4eaf3c1aede8f6460f5c9aa2426334732465d161548ea90c8033f376","ssdeep":"","tlshash":"68814a1efa1479204d0af608aee95023bf330be44ec199d5bcc1db636874176a51daf3","first_seen":"2026-06-29T15:11:12.659374Z","last_seen":"2026-07-23T14:19:33.736754Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1812,"timings":{"blocked":-1,"dns":0,"connect":275,"send":0,"wait":993,"receive":0,"ssl":543},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/7-6412c69d.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.058Z","timestamp":1784816341058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/7-6412c69d.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9spHLOMsxDzP7uDYFJFJ%2BuMfW11fbCvFqfDpojmSfmBsBW4%2BxLDfHr8%2FBDaKy5kqLVDPjYLt5ORWVIH1U0G1g%2F9YpSKTHDgOhqFkTGuXcT48Vi2Ay89OeS27nB49HsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb51539b19569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-13af\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5039,"size_decoded":5804,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"a282566c113972c130b69cc3e37579ab","sha1":"bc0a340b944cd378156cd1043ac02acab00b0531","sha256":"6412c69d9988daf6683f21309530825ff772c4a9585c0acd8de3c197f2340af0","sha512":"e729c8bed3ad5ed5368bad5cc4dda3aa944043026c21ff8286cecd79073cc5d2a09ef000a79921a5682f44fc6dc5db151e8d3e8d493e3dd156832fac51876b89","ssdeep":"96:Xx/JmzfPYQefYQyzTXmXH1D+Md6VmUkiUDQopD1muJ6sGXJQSl9nzn7t/JjECf:8fAQefDy3QH5x6VljsyuHGXJQ47r4k","tlshash":"bda18fd4023d1a63477e4374d0f0ed527ff21ebeb7784690b650964d4e82228751d406","first_seen":"2026-06-29T15:11:12.664476Z","last_seen":"2026-07-23T14:19:33.737444Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T14:18:57.726Z","timestamp":1784816337726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qM59BfoAYeYVD9gmlP7xESqvbO0bcgr87dCH2MVBgLSH%2FqWE50NuoaZ6vjQEsxODAbA7cy2KwrCcHtgc%2F5T%2F2l6MIZs5zDHLOe1y1JY9EvIuUgZ6UtHcngQQmDu0%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:58 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a1fb513efa1e569c-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Wed, 22 Jul 2026 13:31:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5142,"size_decoded":2578,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"1428693fbf92b10d4f472db0d8d803f5","sha1":"a29fe0e0349c12a12078c0611f8728351c655d3b","sha256":"d02a70baf0c0a7e71547239b64e0d39753aff32298211c7b3b0308baba76c945","sha512":"c663db974fc1a34aef9e3393b30aff6df93a892590f37d5bbe2b9dbfc9c92660387e2b63d3d676d6af622c647e3317e2409420e586b076d898f9babcd00b62ec","ssdeep":"96:+r827Uf53uSPEegMqt/ivr6TCZydHRH/gZ2mUsGKAiowGwuB1niH5iH+H/QB:+FA9PEDyZCxfY2nfD3bwuB1niZiefG","tlshash":"91b143b39ca4981a23b1022feedbb418df6151a385198850b5cc54ee4fe2fe5c4e7725","first_seen":"2026-07-23T06:19:51.081686Z","last_seen":"2026-07-23T14:19:33.738179Z","times_seen":4,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/resource/fonts/Arial.ttf","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:58.860Z","timestamp":1784816338860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tknishop.top/assets/index-2cadaaa9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:58 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a1fb5145ea59569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1743\r\ncache-control: max-age=14400\r\netag: \"6a490dfe-ff9e4\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wLlVhSMw%2Blp5QJxCfGWnpJ4COhFLHD8aT%2Bb2bboKI3nc9WSAsrd2eBtyHTgIa06IMHVhnpGvHOpiXfnHCvxwmkV3CMfg6OLl3bO83ZtNKARSPwCwoQefByLfHInRII%3D\"}]}\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047771,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-23T14:41:15.058903Z","times_seen":2139,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-bc011be9.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.470Z","timestamp":1784816339470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BnyhHiD%2FavY9UlME6qTYO1fP8l%2BeBO1ofQhb57wYAx%2FQkXGT5eONFRQyb17RRDD8H29FezS0pG%2ByHSmU%2FNE5eZ5mRIW5oxNGQIVOD34Xkq7q7o6V%2BzhOdYDocOQ734%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ba84569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-18d\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":969,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.085304Z","times_seen":1427,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=USCL","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.833Z","timestamp":1784816340833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=USCL HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":461,"mime_type":"application/json","magic":"JSON text data","md5":"1f738f71925288a49d36af5cb21f1a07","sha1":"0e9ba820497917f47fb1c4d0c54b1e562ea5180e","sha256":"34d5d0b3253b38b13a9eba7b510ccee5a2790b30e1a09271c443af521c25ea68","sha512":"5951b72d0e2cc17fc649eb26c3eb3050c441040345df472b68c2ff9c7173063c6a11e2b0d5faabd9abf3eeee7196ee2ec2338312e7e59c1da8c6d91fed99dcca","ssdeep":"","tlshash":"7b9002651c188242a88700aa9546130400243160262492488c5d9169c0c85662041d58","first_seen":"2026-07-23T14:19:33.740317Z","last_seen":"2026-07-23T14:19:33.740317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/4-1418fef7.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.050Z","timestamp":1784816341050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/4-1418fef7.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDfYL72E8uKOkmcm7dMPiOOf4a4FdCCER4kSaXkDRFzUg5DQ3lZN%2BqySCkOSWnw5s0j%2BaxAt2mVsENyvkgLU2jY%2BshARcoNPEdJsAbCYcQqHYeTFMk3tKTdt4Z%2BZle4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb51539b15569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-2c9b\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11419,"size_decoded":12184,"mime_type":"image/png","magic":"PNG image data, 110 x 106, 8-bit/color RGBA, non-interlaced","md5":"bb60216b7229d11e629e1eed1dfa9dc3","sha1":"bd2132db60daa8a02973e59eb003319632dd6fe6","sha256":"1418fef7b25e7415f195772dd6c11ba8e0b775261614e83bd8fe2ee86843476e","sha512":"51d73794641e4a17c8926ae83145dabf18570debf80170891bd431c20298b764380fc02e856c76b35cd5f29e8f16cb4a4f862bfdb56bf4e44e418c1f02db02b0","ssdeep":"192:ptLpcr+7tdrNy84KlDntqi+0AvxDLkSE1L58iD18B/7tmIfbODVW4ssG+V2yrbKi:pBGuZNr4KltDAvNkbp8B8DWYH31T","tlshash":"1232b053b325933489ce8e7b3f745ac0fd221469443ea4ada1a6068bd1fec1525aca25","first_seen":"2026-06-29T15:11:12.668993Z","last_seen":"2026-07-23T14:19:33.742028Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/charting_library/charting_library.min.