{"report_id":"ba54fcca-0b07-43be-bf05-b5ff8e8b5152","version":6,"status":"done","tags":["suspicious"],"date":"2026-04-04T20:49:14Z","url":{"schema":"http","addr":"kkra76.cc","fqdn":"kkra76.cc","domain":"kkra76.cc","tld":"cc"},"ip":{"addr":"172.67.153.83","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"captcha.zlon6.at/","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"title":"Captcha","dom":{"size":21650,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14501)","md5":"f73ffc4e5df4edadd7cecd385013c2e4","sha1":"e2e5ce4caa95ad853b18ee72d1cc6ba3c096fc0d","sha256":"85dfbaa4ac03e22ea22adf61351faa11046bda2bb7919a221d77a564bbbe8b23","sha512":"ae98d3678ed65349b5aefbd2d978a5bfe2f466002b2a1b528157c7f9188fe75ee58a264e783a3111952abc2420313d1dbe03ca789b6cfc8d366f86ac4937a93c","ssdeep":"384:C4nK1SDFbN2x6/QJ/R1nluvWIBJJYOuz17EOtzTPSLivFx:kUFR2J1ovLZ2vRTPSLivFx","tlshash":"43a2bf693a93e810ad139024ab6fa7123d1c11270b42c4643f8e5ab88fd5e614bb3fdc","dom_hash":"domhashc0c2c4d8bc62b90932c97d5064b7708e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kkra76.cc","fqdn":"kkra76.cc","domain":"kkra76.cc","tld":"cc"},"ip":{"addr":"172.67.153.83","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T20:49:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"zlon6.at","ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-04T12:19:28.722852Z","last_seen":"2026-04-04T12:19:28.722852Z","alert_count":4,"request_count":10,"received_data":80899,"sent_data":6365,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"captcha.zlon6.at","ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-04T12:19:28.720818Z","last_seen":"2026-04-04T12:19:28.720818Z","alert_count":0,"request_count":6,"received_data":64797,"sent_data":5029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":68922,"sent_data":1115,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kkra76.cc","ip":{"addr":"104.21.72.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-02","domain_rank":0,"first_seen":"2026-04-04T20:49:14.79053Z","last_seen":"2026-04-04T20:49:14.79053Z","alert_count":0,"request_count":1,"received_data":6331,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"captcha.zlon6.at/","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac996a59d805b0d58d47da1ab6f7dd4d","sha1":"461995e82738a3f142a9a63093b08577085ab3ed","sha256":"9c689e4ba08ec9b0dcb9d926e334a9ed1f5d77522dc70e65ed7edece79e761e3","sha512":"c9feed2505d342fd5af4b18d41b29739d378f936f426122bdf50481fae4bf7e6b91bb863f10ce79c26a9be569b188b52e51823b510893e9b9d203f069bb60596","ssdeep":"","tlshash":"ec7000c28b80e08280302200800802388228e0008a20aa00022c0c222080033a200200","size":24,"data":"","first_seen":"2024-10-05T07:52:52Z","last_seen":"2026-04-24T08:53:24.275036Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b82a242fbc188e9c6a27e942b4d01ce9","sha1":"dcb5c9afc619718035ed48764918a23997ee04fc","sha256":"babda690dea687a5e5beafd08f0a448a8421b71eec1ac4a64562884f8b919c4e","sha512":"86c62eeee5ed633cdd65dba2200bb074773a39d0fecb1e023b9e552ebb1db297d9ecb8b1e1049aa30d2c5d1b775c6aa18b3e9d3f400d61c77dc2f0b4e450882b","ssdeep":"","tlshash":"2c51511f6ab63cb59663b0298b7fd2013435200f1c87ea017e9e1a54cf26d3711a2bf4","size":2565,"data":"","first_seen":"2026-03-21T04:29:53.627736Z","last_seen":"2026-04-24T08:53:24.279439Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/?from_host=kkra76.cc","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"781be7f4312cd6d7662a8365375c1e94","sha1":"3ac9bd9ef2defc435b2bb6e621607958322e8388","sha256":"a6329b7bf06aaa8f76998e82eae93fe82c3ef270e9296ec141f42e77d2210255","sha512":"791940852b75ce17eac7666da52a9437c27aba4c2d0e83b8b2904fe9a73ea591564b3071966e3bb36bb227023ec93622ed1d4b822c550b6ab616b0bd8b7eddcd","ssdeep":"","tlshash":"5ae0ab6332f444240eead92210bb6b4eac36b54