{"report_id":"ce0ad990-2932-4805-b925-5ef56280ff97","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-04-10T14:33:47Z","url":{"schema":"https","addr":"kora-show.com","fqdn":"kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"172.67.211.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"title":"Just a moment...","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"e5b9cf5a0d8ad558eb04836dfb163236","sha1":"28b1741deb127871042910a2c3793ecbd7dd4f69","sha256":"b588fa99c3e12cce70b21a7dbc42d711b2f391cfb5678037d25c7a31e02c2718","sha512":"2ab54e9f2f62d45f7ed0a4981916877586530414a02a1f25315a13ee8172994a37f3bfa7f90200e61ec7bc923c6d6f1963cc0e1d19dc78429418fcb2af0eb5b1","ssdeep":"","tlshash":"a8e026e91d7ac83565f8028a20f1f3dc162061a0bb51e74442dad83bae20fe38c92d8c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-04-10T14:33:55.494079Z","last_seen":"2026-04-10T14:33:55.494079Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kora-show.com","fqdn":"kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"172.67.211.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:33:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"b7510.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"b7510.com","ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-21","domain_rank":0,"first_seen":"2025-06-19T09:08:24.947983Z","last_seen":"2026-04-03T13:29:54.813711Z","alert_count":2,"request_count":2,"received_data":1667,"sent_data":1249,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rpc-mainnet.matic.quiknode.pro","ip":{"addr":"132.145.155.63","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":2989773,"first_seen":"2021-05-19T17:40:41Z","last_seen":"2026-04-03T16:55:53.714754Z","alert_count":0,"request_count":2,"received_data":1033,"sent_data":1058,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-04-08T17:11:07.803757Z","alert_count":0,"request_count":2,"received_data":1708,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.yalla-shoot4.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-05","domain_rank":0,"first_seen":"2025-09-03T01:40:53.530981Z","last_seen":"2025-11-25T01:14:39.622276Z","alert_count":0,"request_count":22,"received_data":291519,"sent_data":10843,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":3,"received_data":205930,"sent_data":1470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gekeebsirs.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-13","domain_rank":240705,"first_seen":"2024-08-13T14:34:54Z","last_seen":"2026-04-09T19:32:42.470197Z","alert_count":0,"request_count":2,"received_data":217781,"sent_data":833,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":2,"received_data":931386,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-05T23:05:20.049371Z","alert_count":0,"request_count":2,"received_data":175036,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-05T22:38:33.735903Z","alert_count":0,"request_count":1,"received_data":4653,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.kora-show.com","ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-23","domain_rank":0,"first_seen":"2026-04-10T14:33:49.832041Z","last_seen":"2026-04-10T14:33:49.832041Z","alert_count":1,"request_count":7,"received_data":251649,"sent_data":3630,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":4,"received_data":129016,"sent_data":2154,"comment":"","tags":null,"fingerprints":null},{"fqdn":"clnsdns.beer","ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":8,"received_data":99706,"sent_data":4157,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"t2.gstatic.com","ip":{"addr":"192.178.25.