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:58.801Z","timestamp":1784816338801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:58 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb51458a53569c-OSL\r\ncf-cache-status: HIT\r\nage: 28787\r\ncache-control: max-age=43200\r\netag: W/\"6a490dfe-2a6b\"\r\nexpires: Thu, 23 Jul 2026 18:19:11 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpHgHgJ%2BzA9i4XgZDq%2B4oZkUmLka9pEEfKcdINBQ5mQf1LfrGIkptxQ5c5uO1J7FBMRHYTpxOPCeCjqPr0snsShuDtt50C1%2BJu6F92P778vEgHMBwwquTR%2Fd5bVS%2Bro%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":4130,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-23T14:41:15.072132Z","times_seen":1251,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=UKOIL","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.831Z","timestamp":1784816340831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=UKOIL HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":461,"mime_type":"application/json","magic":"JSON text data","md5":"b18262d74f13bfc8dd3b4dbaffa4c15d","sha1":"fd3e5ab802ca63e892c52f820329e271b92e9014","sha256":"3da4db7b2c83c87ee60f0f4d5877b4dae3bf37006e07a0605417bf416db8cd3e","sha512":"738581579ba4f55854dca52ee00ef86e3021dd72f9f9a84cadd9c06fdee0939466a7942856f2335a4f5d67d8a50247b507ed27c0cfc9eee290af62a81fd70a55","ssdeep":"","tlshash":"c99002652c188242ac8340a595061204106432e036259248dc59516580881626040858","first_seen":"2026-07-23T14:19:33.743531Z","last_seen":"2026-07-23T14:19:33.743531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=XAG","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.839Z","timestamp":1784816340839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=XAG HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=USGC","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.843Z","timestamp":1784816340843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=USGC HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/5-fb445be4.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.056Z","timestamp":1784816341056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/5-fb445be4.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1%2Bs4jsnCvCOkVO4QkIzoBsqbovRq0QP9hjeAq9aRSkYlYS7hw9h55jrZ1fsyVwHWGxCUQtSWmubfJbPa36o%2FWqHsWcXcUH4GjTl3AwncEDIaTRTUUcORH3kLIWeF7o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb51539b18569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-1e04\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7684,"size_decoded":8445,"mime_type":"image/png","magic":"PNG image data, 88 x 90, 8-bit/color RGBA, non-interlaced","md5":"9a7dfae2b19784d6f74b47b464cd48fc","sha1":"471911c9837140efe6fe786df87d3051198f0de4","sha256":"fb445be4eeaf6208d2666640351ad6779c650baa8e56de73a638fc8ce99f5f8b","sha512":"51c15f8f8359debcf5286486f686a2f3ea3eac75dcf0731039b24669d996662ebc63846b32a057841358896569d9c7ca1b2fc935659f5b8eb00abcfddde59d4f","ssdeep":"192:4v0x83Q+p96G6bQbbI26a27S8dvgxCa6LJHtPA:4v0x8H6BbKN6K8vgUaWltPA","tlshash":"cdf1a073bddad944e90703b3cf8e911b267d92295248b881550931e25caa12a3fdb065","first_seen":"2026-06-29T15:11:12.648149Z","last_seen":"2026-07-23T14:19:33.746325Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-28f71d93.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.482Z","timestamp":1784816339482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-28f71d93.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ca8f569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-6de\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0hPqgFPzJvSmTE4sTOc65SO9tbt1MO7InWKhhhvqqbM4%2Bv4m9DIvWsWUOSAloiRmZEa4h33QhtTU5r9bZrXn%2FQqUD5XhWxys1qSbBMUGk304Ibjpzp6VAf471xVGKs%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758,"size_decoded":1317,"mime_type":"text/css","magic":"ASCII text, with very long lines (1757)","md5":"10891831727c74395a4a703a08b3e658","sha1":"4c782938cd57393f946807ccb770cf6d4fe77140","sha256":"28f71d931343a969e88ee27d761468c9bdd028fde33053d803fdf471e3e42e5e","sha512":"6ae07dba34a028f49b46d7729750810432366cacf4bed1b4fef0c8dd39f1e69f42c92fe757f93324ef34f3a624f13db9dbd73abc0995dcc7a8d0a707f4abc891","ssdeep":"","tlshash":"bc31f46b659862785ed6f175d3cf11e4e23d9120cd21817db216471e2fe337441e2624","first_seen":"2024-12-01T15:40:05.189135Z","last_seen":"2026-07-23T14:19:33.747035Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-2cadaaa9.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:58.804Z","timestamp":1784816338804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-2cadaaa9.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:58 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb51458a55569c-OSL\r\ncf-cache-status: HIT\r\nage: 28787\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-4a384\"\r\nexpires: Thu, 23 Jul 2026 18:19:11 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e66a2JeX%2BplsoW00X1t9m4DLR6Sc%2F0xoy7rrPdfq9eR1Eqie7fEhDTg9Iqq8WfA8FlUOQnOgPVck98VFrhp5%2BsPbL5H0NTAxb3Mt9P1f0PwD4%2Bwz3QRg35GG7bxxIjo%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304004,"size_decoded":70160,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"3b693aac6b84450906df2281fce30ebe","sha1":"0aab90b754ff87caaac178724d9754550403890b","sha256":"2cadaaa9d77e3a016a8eb587d6033e38f8408c43ec703895f308b9e0508f8eb3","sha512":"96af6a5f3fa690da02985ac70508eaf2b58c534d6c64e284ada276618ef4aa27bdaa891015f1228f330a7ec703d4f7d71c26cf7ff8d1192dde7eb20c4bda8aff","ssdeep":"6144:nDB/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05Tk:DB/54NZ8w71ZACkFDS3vyf58rBeV05Tk","tlshash":"8654d6a9a59011bc6f27aa7597ce9ad8f23ce6719c118de8f20150094fc3ff92363617","first_seen":"2026-07-23T06:19:51.139049Z","last_seen":"2026-07-23T14:19:33.747695Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-9fa27bd9.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.476Z","timestamp":1784816339476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-9fa27bd9.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBVoFitUM0ChQRHYTxwfXIcecM1TenREvC4ArdY58tKU%2FYMgLlQ8ivZ9D51ioGLH6XjvTjzWlGiFBGPHzN8S4v35hgeV%2BLe%2BbhmRQk1CsRj9hWOgklrOHPAXobmBs%2FY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ba87569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-3d\"\r\nexpires: Thu, 23 Jul 2026 18:19:13 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":830,"mime_type":"text/css","magic":"ASCII text","md5":"aedeb74e602c41cee34bd6935a50e570","sha1":"7fd40dd1eec17a39582985c82e309a548cc7bd33","sha256":"9fa27bd952afcd8941dc89eabf27d6a5c5b11b12921f61f91ca79b0fd41dd1f6","sha512":"d2c82c912e79868d7a71a602e20e1bf65838fdf3e6f954e7ef98f434629ce2f9de4b62de550d15efcedf2a91a6172addb05208a68d8cabcfff72f58af08df442","ssdeep":"","tlshash":"dda0022d12192504f3364712ff0ae90ecf3d69579b91422953031ca635dba8f255810a","first_seen":"2026-06-01T14:27:43.793485Z","last_seen":"2026-07-23T14:19:33.752412Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=UKOIL","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.840Z","timestamp":1784816340840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=UKOIL HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/30-e41afeff.jpg","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.012Z","timestamp":1784816341012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/30-e41afeff.jpg HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOGodQhiX2493yjdLUI0Q436NiufcUcHz%2F0NHjZt7eBh7unoQ7GyweCJ%2FA4e50mVrNXk2X%2BFBdXyp0OivPOeCfmW%2BqsrtvLvBbDXauNeqJy%2BJZ25uRmPcMntIbfCDSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a1fb51535b0d569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-24405\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148485,"size_decoded":149254,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x768, components 3","md5":"80c969c31078397dd3c0ee487567128c","sha1":"5f06789288cc611e322097bd49bd0824096d991e","sha256":"e41afeffc4564163eb4d05c2bbec00ad809f3bd47f8700c9b9afe20de20be529","sha512":"490425321cf867a67b6a131d77d137fa967a40d332b3caedbd7d0b19a77d819f5fcb4898b4fb5efd513f8536efffb9498f0a6f0bad8976fbeaa4823f8529ecca","ssdeep":"3072:eaF2NAji/3zLhnzeGAhHBTzQC2J1gV8NY/a2KEHHckoA:/2B3dLudt2J1gSNY/akHczA","tlshash":"c0e3122ad23db8f388ec8b750e170a3d54503eb5f59879c1c1b14e29e9236ed3e78924","first_seen":"2026-06-29T15:11:12.663284Z","last_seen":"2026-07-23T14:19:33.756772Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/32-73735bc2.jpg","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.015Z","timestamp":1784816341015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/32-73735bc2.jpg HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exAZn7pJjl0cu0Yh%2Fwm0%2FWfsnhsrB3zilMCh%2FudBJJ8%2FoVchduNizHa%2F9H2NtLHsSDbizYNOE7SUMfO%2Fa5DoWh03VF0Ig5u36lK%2F%2Fx6teZmY3PWo4Zi4UvyVUxKq3kk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a1fb51535b0e569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-db46\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56134,"size_decoded":56908,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1143x594, components 3","md5":"bd7520a386f6e5fed713051ace7aad4f","sha1":"bed31354fe16614c28c906073a72d3ed1311c923","sha256":"73735bc291d53d57bbdcbfd6c60a89db900b86b928fc1c552eefcf5534a5e4ba","sha512":"f54247f35cd62651099c7e91caa120e3f0cde676f2d359f1712f10a156de30432d040ef67bfa1ffa0c3bb8385846a6c3aa7a023c2e7e6c84e63530ed61c4770e","ssdeep":"1536:H3/XLsbqAu9eOZbl4PgBkxwmMPzNVqO46ZuClvCC/gHvA:vLLb9eOdi0qwPacuCl6C/gY","tlshash":"7a43f156a1844ca6dd34873a4a9a8931d613361b63feb661c9d2c7480feff10bb7f409","first_seen":"2026-06-29T15:11:12.656442Z","last_seen":"2026-07-23T14:19:33.757631Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/DOGE.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.038Z","timestamp":1784816341038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/DOGE.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-ff8\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4088,"size_decoded":3772,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d2a5793984534bee45c89fc407169b44","sha1":"5025de4df42e881e6a9e0e0aa41a17770d221f2f","sha256":"d288a551977ce972c1222d0ceb64023a4260ee4834a3e926210b9fa2b169ccdf","sha512":"3f022b31348a8225d7af0425bb86aafaae1b31ccacc1b5cc0a75e7a29679735fd16b2b7b1aff324b21092b98950964a61d7d7615c5ef01baa3e1cdc158f07c11","ssdeep":"","tlshash":"76813b4cba842e40501eb588eadd11475fa721c09f81e2817ddeab8fa8315b69c3c9da","first_seen":"2026-06-29T15:11:12.637943Z","last_seen":"2026-07-23T14:19:33.758856Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":721,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/type/defi_activity_type","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.111Z","timestamp":1784816341111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/platform/dev/favicon.ico?2.0.1783172626134","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.829Z","timestamp":1784816339829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1783172626134 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o65HqN8yhooHIFJROWtgK8xU56Ja6kQB6hR6ZSuutrRw64CIb91s2POBZudFU%2FszPyA07CLc1DA%2FSy0Wjx347mrfsJYIM%2FJb3oFn7t2RoACfsKFklK7w2%2FqG09J%2FSeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a1fb514beaa8569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 1743\r\ncache-control: max-age=14400\r\netag: W/\"6a490dfe-68d\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1677,"size_decoded":1946,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 57x38, components 3","md5":"5cc0155043de66e7e554dc76dea7e7e6","sha1":"d86031f827d88bda5257306aaca13e8de1584536","sha256":"1298dcbf9df2717544de0dc74ede64fddf06692244761d675c3e0c34df1aa94c","sha512":"9a13af77aba2e36169e3baac0d53ccada2cf15e3a3089d5a3cc4645be92c3d705edf24e0205aac5ecbff220f32ae6ba51dc635cc14dcff54aa094c6807080e1d","ssdeep":"","tlshash":"aa319672b78567a1ec518bf582022796f7ac7922fac56715a9c041f3cb10ec5685c90d","first_seen":"2026-06-29T15:11:12.654967Z","last_seen":"2026-07-23T14:19:33.759754Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=XAG","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.829Z","timestamp":1784816340829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=XAG HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":461,"mime_type":"application/json","magic":"JSON text data","md5":"9132e305a796ed40f21bd969ebf0904e","sha1":"9ceeb3573845745ac798e4c338227ea8bb1f6798","sha256":"3c0393969da18bcea804bbb3543711c9a7d44985f90fdb70ea1b84bf53ffaeaf","sha512":"c14ebb1d97ab6a0e5084bc14e53e0ee79af0ff90598cc8082f2cdecd23c08f74790b9f5eeb29e453378b851593e0e11aaf957c919f20f725f147a2fee304deb9","ssdeep":"","tlshash":"899002551c188242a8c700a5a506120401243160262892485c59922780886622080898","first_seen":"2026-07-23T14:19:33.760565Z","last_seen":"2026-07-23T14:19:33.760565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/9-9f5be418.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.055Z","timestamp":1784816341055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/9-9f5be418.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKSfrZ6okwqUpoROpV0CUchDFfSjBN0ZhHELKCz%2BKsCuviI7FQRdCUdTrNLZUMjv5e4%2FlYQLDzDBjvMiy4Pz6xf7YMQ6HYq3yknppWb1EAQZP%2F%2FmnMdoLGHU%2BuiJBug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb51539b17569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-755\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1877,"size_decoded":2643,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"2396e33b9aee833267edd4e3ff282908","sha1":"8d1cb866ef1e379476231d960e421c1e57063bd5","sha256":"9f5be4186cf6d3f2e489afc0888c6cd791024714ff477baac9b8174a0e0c937d","sha512":"90069341a4edd0bbfe1d779a3e69cd9940f7769c1df66e9d38721a88ecc34b97ab78e0d69749d8dbe41d4c65b194ce140cac716eef3e0fc1058695d55b1a3a2d","ssdeep":"","tlshash":"3641f7b3e28e087c6dfe3057cab9579bac3310a3155852c100ceae394d85d6bb484e33","first_seen":"2026-06-29T15:11:12.698673Z","last_seen":"2026-07-23T14:19:33.762712Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/en-77980464.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.846Z","timestamp":1784816340846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/en-77980464.