e9d8ae8910c2c08b40a20f64203fcc8","size":421,"data":"","first_seen":"2026-04-04T20:49:18.652473Z","last_seen":"2026-04-04T20:49:18.652473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1edc37c8e3ac768dd33e2d4cb42cafe","sha1":"18a8b4436ac3a7c43c4e0a4b0447fa0a0c4326f1","sha256":"5e65b7779aa16aca85d3187a963ac1ecad9ce623c7df36c7fb315b00fcb2c6a9","sha512":"02b5bc7079232b511de90c8d5ac447721b96a1472138cf0e9de274ba3d895b52e4e781a05812ce8f32a30a3822c9240cc7fde176731d9a04a76cf7a3ac352e36","ssdeep":"","tlshash":"899002a359b1509b87265a14524671122b260971870e5717155a0a718574744e941b55","size":57,"data":"","first_seen":"2025-03-07T11:01:59.145819Z","last_seen":"2026-04-24T08:53:24.276772Z","times_seen":673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5395242a0bfb4fd0959fe2d970527657","sha1":"37b508997b5cfb014d544f49c1118c9efe1eb488","sha256":"9075900ad1e7f61a99bd147150afec571bd67ecbe842c694d338eb7c7f3279b3","sha512":"c3195da87f6da9ed0cc393075d8a4353176d13034b9d7774c90a80504d547ee6cb3f5ea3ed8ee522f8610242fc751df25dafd9e92cf70f9ccca19ede943ee58a","ssdeep":"","tlshash":"8090024585867151d432257441ad50a0416854016c1dec12210c9c210d4032b5d44291","size":53,"data":"","first_seen":"2025-03-07T11:01:59.148941Z","last_seen":"2026-04-24T08:53:24.278127Z","times_seen":826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/js/connect.min.js?2","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","size":11274,"data":"","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-04-24T08:53:24.263464Z","times_seen":881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/js/connect.min.js?2","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","size":11274,"data":"","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-04-24T08:53:24.263464Z","times_seen":881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://captcha.zlon6.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:21:25 GMT\r\nexpires: Fri, 02 Apr 2027 08:21:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nage: 217651\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-04-26T11:00:07.590659Z","times_seen":8256,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":149,"dns":1,"connect":20,"send":0,"wait":9,"receive":2,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkra76.cc/","fqdn":"kkra76.cc","domain":"kkra76.cc","tld":"cc"},"ip":{"addr":"104.21.72.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:53.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkra76.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 16:34:54 GMT","end":"Mon, 22 Jun 2026 17:32:19 GMT"},"fingerprint":{"sha1":"AD:B6:ED:92:50:58:C5:45:AE:58:55:6D:7D:AF:90:D9:AC:B9:41:9F","sha256":"B0:69:89:60:71:86:6E:E7:42:45:74:20:DC:16:44:D5:12:80:27:2C:6E:26:90:8D:2B:B9:4F:82:22:2F:22:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kkra76.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 04 Apr 2026 20:48:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://zlon6.at?from_host=kkra76.cc\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex\r\nset-cookie: go=1; expires=Sat, 04 Apr 2026 20:58:53 GMT; Max-Age=600; path=/\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHFr6O4Z8E1LEHaAUAV2c7hdBZQRc6mcFwgdS8k8rDQklZIrhhP4pG69YPrt%2BnXQp8wW1GCbDURFGqZh%2BWzjH9CoX2V24y2lztt8IEAdC%2BpOASxNCLjrWT6DWRQ%3D\"}]}\r\ncf-ray: 9e732d2bd979b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":57,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/?from_host=kkra76.cc","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:53.