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-07T00:09:56Z","last_seen":"2026-04-09T11:09:51.51258Z","alert_count":0,"request_count":1,"received_data":5038,"sent_data":528,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kora-show.com","ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":51775,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.yalla-shoot4.com/gg/","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8503a760cfa94089be21d772a343d74","sha1":"19b41759aec015ffbcc036d0ccc784d2ac2b4493","sha256":"e8c70e7ba70cdd904bf60381b926f73bd7c4b0a00022ebb6569329b8a89a966e","sha512":"524fcc1633d63f587bb4481e43921cd196a558d918bc7a8cb1c647ed8f1222ecfd73a3ecace854ebba0f354d421d92249d73b28b4b869c038f7d58ec32e37f19","ssdeep":"","tlshash":"e0c02b9c311a0c7045fb37008b7fb604b0023214a8d4ed31884d23084e31f03d748c50","size":153,"data":"","first_seen":"2025-09-03T01:40:58.784381Z","last_seen":"2026-04-10T14:33:55.560594Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/gg/","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1ae74ce358a5ec0b44e624e5f1a532d","sha1":"6f550926586af62e942220d3c915ae7f068a4515","sha256":"de82b4be16e745cdf385b0b2f29a068c35a8d67c7453d1959b476a75fc0e20cd","sha512":"8a0f0a989a209a3ba79e8c2450dbe7938c8bcf78a95dc7066ef1746f9601acb54a1c38b4e0415575f010d83ed6f0131f47143598ec57578b77557d9ac454875c","ssdeep":"","tlshash":"52c0127e742966350c6924b97033d76c7db3605439526d1081adc858da74e976c62898","size":194,"data":"","first_seen":"2025-09-03T01:40:58.785516Z","last_seen":"2026-04-10T14:33:55.561337Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9YBFDDBGXK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5813ea98980d9a1e76e33c89d9f23d7","sha1":"84514448afc5e3585788412585f5962371e62f44","sha256":"ea2dcfa1c3dc0477c4b46a71255a0cd0ec7a26ec967c1e2eae1ab4ac6b34fc6d","sha512":"d1a4505eff52721daf335fd9435787f6c2edee2741c7aaec0de4419783cfc0cc2244319bfffe5847da125a154ff90399132d39ce0942381b1455971db5ad6411","ssdeep":"6144:CESjtDw7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:oDw7WiJKzV8Fuw","tlshash":"c3a4f9ceb3d674225396f478903f018ba57b29e2b44cc899f189c8d42e7469a5237f7c","size":465099,"data":"","first_seen":"2026-04-10T14:33:55.508566Z","last_seen":"2026-04-10T14:33:55.508566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"28cb615926b533b2cb607c420f5e7c8d","sha1":"9df9064cc43d5b6d219a06db7841ce24036ad984","sha256":"a369c5cd94edd195f2243de4665435d2656f7a63cb46b0451d391cb4b7f6951c","sha512":"4e63226b9617a63c263c82e17eaf20bac629c5bddc38e76a50f7031a335ff480689aba4dc2b44ab95b3818e2f8c2f7aaea9588ccbb86b75c55df5f43148de992","ssdeep":"192:ISEEBVhggr/uwBkMhjx9mEMEDzr9hsBToO52uZGUvsJCmO5Z1Mz91vscKBhrcgWs:sEXc+9mSrmZhvsJ/iZ1MwBhmfQ44","tlshash":"0342c7653d6384b542f800e100be9105f9bbe7113ccdc0d465df9d560baf6aab1b7a2e","size":12833,"data":"","first_seen":"2026-04-10T14:33:55.562128Z","last_seen":"2026-07-23T16:23:00.449453Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gekeebsirs.com/tag.min.js","fqdn":"gekeebsirs.com","domain":"gekeebsirs.