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb51524aff569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-b739\"\r\nexpires: Thu, 23 Jul 2026 18:19:15 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5lXPW2TPa%2BFsQMoD2O4V5q%2F2T8%2B0QiFmrmIiy5I30uytyeKGhLJ8OiPOrgwQLYvxzEjw7NE11VzNRvf0UZvkhGoitmYvkES9wBGKS1f4rC3llzthvxrxvCzbhu6qbk%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46905,"size_decoded":15345,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (46882)","md5":"0f51664c4a95ec186da44bb1242a718e","sha1":"0a79a0166a62c4f403cb49bca01ecc940e366d00","sha256":"3b94c01bce51d90bf2158336f374f673bb4ea1a0da32bb867d4cedf22580f263","sha512":"68c09682718fc03b25a91095fbb83506b39dbb8adc47dc80482cb582915d4bc42e6e929e185ffd6b4ac2f1d65d457f252127edba5dfbe94191e538238a8adbe4","ssdeep":"768:KGtZcEw/o7ruOdg0si9AMCYrAaAMVUoP6+6sPG9wOmwO6fpk7aORRw4XmM4:uponuOdV+YrdVULsPWw7RRwtM4","tlshash":"fc23f7897e1698aa05f3133774de6a1160fa0ac18256c85f0fecc5fc53e2b62a363775","first_seen":"2026-06-29T15:11:12.635159Z","last_seen":"2026-07-23T14:19:33.764014Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admapi.embersilkliving.shop/d30df0de75f244c69d4791f172be411d.png?2.0.1783172626134","fqdn":"admapi.embersilkliving.shop","domain":"embersilkliving.shop","tld":"shop"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.045Z","timestamp":1784816341045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admapi.embersilkliving.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 07:38:32 GMT","end":"Thu, 08 Oct 2026 07:38:31 GMT"},"fingerprint":{"sha1":"12:C8:95:A0:6F:37:AA:00:53:99:A7:87:1D:06:9C:55:FF:6B:58:8E","sha256":"57:CF:9E:64:02:47:EC:EA:65:CE:BB:95:BF:B3:2F:B6:94:1F:10:C6:D9:18:54:60:E9:38:61:CE:70:0B:69:50"}}},"request":{"raw":"GET /d30df0de75f244c69d4791f172be411d.png?2.0.1783172626134 HTTP/1.1\r\nHost: admapi.embersilkliving.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 31 May 2026 08:27:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1bf100-2a35\"\r\nexpires: Sat, 22 Aug 2026 14:19:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10805,"size_decoded":11114,"mime_type":"image/png","magic":"PNG image data, 200 x 176, 8-bit/color RGB, non-interlaced","md5":"ff9f635f77b518e1f0c2e4d23f16529d","sha1":"d427c52e70aad049e3fc4fc12ef432e632039c7a","sha256":"bc07b90f37ae289bfd4553d11772d8984e945b615f74a14905155873f5e5d302","sha512":"28250909b3796b1f059d955499ed317d0b8f8ce1dacc0b74181ea0125690acd1c9cfc0f35c5657d09d514796e4262c4fea2341cbdc98c3a303d03b81df94b569","ssdeep":"192:rx6KeDeZdoJLWfQPn1PgtiVyA25Kw7FdS33wt+to8sxrthFINJfSlRmeE:roNDe0JBPnWrA25T7FdSHwt+to8krth6","tlshash":"0522b0ce46c4d176520a527ccfc0a8ebccd1a628cf75b6763a1c1c724f56c216a8578d","first_seen":"2026-07-23T06:19:51.096898Z","last_seen":"2026-07-23T14:19:33.766064Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2082,"timings":{"blocked":-1,"dns":80,"connect":254,"send":0,"wait":1491,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"admapi.embersilkliving.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/1-3e42d63d.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.047Z","timestamp":1784816341047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/1-3e42d63d.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKosM9UDQWufjXNkZd30Zkz7MDbPUq2WEaax7%2FIMcDvEuT9Lq1TKaAtsEdfWNZdF9WHiF9Vp3Tf%2FRTwfR1w9V3Wyh8Vn5WJ2%2BOp5fwH%2Bqauwhm8fiIqPcAusYr9OM28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1fb51538b13569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-557ef\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350191,"size_decoded":350957,"mime_type":"image/png","magic":"PNG image data, 672 x 504, 8-bit/color RGBA, non-interlaced","md5":"8c1b1d1df13fa1c933b563c3aac3baa1","sha1":"e2cb641a64d40b254e437966bd60e3eef8ba268c","sha256":"3e42d63d1eb5d7e35f19f229b12654e187e9e3351dc5653634d38353bd7bfd82","sha512":"ba81cb1c4b045f669471f8976a4a2b6dd02742c850000fcec5a398a82b100a28569dfd7aa6a6d84e8e320ce44315392d6ab0c750b14bfe118c4910f441b50ed5","ssdeep":"6144:8Uv87JvXZz279FMYKhkGqlOYOTpL0FRVHh61iiLMJet0tk3Js6+DnznsLBlmSB:kvdE9WjOGqlO1TpMM13AJqT3JQ7TuIY","tlshash":"77742385714acb7fcd3b1c601073ab0aa275654e4e8672fac19cd92dfe5bb83c468b14","first_seen":"2026-06-29T15:11:12.687227Z","last_seen":"2026-07-23T14:19:33.767425Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/6-b26b7fc9.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.052Z","timestamp":1784816341052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/6-b26b7fc9.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2FBwzU2%2FGF1lfOzQZ6tRl8CIMnU6id3dVgz%2F2RAd%2FRoLFvDmNE34oFxMaByIPYAnnGzuq1RgKr%2F6fVRrkoY9kvc9Mpc8KThUBrZZqb5isZLk2zRyxupVvuzoYjdfoEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb51539b16569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-176f\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5999,"size_decoded":6766,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"2723b3e74f4e043474f650c61a931d3b","sha1":"32c47636b9fd96500037ea914660ccadee69ac63","sha256":"b26b7fc96446d01fe4af52edbfb3c543b54cf4c3ab6e9ff432c85c54ad35cecd","sha512":"acbe5a0c417923aabca6102541561fac565bd7fd28f2cbece33be854b418119b80258897bbbff06efff48f81d7f61ded9450ac6763e38a3b3309988040f66ce8","ssdeep":"96:PMcrSsVQ6ubDAVJpFkcG1xzcoHPgeZfnN+yKHhwHYusj4PLSPFO:PLSkuPwJn5EzZHVl+yKHKYuKC8O","tlshash":"61c17d4dfab977fac81d2952f894bfd2b63910a1b12044c1a1413d595191e1f783b89c","first_seen":"2026-06-29T15:11:12.684933Z","last_seen":"2026-07-23T14:19:33.768552Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/resource/svg/dark/trade.svg?2.0.1783172626134","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.076Z","timestamp":1784816341076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /resource/svg/dark/trade.svg?2.0.1783172626134 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08JJchtfyT6r7g%2BbZktSAfxCaWpRFNMf6NtYAsrd2FTPcckXMgCrZ2J0f%2FNJa%2BSfF7ypCDW3ylSPplbUeQ5mqHfKnyaQchUZugIdokSEQZnBGJjs%2FMx7H1OBl1u2E7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5153bb1d569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 1743\r\ncache-control: max-age=14400\r\netag: W/\"6a490dfe-2ed\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":749,"size_decoded":1149,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e65f84cc99faa0e52a9fee5be2fe113d","sha1":"a3b8d505228f1ecd82b940037c166fa6c2198863","sha256":"0c9fc997a29ca2b1f8f19c4e80a590eb34467f83f3f2363c8d38fc964bd56b23","sha512":"25d0060c6e43dbf35fa65d9df9c2744deb1a20fbb7b810e154ab9a8a8a90ab43b348c6df4d031dea50903bfc37e0f2e5266ff83afd853eb28c5a2eacddca7038","ssdeep":"","tlshash":"ea01bda89826801f80424bc1d3e82a89e03ef243e46201bcf7d011bb6b3490e69bc265","first_seen":"2026-03-25T16:01:48.389528Z","last_seen":"2026-07-23T14:19:33.769616Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/resource/svg/dark/home_active.svg?2.0.1783172626134","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.067Z","timestamp":1784816341067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /resource/svg/dark/home_active.svg?2.0.1783172626134 