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /?from_host=kkra76.cc HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Sat, 04 Apr 2026 20:48:53 GMT\r\npriority: u=1,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BL%2FzHmBAE3%2FlE%2Bc%2Fsw6Y5PJVNAUcI50FyHTfcKY%2BGWnIITG2Kx2HfmNwu0Xa90oWXmDusA8AELdeGmoxNOpOW%2B5KSo6qNYlGlssDY6w4f3nxmayUGvTEL4qUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e732d2d985956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5530), with no line terminators","md5":"10a6431b236e5e3b71dd0fd5b3fb7371","sha1":"2a702a203a219f2b7ddcb7104b0bc433280de0c7","sha256":"4137bff62841c7dd5fa943af494ab5a4c9db1731a91d646eb536b606ea6969ef","sha512":"519d4e56250743da8d35e8114f636074b709a53d099516665137cd054c2d55a6ff437bee757bfcfe30ae6a3cc978f2ea68cd447b9805acce7a94218444fe55e5","ssdeep":"96:hybXZSIO/CebOV/EQnRGJkuY6NIlVj5P888ANgDPQ+:h+O/CebwsQRGJkuY1LjvWV","tlshash":"a3b1c9376e24300e1627cbeeb5e5f7892070c108c28391a5fd9b5b558fc66a76933b98","first_seen":"2026-04-04T20:49:18.63845Z","last_seen":"2026-04-04T20:49:18.63845Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"zlon6.at/?from_host=kkra76.cc","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:55.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /?from_host=kkra76.cc HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zlon6.at/?from_host=kkra76.cc\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FUNiJrhYox9OpxBoLvzpqu8Wo1p4z2sxrLGD6Q97t0rX1GM6GARN%2FAZ56CPI8CnxV7W8avrVKmVVHG1kHfQlQvziwj3iHPlIuUJ27HlE7Hur376h1fwEgJc3A%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\nlocation: /\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d3a190656ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: http_refererq2=https%3A%2F%2Fkkra76.cc; expires=Sat, 04 Apr 2026 21:48:55 GMT; Max-Age=3600; path=/; domain=.zlon6.at\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"zlon6.at/","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:55.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; tor_scheme_id=1775402286; tor_port=9224; session_id=45dfd1cd2b75f84b9c2a3dee8de948a5; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; connecting_hash=e9f595b88db2d417a98405d329aa76a8; onion_server_id=7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGplzlLDLC9f%2BYfiPLXiYbVjMq00Qftl2bzJkftlgxxaIb3OCQ8bvfxwiWLNoResD%2FQClcDQcWfGHimVVOR6l%2BgaYMQwOwIZAO5Y7mcIGaQGWbhfO14oLfuzug%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\nlocation: /\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d3bd91956ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: proxy_cf_session_id=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon6.at\nsession_temp_active=1; expires=Sat, 04 Apr 2026 22:18:55 GMT; Max-Age=5400; path=/; domain=.zlon6.at\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21732,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:55.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; session_temp_active=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDXw%2BzCkbW3E4iybT%2BO%2FBnqgvCJM2FNHp6hmiSRIynBsCLvujDCqO83Lcot9Jz4ib%2FqEGBhSrvnexSE0xDtZXBW0nqC1xqesLBT3rmj%2Bq%2Fs6FDgAbChv6%2BIZqD9UUb8PSbbv\"}]}\r\npriority: u=1,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\nlocation: /\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d3c691f56ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: tor_scheme_id=1776162568; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\ntor_port=9398; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\nsession_id=36ceeb870311c82ccc4185dab54442a3; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\nonion_server_id=8; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\nrefresh_page_error_count=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon6.at\nproxy_cf_session_id=1495912; expires=Sat, 04 Apr 2026 22:18:55 GMT; Max-Age=5400; path=/; domain=.zlon6.at\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21732,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/modules/onion_servers/take_server.php","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /modules/onion_servers/take_server.php