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da9319ef8cea26ba244e2abd1f12e5d9","sha1":"b5820c62118863db31cd09466e727c80a22bfae4","sha256":"c3cef5e6bcff82154ec8fa7279506c4a0cc687f81c406058a1183d5383365d4c","sha512":"02a3d66a6e28b80696a74a505d81520b618c6ebe9093fd3e51f06e1bc1a239e2d8d43da1f05d913ad0f6c09554fc9f60577f820e043004919a8fad5a138d38d3","ssdeep":"1536:RM8AL/g1vljcofRXSiK4KymJ2XfjVQMUWF8DmSD87ewcC/0fi3bcZ5cO:RM8fvljcohKfJlSN0f0IF","tlshash":"bdb3f79e33b37055029f82f6a03b4d2eb5a58ddb98cec3a4d15575a63864104c3affe8","size":107646,"data":"","first_seen":"2026-04-09T14:22:33.166558Z","last_seen":"2026-04-16T09:18:21.620364Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment.js/2.29.4/moment.min.js?ver=2.29.4","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99d33210b6eb23cf25fcd4ab7cfc9f2a","sha1":"473543a8a80fb55d800d4356864b9491ba819cae","sha256":"081737985335af4be15fc676ed4ccc0703c7446c6b5cbc9317e40bcdc6428e5d","sha512":"f87e222e363726c2a217657a377eba8a7e484078f6b84b0657b3e9fc645c9b47e7efa68f024e55f3107a9fc7d08614a89d3a935ecfe4945cf80f41889fa06bf6","ssdeep":"768:H9LqJUvlg0L4IhCiFgAOckHUU/aIkk/Z1LH/4GHlrY+5i:deAlrL4WvOciBJZ1r/4WlMn","tlshash":"9343a3ce3546b112576212b5082f480be33e6999680e4d1cf508e9e97d79c6e42bffbc","size":58024,"data":"","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-08-08T16:47:21.210922Z","times_seen":3330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a011b4a6bf45c764e3fc4702dd3a2f6","sha1":"74f9abde6ecd5befa32fdfd863e693639f951bfe","sha256":"009319aedbc05811fc98d3db86247295be0a007a94c86fbfe2d136b9da93720d","sha512":"b291010a8afbc9b4c87f0e9eb7087e34790f228bae635926178c08a1cf250001afa785c17d243bdfa9b961a73fedb6a9a009629655c1ac5a00ec0e5bbc01946e","ssdeep":"384:ccRjz1aVe7D3NBvVsHYbD2sMqAMT/DW5HWUw+XgOvcltikQIR7mFpAwfZ8Z:ccTBa8D2GA9WUmXFQYXwBC","tlshash":"32c2d8863dc975ed03a250770cab74dbb66bac40304c8905d314dbb4fca1b9daae5db8","size":27294,"data":"","first_seen":"2026-04-10T13:31:52.935583Z","last_seen":"2026-04-10T14:40:24.769484Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9dde379c7fc38541de50b06df72bc611","sha1":"d08e3aaa2c823ede029a656a123bf9cef3d1c773","sha256":"d7416c281753da5ca6eba4e341979dbef50788992aea26cc0cc5d09ecb976ef7","sha512":"f477291a880b3b5e98f3deef917d2a2a7674d4dbdc05b1761e63775c6c3ce02a91949a365d9b1d429a4c55b9a74a229994abcce9abf27478850148cff9e81750","ssdeep":"1536:nCXLqoEE5eeF9hJ+r8mgXlBLIdxhFRIiG7H3tWn:EqoE25RNi+30","tlshash":"4743097c54f650224493c59b1647b26531b3c0279a82dbfd7aaf032a5fc6983c377ab8","size":59327,"data":"","first_seen":"2026-04-10T14:33:55.563046Z","last_seen":"2026-05-21T04:23:52.183082Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=ghImAVYA1H19MaRlwwiO0QWuDdsyyZPQ4pXa-A","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"34403bf9dbbf355c073f9eb8f5ad52fe","sha1":"75b83314404c2937ba1f150398f6674937ff79ab","sha256":"38393f6426885a3ca7c93564e0c80942d10402f62bc40065b19418822b9a5bf0","sha512":"7f9c982e7c180980