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5153bb1b569c-OSL\r\ncf-cache-status: HIT\r\nage: 1741\r\ncache-control: max-age=14400\r\netag: W/\"6a490dfe-464\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUa1FKrs09%2Bo9UabhpiZS1VSw53Wm3D%2Fz0Kdxkv2FFX1gEk6%2BQyAMbv5OaaC6Cau%2Fy8mSkeAjUTkbpT1T9g9RicV2TC38igqfOeZDFKS54DtbK4JxVPfs0ibeOjgnpk%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1124,"size_decoded":1370,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbd4cd5aa7f875bd431aadc29dd6bad4","sha1":"559815a313af721fb55e361a70e69d7a66daf8f0","sha256":"fc8aa250b2105e2254c0072a75a25cce71943f760a7e254a7b9a3a6e5efa8a5b","sha512":"7beb2c4d401c311452ed4b0833bfc6b614817437238f58ca809b38771fb3e6491a1d1dd0d8779dcb559862951e411d79ce12ba78c4e705e46d51ee077de39ee8","ssdeep":"","tlshash":"472120bb17068e7f40064f4c476867c823bca242f1a600c4cfd21a359d26bf7297cc81","first_seen":"2026-06-29T15:11:12.688393Z","last_seen":"2026-07-23T14:19:33.770524Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getAllSetting","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.093Z","timestamp":1784816341093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-f0e80a53.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.472Z","timestamp":1784816339472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-f0e80a53.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ba85569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-aae\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xv32IgrWqC0i6agQgJDks6dOEp39%2BlrEhM4qu0FS2K2c9%2FajErm1c09VlX5vg%2Fp87J0hGo2zXbi%2Ffw7Do2ICnLz0G1il8uueuDDyES0QwB0CnZ1rW3M9UeKQodIcslg%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2734,"size_decoded":1650,"mime_type":"text/css","magic":"ASCII text, with very long lines (2733)","md5":"990579c59eb68167a6db7a182e5298d2","sha1":"4aa39b39a3cb9c0c7fc3383b9c4bc5a2dc102014","sha256":"f0e80a5396d7b622783bb4b810a61f2337cd2e168d3d9c443ceefb07bb1ba01c","sha512":"d113023fecff0c2373cb57a09a2e5967b38f8635ea374e55ea4deeb369fa2502b6822fb626a4a2ab917438fb06080f1ce982fa0698d2fe2ab9ccb2529e4527ed","ssdeep":"","tlshash":"da51314dfaae12308c77cacffe554b4a90806e41e08a9cd5f55387260acfab3192131f","first_seen":"2026-07-23T06:19:51.112899Z","last_seen":"2026-07-23T14:19:33.771516Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=XAU","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.827Z","timestamp":1784816340827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=XAU HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/2-bf437e1d.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.048Z","timestamp":1784816341048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/2-bf437e1d.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9W8ni9%2FzLRYydVEjuktdK05h8e5LeaXIIhW3XHN3d5HVzIBTCdMaJlHaLz9a0CryRYDcntZAAkMcfTJA3oS5l6ZGP8pD1dBddC9OFJHBg3gSDg1Yn850ZnDG7P0qfbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1fb51538b14569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-3472f\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214831,"size_decoded":215591,"mime_type":"image/png","magic":"PNG image data, 464 x 442, 8-bit/color RGBA, non-interlaced","md5":"b1c3586979e7fb9f9794c0255c8a379d","sha1":"481f07bf29622e967904d02a41411e4288dd4f40","sha256":"bf437e1dc4c06324181d6ca2c32e5874e79bf44208a1b4ad4694b7f96c5e79e0","sha512":"deb32b7ec4f5de335affeb56ac4f697df30cdad9b77ec0fd2474a4c1671351c340023dbd661775563bc7ad8048f2b837ed6fe5ea64b9ee2ce3ae9033b97f8dd1","ssdeep":"6144:3MIsUoaxDI2jocHyCE81k1IhBodIuAsSH:3MIsxC02jOCFrzoFAsI","tlshash":"6f2422e72b981ff5647690b36149769bdab24180c90eb005d9b6d10eb011b9630fbeef","first_seen":"2026-06-29T15:11:12.66059Z","last_seen":"2026-07-23T14:19:33.772443Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/resource/svg/dark/assets.svg?2.0.1783172626134","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.078Z","timestamp":1784816341078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /resource/svg/dark/assets.svg?2.0.1783172626134 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbaQDO5bzodQvk0DShagfo%2BMURUzN1lkI01NcJH9Hited4DRTjq6iWEhX5xEJjEQ%2Fgw3wkrT%2FrioxzEPzs3CZkJtat1ZkY4fiwYWr28FmOSYNP00lFf%2FhlJw05%2Bsdvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5153bb1e569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 1743\r\ncache-control: max-age=14400\r\netag: W/\"6a490dfe-290\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656,"size_decoded":1147,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6953e6c03c282b7196aac44631dd747","sha1":"20e78130325fa6875a4501fca5e5adf3e2f48bc1","sha256":"6e90f192b3f0b71ef3488a15b09379493cedf6de0b602e9f436c683e257eae00","sha512":"6a1be0fb0b41f2d4eb85a336ee0dc2f5067fdcf8edb38e0f1a17953ad1c10b9f97a250cca7ef394343a9ad969d126958bbe561291a1c30a2873de041da0b39d1","ssdeep":"","tlshash":"f6f0d3f6d935802f12574750d6fcba84107ff283d191086cf79226728e75d5b553c248","first_seen":"2026-03-25T16:01:48.36293Z","last_seen":"2026-07-23T14:19:33.773491Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/SOL.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.035Z","timestamp":1784816341035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/SOL.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-bc6\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3014,"size_decoded":2693,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7c16e6781961865079f6eb504aa32a12","sha1":"b7caaccf310b6a07e9ee768c70f5115278674317","sha256":"41c045ba5614887e8b40bc60d5c0e319dd170a0c3ce43fa61e8e63ed35e0e4f6","sha512":"f5aa61c1e6612123f3a9828ce90e10d39c66e01416f2a121f3966848ba856352958bb6bf0518081cfa61cdc73bae1ec12fcf28dd1ee4865f760131a5b54bf58d","ssdeep":"","tlshash":"ab51f61d76246c70554aea466ee8458327bf5ac788c3a082fdd6da5300122bac81fcd6","first_seen":"2026-06-29T15:11:12.686063Z","last_seen":"2026-07-23T14:19:33.774149Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1545,"timings":{"blocked":-1,"dns":0,"connect":270,"send":0,"wait":738,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getCoinList","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.460Z","timestamp":1784816339460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":264,"send":0,"wait":264,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=USCL","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.842Z","timestamp":1784816340842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=USCL HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/LTC.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.030Z","timestamp":1784816341030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/LTC.