HTTP/1.1\r\nHost: captcha.zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon6.at/\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; session_temp_active=1; tor_scheme_id=1776162568; tor_port=9398; session_id=36ceeb870311c82ccc4185dab54442a3; onion_server_id=8; proxy_cf_session_id=1495912; remote_route=3; remote_server_id=csrv_14\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Sat, 04 Apr 2026 20:48:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9e732d41394d56ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYWCxCJZd9ffQ9SxKRhwmRP8XzZ198mWKohZTxPbDcTp5n1ldn88sXxpMT%2B8RMKnDwGk4omwXSBk%2Bmwu%2BRbUG1BuwkLJJ98n8YzTlS4K5rkw52gjwojA7uExWHWtLWKEPFFs\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/?from_host=kkra76.cc","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:53.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /?from_host=kkra76.cc HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 04 Apr 2026 20:48:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOdoPqxgBD2wSdwcbLsfWwirUO3KrmXTZK26vVe9CYeQ4j7CW502%2FLexLARB%2BVgV9LuDFeY0sakHLTcXIRcSXVeDrhW6FB%2BDVRMKliHcBGndr29c5tjskGclZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e732d2c7d212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5530), with no line terminators","md5":"172323fb25c643dac32035044ec1ce40","sha1":"e7a9792b723a310da81db7967d887594c5107844","sha256":"9845d372a19701d8224691d838cc4cf2f38f8d732aa07dd831966a15dc278225","sha512":"7ec21c415761c194b1659f86eda902b317494189ac8c0ace503349a59450c69e66444c5e21be8a5d73206c35dc0e9380b5f37077ef8274eea55b8d4625ce0c6b","ssdeep":"96:hybXZSIO/CebOV/EQnRGJkuY6NIlVj5P888A/DPQ+:h+O/CebwsQRGJkuY1LjpV","tlshash":"ecb1d9376e24300e1627cbeeb5e4f7892070c108c28391a5fd9b5b558fc76a76933b98","first_seen":"2026-04-04T20:49:18.640906Z","last_seen":"2026-04-04T20:49:18.640906Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":29,"dns":11,"connect":1,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"zlon6.at/modules/onion_servers/take_server.php","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zlon6.at/","date":"2026-04-04T20:48:55.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /modules/onion_servers/take_server.php HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; tor_scheme_id=1775402286; tor_port=9224; session_id=45dfd1cd2b75f84b9c2a3dee8de948a5; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; connecting_hash=e9f595b88db2d417a98405d329aa76a8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9e732d3b791556ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: onion_server_id=7; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnhs0UkChkZYsxZD5P63isd1Ak6RAOdTfig3Rm1H0%2BrErsV68AedeIgJx%2Fr8FjOdh%2FMjScHBdCpIi2WV41DC56GoscNW%2BEDZcd1hCgayNZxZEjtI5rpXndmNNw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:55.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zlon6.at/?from_host=kkra76.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\ncf-ray: 9e732d3a890d56ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: tor_scheme_id=1775402286; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\ntor_port=9224; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\nsession_id=45dfd1cd2b75f84b9c2a3dee8de948a5; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\nsession_id_e=1d4c5c365614e560c2bb1cd323d51dc8; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/; domain=.zlon6.at\nconnecting_hash_lite_version=1775335735; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/; domain=.zlon6.at\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3k1oLFWppq78cYfiJa3c%2FaB%2BVP7VMcQMvNvAotg%2Fa6icN6u3sD22C2nDSsL3zSCdR0zncSl6b25EH14LBnnrGj55