202f6073692a1415796764d62ff18a7707bcb1329f7aff7149ee824c8d964314918cc16cff846b2c7f7c345b772fd017b9faed96b4fcab0f","ssdeep":"1536:kykn1g0TMHm0SuWCraX6y4n5/KSdK95N2mrKcQ:oG0TMHm0SuWCrS6y0/KSdK932mrKcQ","tlshash":"1a733a9cde6ade48ef40898095fc97c693ec5745da8f1bc1e94e02d4252f296e0fc878","size":79527,"data":"","first_seen":"2026-04-10T14:33:55.498754Z","last_seen":"2026-04-10T14:33:55.498754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2af03016385dd9e0c37c9bc11aafe88","sha1":"fe872c1d21be579fa380370e51f651cb296b6ba5","sha256":"050036c9339d1329e0bacec105c076fda786224b964373177b859878b835611a","sha512":"493d7ba94570cdd44541f57b94370b8e36b7f70968fea03a6bf5ae64f8efc2bba6507017ea9d01d3a38a78a521ba0e4c3c9f091ee01a13b68031da0d673d2679","ssdeep":"","tlshash":"e4d023691976c83152dd014e10f5f3d425603050b751634085cecc2b7e21ee355f1d9c","size":217,"data":"","first_seen":"2026-04-10T14:33:55.56516Z","last_seen":"2026-04-10T14:33:55.56516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gekeebsirs.com/tag.min.js","fqdn":"gekeebsirs.com","domain":"gekeebsirs.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da9319ef8cea26ba244e2abd1f12e5d9","sha1":"b5820c62118863db31cd09466e727c80a22bfae4","sha256":"c3cef5e6bcff82154ec8fa7279506c4a0cc687f81c406058a1183d5383365d4c","sha512":"02a3d66a6e28b80696a74a505d81520b618c6ebe9093fd3e51f06e1bc1a239e2d8d43da1f05d913ad0f6c09554fc9f60577f820e043004919a8fad5a138d38d3","ssdeep":"1536:RM8AL/g1vljcofRXSiK4KymJ2XfjVQMUWF8DmSD87ewcC/0fi3bcZ5cO:RM8fvljcohKfJlSN0f0IF","tlshash":"bdb3f79e33b37055029f82f6a03b4d2eb5a58ddb98cec3a4d15575a63864104c3affe8","size":107646,"data":"","first_seen":"2026-04-09T14:22:33.166558Z","last_seen":"2026-04-16T09:18:21.620364Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8503a760cfa94089be21d772a343d74","sha1":"19b41759aec015ffbcc036d0ccc784d2ac2b4493","sha256":"e8c70e7ba70cdd904bf60381b926f73bd7c4b0a00022ebb6569329b8a89a966e","sha512":"524fcc1633d63f587bb4481e43921cd196a558d918bc7a8cb1c647ed8f1222ecfd73a3ecace854ebba0f354d421d92249d73b28b4b869c038f7d58ec32e37f19","ssdeep":"","tlshash":"e0c02b9c311a0c7045fb37008b7fb604b0023214a8d4ed31884d23084e31f03d748c50","size":153,"data":"","first_seen":"2025-09-03T01:40:58.784381Z","last_seen":"2026-04-10T14:33:55.560594Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1ae74ce358a5ec0b44e624e5f1a532d","sha1":"6f550926586af62e942220d3c915ae7f068a4515","sha256":"de82b4be16e745cdf385b0b2f29a068c35a8d67c7453d1959b476a75fc0e20cd","sha512":"8a0f0a989a209a3ba79e8c2450dbe7938c8bcf78a95dc7066ef1746f9601acb54a1c38b4e0415575f010d83ed6f0131f47143598ec57578b77557d9ac454875c","ssdeep":"","tlshash":"52c0127e742966350c6924b97033d76c7db3605439526d1081adc858da74e976c62898","size":194,"data":"","first_seen":"2025-09-03T01:40:58.785516Z","last_seen":"2026-04-10T14:33:55.561337Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9YBFDDBGXK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5813ea98980d9a1e76e33c89d9f23d7","sha1":"84514448afc5e3585788412585f5962371e62f44","sha256":"ea2dcfa1c3dc0477c4b46a71255a0cd0ec7a26ec967c1e2eae1ab4ac6b34fc6d","sha512":"d1a4505eff52721daf335fd9435787f6c2edee2741c7aaec0de4419783cfc0cc2244319bfffe5847da125a154ff90399132d39ce0942381