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-1190\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4496,"size_decoded":4165,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"cc993c30e0f9b5623e2bfc164b9c4bc6","sha1":"3be1c164ca05d23ef7f0a328e8388bce10b83a9e","sha256":"a0d3f6d8194902e0f414bbeff841220a9e420025dd7eb068edd46b43f46a73d1","sha512":"ec842473f8487131c95e7a51c9b9343ad61c24ec4f331a0b40cbcad3a3a4ba32afb9dc8957c48b8ed90e86083285f54ef8aa24b23e63de56de6be5397cb30710","ssdeep":"96:27SZo7FhknmWpJwrSoBHoOHHykaM4MP3yGkCeSUqcwRKwmEhrFs+khhN0a:oSu7FhkngbBIOypci/CeSXcXwtpF5yNR","tlshash":"df915c04fc245d9b4a4efa0969faf10b236749d28601e811bcdace47dd703f2644c7ea","first_seen":"2026-06-29T15:11:12.673248Z","last_seen":"2026-07-23T14:19:33.774731Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":750,"receive":0,"ssl":532},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/BNB.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.033Z","timestamp":1784816341033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/BNB.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-e73\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3699,"size_decoded":3371,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6af75bb0a13f76ec617785d04a75e681","sha1":"140802963e1cc4209558fa58622f33698e8a6ce4","sha256":"2ec8752559110691faacdb70e3674b21fc69011d4c53deb4ab6a09b3bf96d13b","sha512":"94f9b5f9177c4fd29541c11e2d83cf6cf9734542d9334652b1eb3ec4d59e3ce0008a762bbedd107f7213bf5da9356a0dce82612f4f8bbe1067b0a0a38a6d7939","ssdeep":"","tlshash":"c4713c8de5601894424eeb89aedd70a317fb87e1a583b0447cddcd832cb01bce65d9e5","first_seen":"2026-06-29T15:11:12.67464Z","last_seen":"2026-07-23T14:19:33.775318Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1546,"timings":{"blocked":-1,"dns":0,"connect":520,"send":0,"wait":753,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/resource/svg/dark/quote.svg?2.0.1783172626134","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.075Z","timestamp":1784816341075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /resource/svg/dark/quote.svg?2.0.1783172626134 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZT6dqWyOOyn6r%2FLqf9%2BV4mr74uHW04PfZ8pLAclnMkHG9Yt3oB3GL0Jqh8rtZGq5Nerzy54hRja991ipA%2Bw0MIrpLmoDgiGqyrQeG9mFGFDb%2FXCFkjQUMl4nY%2Fy3BqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5153bb1c569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 1742\r\ncache-control: max-age=14400\r\netag: W/\"6a490dfe-3a0\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":1237,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60c143c637b119ce4f9372ccc173edbd","sha1":"f148bfb148a0be5e5715ff7165b3bf7b50fa7c5d","sha256":"5eeaeb2eb6adf5649f621bb60a426ea264d005529398dd1c8676af272a2818a3","sha512":"9aa6ab1f0b08eee85fcfc369c2e9a3175287331348805ee1b6bc365774ce345d61707a289a1f4ed1b394426c05380e4e134f1b61b43e5d7ebeeb930f625b80aa","ssdeep":"","tlshash":"25119cbb071641ba22815b419aec1b1d803af542f0b705dcf7d32e279c2b87720bc159","first_seen":"2026-03-25T16:01:48.392789Z","last_seen":"2026-07-23T14:19:33.776068Z","times_seen":17,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.089Z","timestamp":1784816341089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-7b837351.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.481Z","timestamp":1784816339481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-7b837351.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ca8e569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-46f8\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SaBLmH71BG%2BdIBdxSF0bLdDyqCT6g6cVLydz2J9gxTTf%2B12PQApQe7w99hTc%2FZSOtEO4Q1aLXylhUewZtkd1fAqE7jFckxj0o%2FA1meUoIuOCr7nE2YuPHXIJaeBYgs%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18168,"size_decoded":4507,"mime_type":"text/css","magic":"ASCII text, with very long lines (18167)","md5":"b18e7904c93a4327aecb7126468c0e92","sha1":"df1da1321f54a2de3c0ff9c90611f141f2db6902","sha256":"7b8373511357786d413c7ad2d80d60f1303f9905f19594063fee740b103562cb","sha512":"0f489f153ff468e8f11abb384f8530125b8e661b3d36ea098a02db80e5bd4c7c6e537628b39c3ba80a329a45d5d69aaaff1f0b0a146e39eea2979b7175cdd068","ssdeep":"96:BtF9GFyGp6ezOETj8XMp5mXUVM2tL0a5OxJoU+62rfJ7PI4O59oLm7l/KweDZIqL:BtSp6ePfpYvfJ2FI759oLm7l/KweDS0","tlshash":"6082872ab7b52234ac37d2d1fe885dcce509af12e193dd94ea17ed219cdb1db292014c","first_seen":"2026-06-29T15:11:12.666564Z","last_seen":"2026-07-23T14:19:33.787313Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/vendor-348cf0e1.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:58.847Z","timestamp":1784816338847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/vendor-348cf0e1.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:58 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5145ca58569c-OSL\r\ncf-cache-status: HIT\r\nage: 28786\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-d726e\"\r\nexpires: Thu, 23 Jul 2026 18:19:12 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSc%2FCegKIrjuXAFy5DsEkuGKSXu9VzlgtU6bbw9ez4GwaDg0Feh4ethLb4ac8mPmOxbOxEeRNXtmKz980q37M4XJzjI7YGwVaqTuJ92Yx971idskuvyS9d%2F4qc7pIfo%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881262,"size_decoded":299894,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"adf78437db266dad9d219a7ca154bcb2","sha1":"4751a690339ce8334071fc1de6adcf389b457423","sha256":"f479ad074d75a53b1d447d33e9224daea0b6cb3fc8652674a4d9b73ed13d9446","sha512":"6f8d735d41343382cb99672e6c04fa6bac1e2db0198c8d9f6ab2902754119086f9ed0c8b1231bb408218689fb325c21576def254a67fdca7f76216b94785ef68","ssdeep":"12288:CcFae4xeZMRVDwifmzbB9dw/Xbri8L1w672vI/+a8o2aqWl6yj4Ga2BD:CcFn4xLVUUmZ941w67viaqWl6yZa25","tlshash":"3d1529c57292f06147ab24e240bb0006f3396e59744e84a4f1add8db7d79d89a2b7f3c","first_seen":"2026-06-29T15:11:12.695981Z","last_seen":"2026-07-23T14:19:33.788295Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getAllSetting","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.458Z","timestamp":1784816339458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":267,"send":0,"wait":256,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-fb2ec18a.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.462Z","timestamp":1784816339462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-fb2ec18a.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149aa7e569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-4083\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYiidv0MoH7iVzFdnBmI95O775%2BNTDMhIPN9jKUKlpQHTepPxxN5mbQHlvyQHftvCRiRfSrc5ytjOut8jFAQzBsVLvuv2MmhZ7fOgDPDEQHezyXt1RwlrRvnc%2Fot8Fc%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16515,"size_decoded":5282,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (16514)","md5":"a15673940d1530a16a8ab87e1e071729","sha1":"acf8620e6f914c7e8a5b374e1c4073abdd616740","sha256":"0720d2f4fe846fee4df428ac7cb55a2cd4b1bf27ddd071c50c5a6a32be69fb45","sha512":"6c1153cd30e1cc93e02ba9aa88fdbc3c7da40c932575537e7fc045e4452f8948263bf5523e710131356487a50439bc7af832cf66f2e6de9848c59053f6a6f1c3","ssdeep":"384:+rZ+AcIJVHlfJg3HitQO64BPYJuBsXdd1rdImo/lSpJjk6ofcPUOSJMQCzUim2m6:+rdJVH1JgyQ4AJux/lSpsNOSJMQCzjLT","tlshash":"5a72b642f90a963de9b3709105d90001721a3fdda04ed8ebb1fd4d47a762eb4b705bba","first_seen":"2026-07-23T06:19:51.105846Z","last_seen":"2026-07-23T14:19:33.791682Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/filters-9f59856d.