iVt1X8vU6%2FOZUzepUpoGPPApbH1fjbjF6g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"f6bc1fbac187822c5fe2e78ff4eb1ffd","sha1":"14498236bffd87f23d5d20ddddcb677c975f1789","sha256":"70eccad3b537c57655589562267d680322d859e3551fd47ce1bcfa3f64bc4093","sha512":"a66509c243bb924b3fadde883ea43e7f882d1fe5d32e0c62544d7189c87c720a92aa308d6442f39eadbd4a8783782ad511f90840c51614af7930c1689868685e","ssdeep":"","tlshash":"06117a129c83cc6482728761fce6f51ce706e19387888e49b1c9183bb9a1bc489633dd","first_seen":"2026-04-04T20:49:18.642855Z","last_seen":"2026-04-04T20:49:18.642855Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/js/connect.min.js?2","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zlon6.at/","date":"2026-04-04T20:48:55.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /js/connect.min.js?2 HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zlon6.at/\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; tor_scheme_id=1775402286; tor_port=9224; session_id=45dfd1cd2b75f84b9c2a3dee8de948a5; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2923\r\npriority: u=2,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d3b091056ba-OSL\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"2c0a-648ec1d15a121-gzip\"\r\nlast-modified: Wed, 21 Jan 2026 20:53:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o16eruHIW8rMi9nLaFCqTyryC6dxtdwlNglfUGF4AqlKI1mQD7hrWK4qt1kq4eJYnIWTFQjP%2FX508X80pvtGuqlPQ6RNPqiW5b397KE0SX3G5ptsynZRTTXYGg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11274), with no line terminators","md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-04-24T08:53:24.263464Z","times_seen":881,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:55.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; session_temp_active=1; tor_scheme_id=1776162568; tor_port=9398; session_id=36ceeb870311c82ccc4185dab54442a3; onion_server_id=8; proxy_cf_session_id=1495912\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Sat, 04 Apr 2026 20:48:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\ncf-ray: 9e732d3d992856ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: onion_server_id=8; expires=Sun, 04 Apr 2027 20:48:55 GMT; Max-Age=31536000; path=/\nremote_route=3; path=/\nremote_server_id=csrv_14; path=/; domain=.zlon6.at\nremote_user_id=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon6.at\nrefresh_page_error_count=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon6.at\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTy4HR6Pb7RK3jVRb1%2BhsAPcOdCRKDvUKZz5kQjiRnfAaCCaWwDEXrt08RiAzT4i4XZHbWLU4hq0gYuZimm4PLBkMZto466SRVFhjxTnBlRtY53llfVOg4EumqpBLd%2FNvv6w\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21732,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14502), with CRLF, LF line terminators","md5":"7934c82710e7659759418ac40ceba043","sha1":"79e928f1d192b537bcfcefee5963da461eb5d2df","sha256":"d10212f2313078039d556ede61d62f2415469f026361903b59eef7bf25f6cfca","sha512":"67a6ee4ed783245bc82dc2f1cf8e69a26b2b429cf51c12bbf00524e4486cb63aacd2c5b3c8837844a46c9257b7bcafc98ca9225a9c245c053cf15d06fb739db5","ssdeep":"384:8FnK1SDFbN2x6/QJ/R1nluvWIBJJYOuz17EOtzT489lqZFc:lUFR2J1ovLZ2vRT489lqZFc","tlshash":"e3a2bf693a43e4109d239124bb6ba716bd1d122b0742c1643f9e5ab48ff5e504bb3fdc","first_seen":"2026-04-04T20:49:18.64594Z","last_seen":"2026-04-04T20:49:18.64594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/css/normalize.css","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: captcha.zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon6.at/\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; session_temp_active=1; tor_scheme_id=1776162568; tor_port=9398; session_id=36ceeb870311c82ccc4185dab54442a3; onion_server_id=8; proxy_cf_session_id=1495912; remote_route=3; remote_server_id=csrv_14\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1369\r\npriority: u=2,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:56 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d40794556ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2496\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"116d-648ec19fb4db8-gzip\"\r\nlast-modified: Wed, 21 Jan 2026 20:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrEcQ4OvbvYTpEUnJtPlluK79H4REDDOb%2FUq1lPFfW7GMbfiIzWRVsqO1OBdJehJLc79dfxgy87AEQ9HbUcAAfM7ZGSQzvJj8McnmijV0gEiRX7SFSVnmJurFRAGaR3tN4nJ\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aab74d6ca10a0902b9fac0e304c4be13","sha1":"7cc28584e1cd4acf258f32322b198faa19e2c47c","sha256":"6b1e238b3810eef313f24f098db4d880175b3ed1168f0c9faaaff9b53089c2fa","sha512":"8908ebef958dec57ec62f0841a1631bfa992ce53e13a55fe00686f1c3ecabedfb662d50d5e567c69c03b0470de149c2bddeaa1a9f9903cfce4bdccfc5ffe1d27","ssdeep":"48:z2Gaml89fIcJq7e/BQLQ1nrnccRjXdmnm/IZvJzXsacPaQfk:KM89fI6z/tTnWHO1c","tlshash":"549151651b604f11522b4e38339beb1533188233895d38ececa199edcf8675bd6d17ca","first_seen":"2023-04-18T10:14:13Z","last_seen":"2026-04-25T14:21:35.404059Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://captcha.zlon6.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 217384\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-26T11:05:01.29083Z","times_seen":155451,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":95,"dns":0,"connect":7,"send":0,"wait":9,"receive":12,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/favicon.ico","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon6.at/\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; session_temp_active=1; tor_scheme_id=1776162568; tor_port=9398; session_id=36ceeb870311c82ccc4185dab54442a3; onion_server_id=8; proxy_cf_session_id=1495912; remote_route=3; remote_server_id=csrv_14\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0FUpq3b2aDC5nhh%2FfrWTCmQNYMZJtiGh29Ak0KDVbeHcA4YebDwcl9I3ZeCTv17%2BH3sUuchP%2BFudQgvifECx5LpPoduPLyuTED%2FDjs0RQ3M3WGrwuOkxcgmord2hArhUQaK\"}]}\r\ncontent-encoding: br\r\ndate: Sat, 04 Apr 2026 20:48:56 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\netag: W/\"256-648ec182ae724\"\r\ncf-ray: 9e732d42695256ba-OSL\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 21 Jan 2026 20:51:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-04-26T09:42:20.297365Z","times_seen":3488,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"zlon6.at/?from_host=kkra76.cc","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"104.21.14.72","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:53.348Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?from_host=kkra76.cc HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 04 Apr 2026 20:48:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://zlon6.at/?from_host=kkra76.cc\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBWN%2BlBlGf0EDn2FZo%2BEJNVnUL2eldg%2BYqZbnB%2BkkdrsdtJoPYFo9QWaUdhGS3rIJLJ3OKBULl1leri5eDWfNWtsvAEDCMcqPdKAg8pbqdxQiV%2B7JYLxJYEmwg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e732d2d6b825685-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"zlon6.at/favicon.ico","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zlon6.at/?from_host=kkra76.cc","date":"2026-04-04T20:48:53.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zlon6.at/?from_host=kkra76.cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhRMklDCoHYi%2B6X%2FPjZPjhLk7O4Z0lIvxhKJFquw9HFC4hrSHnzNAbQ2hA5ZI4X5ICqB5PbETNH4iE%2F5Ci0fDpdCQyuavnFgxf%2BWsqhf3bIAk9qurLDoLtZvWg%3D%3D\"}]}\r\ncontent-encoding: br\r\ndate: Sat, 04 Apr 2026 20:48:53 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\netag: W/\"256-648ec182ae724\"\r\ncf-ray: 9e732d2e485d56ba-OSL\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 21 Jan 2026 20:51:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-04-26T09:42:20.297365Z","times_seen":3488,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon6.at/","fqdn":"zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:48:55.