b1455971db5ad6411","ssdeep":"6144:CESjtDw7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:oDw7WiJKzV8Fuw","tlshash":"c3a4f9ceb3d674225396f478903f018ba57b29e2b44cc899f189c8d42e7469a5237f7c","size":465099,"data":"","first_seen":"2026-04-10T14:33:55.508566Z","last_seen":"2026-04-10T14:33:55.508566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/gg/asp-main-js-extra","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8e493a7b072ff17decb88d599d43768","sha1":"d9a2f65a4a3457fa8c1e18ee7bd189ea21e86c46","sha256":"a18a0ace93e890725f69f03d03f177b55aa7fa3d388662814049f13acd12d2b6","sha512":"d70df4a5d9541b676fead6487dce9104f726b36c21e67f082445ad892f753eb28cc2476bdb6f36c09b3e8da89f49bac49667dd445cb4ffb7b9ce24829efb791a","ssdeep":"","tlshash":"5d21add6fbb9299e240cebb148bddee904852dd2c4eb94712b3d43c08138a08af1c353","size":1294,"data":"","first_seen":"2026-04-10T14:33:55.566329Z","last_seen":"2026-04-10T14:33:55.566329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/js/AlbaSport.js?ver=14.2","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca7ab15b9175cc3afff43d6a0a9e2958","sha1":"0d6fc4be989592cff2ce53aefd243bc91ef0a90a","sha256":"80ee84618704d2f695ca273805a9b21eb0109ca0cebfad93431ce989763c8331","sha512":"f02c1b3b5de1fbbb549bd752de4241d8e808873df6001ba6bbf02d9a7902457e56baa16fcb72151ef65cd33495cef58951f71a73a350338429ae7400d5beaeec","ssdeep":"","tlshash":"7d612524b17091a71fffb1a924bbfa45b9527d32c410d240a4abd2f04a3adc82237f57","size":3430,"data":"","first_seen":"2023-11-19T16:01:30Z","last_seen":"2026-07-11T21:31:46.756064Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/gg/","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81960f4b2d78319cb3a3feddb310f1a4","sha1":"cbe81bbe8a714a96ea9e8a62c1aead4104a5c41d","sha256":"ef8726bc7f94b6423cd85bb1e5ae15cf4add61eb35911118f9a260f9017f47ac","sha512":"ad73504cc354c59801c15f3268e3358e2350e9c68b1f875adad2b65a1593ea2c792ec9f2de598faf55fe2ae717dc9323bb30c21e95794da24745d17ff406c5d2","ssdeep":"","tlshash":"c9e09212b104123ed8c3668a244f0a9e3c900b79df445da595fcf3866ab06ae49cdeb4","size":414,"data":"","first_seen":"2023-04-11T14:34:24Z","last_seen":"2026-05-03T14:18:36.01746Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/gg/","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27266bf2e32b8474a55986354a09fe9b","sha1":"ec5052cc898522a45ecfe39971c6389fdcbb5b48","sha256":"df32db94f8da5a0bec0d4b89410c78bd808a6894c6ae1dbac91541b47e9a3221","sha512":"22a95816b465f2047c3aa4fdf22dd72f39facbf57243f45ba81509dc94d40d91224fd61e8224466bc9a0bd3f0410330b66a17dc280142fba436167b8e3d83218","ssdeep":"","tlshash":"790181d6bbb9299e241ceb8158bddee914952dd284eb94712b3d43c0c138a09af5c353","size":775,"data":"","first_seen":"2026-04-10T14:33:55.567655Z","last_seen":"2026-04-10T14:33:55.567655Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/js/countdowntimer.js?ver=14.2","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81105385e5616805fdab6bb80e1d56a2","sha1":"09bb412e27aa2bf6cd06e3ed8f73100fdf7f33d1","sha256":"e5da99a8d4dfec19b3fd9a8dd7fedf5787e21d18645a9520ea5a785c31efa91c","sha512":"e09fde7b754d73e280280dfc615133b57419d9516e03fcb93bf362bdfc63bc9db3b1e45ab92933e046a4c70bb743b964876e3f968bdc7496