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.477Z","timestamp":1784816339477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/filters-9f59856d.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149ba8b569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-c94\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1%2BmJ39WSIDsurh%2F5NYlg7qMkYtLroBSoYVkGun5dHzG1DyxQTFCimb2Hb7VkkG5Ys0gJJ9mN0aWWBlFyleZI%2FDeRm6dTb6xRN35yB%2FxzS6lArjm9p4sm8pzXl6bvas%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3220,"size_decoded":2000,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3219)","md5":"8fd4e1351ad54826bc18675eb60cafcc","sha1":"a3477e637841d0d02695b2e3846067563d089dee","sha256":"8bb387178b2eefd9876cdd86b62cd7cb49809d595668a24098c5911ee7d97e37","sha512":"156f6aa39601f24f9b274d5244320d341c83f0b3bc413181d0c7fc9b60d7190c975fccc4d2622dcf4d4bb948f832f1858d74582d3b77bfca532277aee3b7c6cf","ssdeep":"","tlshash":"356137edfdd3b13796ea59f945284410b28e6f10786e094df54fd0425a33888e0bfb64","first_seen":"2026-07-23T06:19:51.078553Z","last_seen":"2026-07-23T14:19:33.793026Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/8-160141da.png","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.063Z","timestamp":1784816341063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/8-160141da.png HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNPm7gE8TY6qPJxv8ceJ33FkdxA11O3mFC17k83LNJvGYyIPuanLrZSmKrbm6C4G0LDKA0xuEdrN%2BfSKvEOUOZy3%2BecXrY2oRmsZGF5C8Fzar2ioBnRl8AeNu%2FoAJoE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1fb5153bb1a569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490e12-129d\"\r\nexpires: Sat, 22 Aug 2026 06:19:16 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4765,"size_decoded":5528,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"0eb2475ec7260491bbf3362c5a2f7d4e","sha1":"7234b83e9915cb1171a760221db7de59069bf0a1","sha256":"160141daf1116f42ead667eeb04fc4e4ae0b32f5b5909f17e83e8859e9a3ee13","sha512":"c473606c8afbfb9aceef513aa2305af073307e0dcf38490a6f6b80d67d1423e65546d3958da4a8e02dbc3992b5480b224a4615b65ddc662061b623bd298d3bad","ssdeep":"96:Pf2osNIWJ16qAFWdHKwTBrehBSbyy2OmJ3BzatYxqS7:P+tXqFWdHKQ86O3BZ7","tlshash":"0fa17df7ee498913a9751af762925abcb29f752305b05622f027216a3d249e000cee72","first_seen":"2026-06-29T15:11:12.679885Z","last_seen":"2026-07-23T14:19:33.793996Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=USSI","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.844Z","timestamp":1784816340844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=USSI HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/resource/fonts/DINOT-Medium.otf","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.994Z","timestamp":1784816340994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tknishop.top/assets/index-2cadaaa9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a1fb51533b07569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 834\r\ncache-control: max-age=14400\r\netag: \"6a490dfe-11d88\"\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcW40RNYQd%2B0DX6kr2B3JaJ%2FkBd3WEM0%2B0ex12Ew0TfK2RvnLLJepaiqHUmM8RA%2BMDzpDuJKtOYsnyWddvRHZFoJwxo3wbDsX5bYykZHHJE0NKf3fqnVSU1YPRUogtI%3D\"}]}\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":73856,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-23T14:41:15.088552Z","times_seen":1698,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/BTC.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.023Z","timestamp":1784816341023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/BTC.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-c7e\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3198,"size_decoded":2874,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"aaa768934b40c7f48ea7a2ca91b8c642","sha1":"71afaefc81f4595545c2a8f8c4cdd0b95118eb09","sha256":"7ef260e35e259feb2f702d5264e87a22fe8f38ecb6fa689f2d6283fa07ac4e91","sha512":"119e6701d86f7cd277d0bdffc4fe24925751062351b22643ef57cfd66e4c2f8386b4f01c7c29e181acaffaa3b6458a4c3a48f2cb428ab2ef4a42df0b3cbb9c4b","ssdeep":"","tlshash":"9d610a09eb1268525e4eeb486aed028bb72bcac4d340b445bdc8d852a8211b59179ed2","first_seen":"2026-06-29T15:11:12.683804Z","last_seen":"2026-07-23T14:19:33.806499Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1557,"timings":{"blocked":-1,"dns":4,"connect":515,"send":0,"wait":774,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/platform/dev/config.js?1784816339143","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.145Z","timestamp":1784816339145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /platform/dev/config.js?1784816339143 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyueD13pvNfzDkbtJN%2F%2FHpuejC5n7FUNZaeHOoKfEdGQtCyrKJ5oz0GS1OyzzLBbH2uofYez7UKDRGCVVR4jq9PG7iMBr4iPm6UZ0BKnUd8urdh9IeQpx0bWMQOIWz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5147aa68569c-OSL\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=43200\r\netag: W/\"6a490dfe-18a\"\r\nexpires: Fri, 24 Jul 2026 02:18:59 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":1041,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"945c4407e2ebb40991241bd54af50e8b","sha1":"c83ca8c3a55b8d2472227c14d99ca7f306aebb4c","sha256":"fe08fe2646cf28b611f22664d9224cf38fcacf1af20343b9042dcdeafea2a5da","sha512":"71f47c7555ff48524c751684074b8c6f2a99f9087e87af2371bb951533308003cd862bd31c47418d2ebe3f5940a0aae2fa40d473f7728ec5708b77ff0f5b4857","ssdeep":"","tlshash":"a6e02b663228c03455b48b2a6dfc0d17f65767324d9c051bb8b495091e79d5420b8892","first_seen":"2026-04-22T17:43:43.793988Z","last_seen":"2026-07-23T14:19:33.808334Z","times_seen":14,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.chorurkdoee.cc/ws/8b7b89fc-9331-4afb-b872-d280538d2150","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.439Z","timestamp":1784816339439,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"GET /ws/8b7b89fc-9331-4afb-b872-d280538d2150 HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tknishop.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: monvWmd7lKSMOYXi1vBvXw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Thu, 23 Jul 2026 14:19:01 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://tknishop.