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; tor_scheme_id=1775402286; tor_port=9224; session_id=45dfd1cd2b75f84b9c2a3dee8de948a5; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; connecting_hash=e9f595b88db2d417a98405d329aa76a8; onion_server_id=7; session_temp_active=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fieuhs9Cpi3UH2Wc%2FLxWMzgKG5O9pA9yIEAcewd32dHVc%2Fnlb1I7DX7ZSLOlkGTDSGCVZg1UvMahIEECLC872ks%2FTLS%2BieJZcU0ypPxhO3ky14sORl%2FpK1jODA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:55 GMT\r\nlocation: https://captcha.zlon6.at\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d3c191d56ba-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21732,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon6.at/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 20:48:56 GMT\r\ndate: Sat, 04 Apr 2026 20:48:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1be305145d51ecbeb52ba67f2208dea9","sha1":"6f97fc00e9d6771004cb17d53c7ff7d62011e78e","sha256":"5fb68a19bfedc1331144c73515b5cc021af26ac8605c62e73a31771a0e19ee62","sha512":"b3a73238231bbeeaf01907f0e3a78d4221d24b50de71345c66a6d6a4ff6afb5fd8d88b242a57ba35d37f0466edc6d3a19c7e02dfd4563d2ee565ca2cc06182c6","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:8KYXuM1+4","tlshash":"dd227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:25:11.707221Z","last_seen":"2026-04-26T09:42:20.302699Z","times_seen":3510,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":57,"dns":1,"connect":7,"send":0,"wait":25,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon6.at/js/connect.min.js?2","fqdn":"captcha.zlon6.at","domain":"zlon6.at","tld":"at"},"ip":{"addr":"172.67.158.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.zlon6.at/","date":"2026-04-04T20:48:56.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon6.at","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 18:07:11 GMT","end":"Thu, 02 Jul 2026 18:07:10 GMT"},"fingerprint":{"sha1":"F1:B6:6A:35:D8:D2:A3:CE:2D:46:E2:A4:22:C7:54:C7:C3:8C:20:40","sha256":"2E:74:CB:0B:FB:1B:AC:E7:B5:DE:C3:6D:7B:E8:3B:D8:E6:43:56:B4:E6:02:F8:88:D3:A8:97:81:65:07:A7:AF"}}},"request":{"raw":"GET /js/connect.min.js?2 HTTP/1.1\r\nHost: captcha.zlon6.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon6.at/\r\nCookie: __cf_turnstile_clearance=1775335733:JTmra16cSYXkozpUJwBQNgDuepAiCwen27qbuUsYUHk=; http_refererq2=https%3A%2F%2Fkkra76.cc; session_id_e=1d4c5c365614e560c2bb1cd323d51dc8; connecting_hash_lite_version=1775335735; session_temp_active=1; tor_scheme_id=1776162568; tor_port=9398; session_id=36ceeb870311c82ccc4185dab54442a3; onion_server_id=8; proxy_cf_session_id=1495912; remote_route=3; remote_server_id=csrv_14\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2923\r\npriority: u=3,i=?0\r\ndate: Sat, 04 Apr 2026 20:48:56 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e732d40794756ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2496\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"2c0a-648ec1d15a121-gzip\"\r\nlast-modified: Wed, 21 Jan 2026 20:53:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWX3vlYAfvzTFnVk6tvFi9asvq%2B%2FrwKsRQMDqyZwy96SeUwX7%2FtRCvm0HZK7QzMMr1VW85j0vWjnORVxxRYacEwa%2BC%2FMA0e7dvwJXx1u%2Bt3XaXdNqBgi51FopC8P5meHZR3J\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11274), with no line terminators","md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-04-24T08:53:24.263464Z","times_seen":881,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}