cdffc85c3b148010","ssdeep":"384:tpybp9pkdpvlSRX5frOH2THpfNfWB8B/0LRD+M0ZhH5jA:tpcp9pebW06MUA","tlshash":"7782eade628260e0acb7d5914b0f37060501b32f7db72d0d57eaa8d4391ec87d196eea","size":17754,"data":"","first_seen":"2023-11-19T16:01:30Z","last_seen":"2026-07-11T21:31:46.774807Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-08T19:41:51.94889Z","times_seen":142309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81960f4b2d78319cb3a3feddb310f1a4","sha1":"cbe81bbe8a714a96ea9e8a62c1aead4104a5c41d","sha256":"ef8726bc7f94b6423cd85bb1e5ae15cf4add61eb35911118f9a260f9017f47ac","sha512":"ad73504cc354c59801c15f3268e3358e2350e9c68b1f875adad2b65a1593ea2c792ec9f2de598faf55fe2ae717dc9323bb30c21e95794da24745d17ff406c5d2","ssdeep":"","tlshash":"c9e09212b104123ed8c3668a244f0a9e3c900b79df445da595fcf3866ab06ae49cdeb4","size":414,"data":"","first_seen":"2023-04-11T14:34:24Z","last_seen":"2026-05-03T14:18:36.01746Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5225531141afa8f5b28989a4f5ec5162","sha1":"9bca960ffa88dc8897079e339afa61b145d732e1","sha256":"c718d81031258c2e02cc45f17b6059148a99c094ccc3e83dca6fe01d20d32257","sha512":"53ddf8e1b203b651de73d791d0b1b3b0207eb549a4a438a02c80302b0b52d7aa9032a3b0ecf6209dc60845e92eda853d9564122f388ac8ffb799e641dfbae2f2","ssdeep":"384:c+rUgkgOvHqzsaoM1fILh3McXH5SvtjmLqTOXcTah:cvHTvKzNoM1fILh3L5Sl8oOXcTah","tlshash":"31724ce05537e8e1263e4ddb2be1fd1a1156ac301a80942d2a7d533085c97b4dbabceb","size":17536,"data":"","first_seen":"2026-04-10T14:33:55.568472Z","last_seen":"2026-04-10T14:33:55.568472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-08T19:41:51.94889Z","times_seen":142309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.43/moment-timezone-with-data-10-year-range.min.js?ver=0.5.43","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a365b61955be78da13c648270d7f1729","sha1":"78817143d00e9cc69ca4106391b5676b294b8f3b","sha256":"4541068197d1c1139b529987b03db202070cd3df77a20ebde2edeb6e96d83144","sha512":"cb6798ba9fa6b157102883e06c2f6cb65191c2966e54505f498eae6af9e9c4bf91cfa895191491cc230b15b79dd0430a83a15bab9d93995c0de823ee3477072d","ssdeep":"768:gwKn9NUBkzCLkFaDCDgZD3500kvmdM8O7W4md:+PhaDCDEJ0FvOM8EHmd","tlshash":"3913fe814126355a96d7c017b82bbbc560a6d1099ccabd872fec07b3c960ec1fbf3916","size":42195,"data":"","first_seen":"2023-05-16T17:51:35Z","last_seen":"2026-07-22T17:53:56.867075Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.kora-show.com/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:33:25.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ncontent-length: 0\r\npriority: u=1,i=?0\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\nlocation: https://www.kora-show.com/index1/\r\ncontent-type: text/plain;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea2776bde28120a-OSL\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OiPPAfccAWhX3j%2Fukfj2MmD1ybmoLu1NsnOJotWTPnmhe0rq%2Fm30dr58ll%2BFVjeddKLaV8Vgxoz7AjNS3%2F9IuTKI%2BVYbJIeiaw288vYi3sPsqf9NirnnUmw5brf0V%2BWpqNgQA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51016,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Bold.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /ea/droidarabickufi/v6/DroidKufi-Bold.