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: +TqP/NQbRQ1nEjWsHTvBp1Sk2ag=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":3210,"timings":{"blocked":-1,"dns":1039,"connect":1302,"send":0,"wait":601,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/index-4f4afda7.js","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.468Z","timestamp":1784816339468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/index-4f4afda7.js HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0kO9JOHOuoADRreZ2DJcpJzAlcsktHFtYPNGvW9Mce%2BZNGCyjTIWYX8Zx%2FDx80L1rTpRpFOVKu1PdsTe2dZafS7RFVsYA7ZkCV3kVrNPp84SdzIKuobLTTlTfrei94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149aa83569c-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-308\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":1261,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"82798a2fc7298522ac5984c2865c838c","sha1":"7fa14afb916bf5d532c2f45b0cbe549ff087baf0","sha256":"4148645dd50221049c0ccf2df751e40b51d6378bf78c401b476ec7781d792482","sha512":"3594273e23be72a75b552a4005321f3a368b6f24de4ee7efbf7bfe85d84f1d1d6b5b36cc3345e9a79c1e20a97fb336f14bbdee530f0624f51f8a33bc348a0e20","ssdeep":"","tlshash":"fc01f8f8fd1d8ebb0ea20a4001902601140a2fddfa1419f198867d6a2be5940dbce32d","first_seen":"2026-06-29T15:11:12.662053Z","last_seen":"2026-07-23T14:19:33.810178Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/assets/vendor-72ef657d.css","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.463Z","timestamp":1784816339463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1fb5149aa80569c-OSL\r\ncf-cache-status: HIT\r\nage: 28785\r\ncache-control: max-age=43200\r\netag: W/\"6a490e12-16997\"\r\nexpires: Thu, 23 Jul 2026 18:19:14 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZlDCWqnjqvK7QbchlvvaEH3Z8pBKlHt6maVsRQQyttRdcVWlivzui65abe%2Bo4WKPqQCziOHdZScxc%2BaRDHEhGka9f%2BnawmvCplz6G5jyo%2F%2BDM%2BDaWUUWd6k4nZcpmw%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":38783,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.063007Z","times_seen":329,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tknishop.top/platform/dev/logo_144.png?2.0.1783172626134","fqdn":"tknishop.top","domain":"tknishop.top","tld":"top"},"ip":{"addr":"172.67.211.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:18:59.827Z","timestamp":1784816339827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tknishop.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 16:25:24 GMT","end":"Fri, 02 Oct 2026 17:25:07 GMT"},"fingerprint":{"sha1":"EF:4D:B9:F6:F2:D3:A3:1A:B8:49:E6:E2:46:35:04:E5:72:89:E3:5A","sha256":"D8:31:E1:94:CC:64:D9:5C:2C:E5:69:86:90:D3:19:5C:E6:07:A5:D8:E0:84:13:BC:CC:BD:EE:74:DE:1B:7E:E3"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1783172626134 HTTP/1.1\r\nHost: tknishop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqmsEv8Od9kI%2FuxU63O%2Bj9h1oG%2FRFFB2mmCluShtatrHQcQhc2P4T8rI90XMBgtn%2BWwocQ2wAyE2%2Fb2Dii6E6zIJMIA4Nl%2BQkyaPsD8Qa5Z0xcxgloTpuYraDUSpk8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 23 Jul 2026 14:18:59 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a1fb514beaa7569c-OSL\r\ncf-cache-status: HIT\r\nage: 28784\r\ncache-control: max-age=2592000\r\netag: W/\"6a490dfe-b21\"\r\nexpires: Sat, 22 Aug 2026 06:19:15 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2849,"size_decoded":3620,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 144x96, components 3","md5":"18f4dc99730ab0192f1a361453f4ce19","sha1":"9f85660c4aa52d9e1d7d968095939219080fa43b","sha256":"e07901bdf4690353f08129dfebb3a9ef22fb47bd5d6fabd9aed8112322881311","sha512":"f4c8b14037d066b57f945ddffc463c10bf30fc4ae268b973cc2c90e3af6f5e951f01cafb7480db0d9d08bf8884bb9b9898a02f9328fda6e27139ea92f5b2e704","ssdeep":"","tlshash":"5451b6a7f36d0a92e465db71ff88eb51e3e82b11b1d633c6a50182f69b049c1ac6c509","first_seen":"2026-06-29T15:11:12.691421Z","last_seen":"2026-07-23T14:19:33.813128Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.091Z","timestamp":1784816341091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.chorurkdoee.cc/api/common/getMt5Amount?coin=XAU","fqdn":"api.chorurkdoee.cc","domain":"chorurkdoee.cc","tld":"cc"},"ip":{"addr":"137.220.154.220","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:00.824Z","timestamp":1784816340824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.citrueswave.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:45:46 GMT","end":"Mon, 19 Oct 2026 04:45:45 GMT"},"fingerprint":{"sha1":"04:11:AC:85:4C:55:6C:51:F7:DE:68:CD:9D:E3:66:4C:08:32:B8:30","sha256":"6D:EF:A5:3E:A9:00:E7:E2:4A:3D:33:68:20:9A:3E:AF:CB:87:02:90:CA:80:90:97:93:B3:CE:1F:0F:A8:19:E2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=XAU HTTP/1.1\r\nHost: api.chorurkdoee.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://tknishop.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tknishop.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":461,"mime_type":"application/json","magic":"JSON text data","md5":"854c84b69feef6c203ad233f0ff33d74","sha1":"d22416c153ccdd7ed97890e6d80369b3c70955da","sha256":"a7b1b1fcfabf222df44b345bae715c8de17fd56110b2b32927b79538c0073a6d","sha512":"17a47ce1dbeecd1592c6f04babbbaeb0dac8d779581037fd81774c06e19eff00b26dd02511ba59eff35b855758048608d586c6252d15071d52c7133bf3c70dd6","ssdeep":"","tlshash":"6f9002962c188242ac9304a5950622041028316427259648cc59912580881726040858","first_seen":"2026-07-23T14:19:33.817694Z","last_seen":"2026-07-23T14:19:33.817694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.waw856.co/images/currency/echo-res/TRX.png?2.0.1783172626134","fqdn":"api.waw856.co","domain":"waw856.co","tld":"co"},"ip":{"addr":"137.220.153.16","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tknishop.top/","date":"2026-07-23T14:19:01.040Z","timestamp":1784816341040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.waw856.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 17:12:17 GMT","end":"Thu, 10 Sep 2026 17:12:16 GMT"},"fingerprint":{"sha1":"73:AA:74:08:49:C7:5A:4A:03:87:36:43:AF:CA:58:85:78:1F:57:68","sha256":"4D:2C:75:3D:BE:5A:CC:76:10:F8:CF:14:C0:D6:DF:1C:1A:1F:EC:F3:A0:37:CA:A2:9D:9B:97:3E:11:2C:0A:D4"}}},"request":{"raw":"GET /images/currency/echo-res/TRX.png?2.0.1783172626134 HTTP/1.1\r\nHost: api.waw856.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Dec 2024 16:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676adb91-f65\"\r\nexpires: Sat, 22 Aug 2026 14:19:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3941,"size_decoded":3635,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"40d6819ded80b7c1e31256a5a8952adb","sha1":"7d18e1c5fe0bc19dff77f25c4b0a466375ad2c9d","sha256":"9c85d718e6e971989685e9a1993164a3b96eeabab53f29267596393148314a70","sha512":"11d9d728cc7f848bd8a7ecaae41ca3a5d99bad5ce2ea2bf9dbdfdea4f5d096fcb2d7e677e10bc3ba51b5f4cb979183de5f740def2b496562b2001ec17a924a4a","ssdeep":"","tlshash":"1a810b04d4523994a65efac079f9618307ab5ed014c6a401becade5758712f5e12e9c3","first_seen":"2026-06-29T15:11:12.667837Z","last_seen":"2026-07-23T14:19:33.822446Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1495,"timings":{"blocked":721,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"api.waw856.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