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31544\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 23:04:17 GMT\r\nexpires: Sat, 03 Apr 2027 23:04:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574148\r\nlast-modified: Wed, 13 Aug 2014 16:50:04 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31544, version 1.0","md5":"4650b9f9ddfc876d3fde0a9663539522","sha1":"7dc2e4b8c259f1bb4d98ec64a39645373d31d71e","sha256":"31f02fb9a8ae77e5d8bb229bf73f473f783e8155042655926cafca211cd11c98","sha512":"a6120c8dd92790c4d8e06889e88b6068e38ded2ae3f17abc8e33267125bc209f0a770348a5d29858e5b58f6cb776b182af3dd58c6b139ccdaf8d9ba069f81b41","ssdeep":"768:+481wu3EzLzK8lu/S86MMWkKjjN/1Eoel96gN/KE9SoIzh+L:lkD30zKm8nbjZdEzhN/K8M1C","tlshash":"d0e20269d9895329d0593f72933bf988b95b398ac0a2865170e8f134ca3125f76ec0bc","first_seen":"2023-04-05T23:36:55Z","last_seen":"2026-08-04T11:53:15.050753Z","times_seen":971,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":36,"dns":1,"connect":7,"send":0,"wait":9,"receive":11,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/08/471.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/471.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2877\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Aug 2025 17:30:14 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XE0O7LpFUdab6YzmhskXGss7Mz5lK9yk1fV9HApxj6yUJ%2BZsH5jHz4nzphJsFmn%2FcXD6sM6LQWIQo3qRFgBIOviY5OD%2B%2B%2FAT%2Br5Q5Bhmf3B8JqyE4XOuMj%2FK6vaXWAK8cJvXRobI1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277722c0a56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 164, 8-bit colormap, non-interlaced","md5":"5f37e3d83dbea8533e559f308e4fc5ae","sha1":"d27a4ead1b06a13786fd2be9342d28a6ebd66367","sha256":"21b84f593fbac65f1f4c40f2fc6dbff9dd6f78c8161c0f9453148278d61ab4d5","sha512":"0a412314ad16cdf31817e71aac947c912e113ac432bb8b8f8d52b2067c7cedae48e28cfd0690cf9cae024d75306171a00014da6192d74c69fc7648a2a0f9d7dc","ssdeep":"","tlshash":"38514b8a32d3d1e5a5c20440cef2d386f49fa22a0797f32c904b8b5e7246b871d4574c","first_seen":"2025-04-26T20:14:56.464466Z","last_seen":"2026-04-10T14:33:55.497644Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/625261456364/0.7694223891525953:1775827418:Kg_Bfg-DwhcfDIZdibyDqiU0Bxt6SQjQ5KIZt9N4YC0/9ea2776f9e0c1a30","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/625261456364/0.7694223891525953:1775827418:Kg_Bfg-DwhcfDIZdibyDqiU0Bxt6SQjQ5KIZt9N4YC0/9ea2776f9e0c1a30 HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12186\r\nOrigin: https://www.yalla-shoot4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12186,"data":"KqGSC1fg6pDQQ5Z8gfmM8V8D8SK68KSfZfhiG8lS9ZDV8HmyykF37ZDdGOB8DSyb38NgcSDh8iNtfU3gI5BFB8yaB-B86bv3mR8zY6ZoS7ptlx15qQdZqS7sOM0VZ2e186xzXDl67lzx1wIUq8f4m6+b1t3Dj8SC1I1fL8i98mm709A0EgdGyAdGz8Dy18JJLfAt8R2xgbc0z+Paofmoq8CPi85q804Pd8pHKCGYS7xwXEGI95MVyn+7q8CC08fqUA3cCRapQ87v2-XdY0+38623dZ6GS8C4qYC+SMmG8PHjAZ-OrRVCq89H0p6rMlmKAa9$rkf-861LD9P3pZ88tJ3d80tTD62D52687Rs8D$FR18f5+MDT1A+018R+qn99YBvkHTAHTRRqS00aHXy9gW734zsM90VBq8fpUNf895R4in2Y89GYqs9YJ0cfS-mYLm940Q20gEon3i1a-qSD1Z48R6oFV5tiyECyw+8C7M0AxbTR6kwfZPhg$KiXRTA$e1XgNdONh38ERR534vzNm-wW98GhYvw0480mVI30Vq4732iFXI+CIqJKorJ4VfVYBnMJ3n+QjY9rWXOiY+iEVcd48O-RCeiDNdlJivEovSp9cJq$sT$Y8xU2Cz+NY-1mqZS4VcDDRDwFSV0SO1wZP7ovA4wCEnxY8OBBDfa7QPLY+2ZqkXYoCafZoRook2kE8D8axkMTXdUGY5V8rYv3yviYJx5fntcATDYU8wLV$vbx1Eei3RKk+ajvP4ZV$y9WA75rX0Ggl1Di8fWy1Efv5ly5+Zl41qE3xYtgsWvkhStzQTEIzr9XEA3prXD9$ta8giEYwEvByfig3$U8z+N89MlFhFI8mfqQtMSppElzQfyyz+5Sf5qZSVU68GVmqfyFzGAqtm+93t9dp3vf9DGXj07StfqQv+vOv5Uy8MZqeGg3ZH1QtGU8k4kU9A3SeQXCglvTN$D9KvLU8b3t2z39x062vO7Gptho1$+mF+dC539cf4l9elhU9sHF-6c-E9$F4B16gP0Jt3MBmmQMr8j00AJGdlrzvMl1c9Q-RHlRM50$t+C66nMS0$YB3c1WHLF-xUECvpEMzqKv83qNMDlZKvqQgNa3s+Tj$ojIBlQ$RSX-zSf7dSSH8P+wDly5l7tAlj90Dlt-qWqqZv4ziPvQE41lm74vZeSDUjolZVGgS9xpAvd8Lk8APyt5Si4$JMMzal-zGpf+sqJmN9+exz-qexR9fQfRUyQ3EC44C1zol9BTreyOJ9qSem9OdE6ZXeH6wn8N6y$75JO8GtzAXz37RsaFSh6y5sqp8Do-ettzGZBGFmK30viREXKj9qHCiz5ZHvGanGpMt6klTH+cDQfGnFmIKsq935D89Bi+Ocf5d+3yTbZptAsOQEgeLjliB8gHcRppESgpM9sUT0fLZ6iSr7wqSdz9TcfPtMsD9pMbD5OnchaPtVyqPwSGlJcfSZ9MtD8LfOMriK5sJeaTTWem05ee$sORivsM51McwM3Zn-M$08MiFMLxacXdpfc43N8k29WLkQEwk3XLTrcBS88PnI8QZs68o8Pkpt9DsfS73R$3fJX7BLE4HFK3j6r$O7s+SHfG8JMzz8eSQff6gzBE8Rg8GRtaqV5wmtbZHgQ+y5C4P88MHtp3C9NDX9izYzSvQrfYIGztblbS-zPexosdp5llfXsbcbvF$gIMYI+icytGlgx07iJSThpUAP1eAp3g3gD8vzI9hHpt3s$Ma0OoZItI8-HIDQQr8LW3H5giWzGKE+Gg4OCgisPmsSRzHWr3-3yXo9vm5gyivZlve8FWtC6O9iAr8EC1AAbhjA93iC-SwTO$x6UX8i6tPy-A365CjO3p45DLlQG2IY51N2QBtlj3034o3E8HD8pkedKA9Ub7tpTMi2f$Hi96e66mhg9UfD130Q8WfSb9Wr29Vyl3AvhvjH4ZS1lLom9-Kx5SGSDChsHHH5jOfxUdDMhJe-XoqHoi-cY3Sf30aRKdv0WSCtXo4CdPz7mP3k0S6vzV5928Y3D5VmGIqMY-4sG8Ky19iI534140HvsMOiqG5YxDKjr05hBETCJdfhvXDqivRD19w2e34HSxAZ++e3jS546lWA$eNvhblmP0Nb2pQtAGkMGSM-Gh$BfU-xN-3YWG3CFS00sfAS8soQr-Ip--NRRTZZsGwyqSHP56BBHjzBfA6T4eBgAC+gjf3kDsx9xSd44c5R0f9myicBkgjVMyLlYzGfre9e1O7whBMX7MTTD8f+Mva6tll0qkIdgR$Sxgziy9ogDeR3RoP3HJ1T3O+NSvLFOhz1ytA4M7hhTZdpqCg-r-xsjQ872E51Hv9Q$zRjr8dl4mGf3MSNBwcjJS5swpGUlchygzKbHwmBD5MGG5xRdeA1HP5e+f0FdBF+DZ7mPfyJB--H-nBMGC-xI9mtq3CMZeSE87rA+J+t618hMtDhIK0WwyJdGbol3V9VA$Z8EsdNtYdooS15v3CCwG1FTZx1sS-wX4HH3Zd6pT0Ovfygm+BsE$gcaZzYmBpE6Cz+5pm2OfTWVx8CzedWQED7ctROV5bSPD051QrEEEf2WrcZm8gqciRPl2qkttG3RXY0TvosAsJxF0gOTmNRK3R-089s+ZaC7A8zvgyO5vYfd17bka-Pwiv96tZCjw6tQJ1h15E8LiZZ28dZ4OzU4ODBSvYZe33Kbd6mNbMAvO8OxbcQ-VnvI6XY9xeO4fb8H981KF+5$-AAzeLFiX26GFYgM-cLtGl059Q79wEc86R0d+g11GvlBT$hO9f8IZ5PZC+vDIssstj1ObWYdCRa+BEOME-4lVBl0dgd9zf1GKMjMlSrhVM5gNG8JesDZ9iTBVeA+KAXxEDq27eYQHIlk6sXxRU5KZ74JRI5JMR7h9pj31Shzf7A$Kt4OJppQVVcJ3FH8AqUmPxDgKjtvfQDYBPG90S8vzf-VQXt$S4phOR3i9qc6Y3cK$112bI$YYhToZ-y9I9v8rNQ6ZAUYK7FC5xd8Zz$S+SQ7t7kRBNoPoQNja3fBteseLPlnboy2x$mqLEWyX3kXqb1zdF+Gb8gCp5S1bEU5Uh91ikQI2cChazyX7tpi+bTPH8QgGLXg40-6jRUlyXzsD2lpPkbi60bZjVeTyC4czmatv6fy$-UBUn-gwUI2vgjlyR8ipN95oMo1Qjbvc9dBRvtpos3TROl14MNhJFdZhyRaWqmRxPptBj4flM8cHkMyrUbSiQ-74lxxCcRfMxj-kYtWtyBQLH99H08he56-k9mYOT7ESH1R+qZ6tL6-m44BQrpNLkvcPQir4XWjCMrVzr4PySZSfXJy4Fz+KVYaw7KykWj9tJZpWGBOicVJmMfp3Y7Syw2g+VRTy$A2W5wClREXWSKIT$YPGa9G4EzC82Z1zf4XxsvlUTS75RRgTi3cIWyv666VdrNWE1NMsWm0deEHWl6dNkx0VQDcS$xfmld+fZmUVolcd5NMxpfZokxZzTm2eBxPz-YiWJYqwBvDY-iWz0wmWG9vSi9+9l80j61eA3WRW$z-ECoO7OftNtt+IRiMVB8SV8IQozw$EzS4A4s10mfzJC1rd$8woRYJl8V$8L9kW-lO0pe8ASR7Wl5g5Z9BWDxxNbxvfoxosZA+7ve9vTVgUTVdzGz211Dr9l9UEBSHwwivii898B160qI7x0NtjtG9yoSSCPw+ISGiViszYJwYCM8Vdm5jJ-WYpLJIiNNAt4lv9aw0e9llN1i602mUtC8HAqS2zUwl6zdqfASgVcV4ocjEW7vasYoR3vNo3ndpxb1vzoWJlDj-AJjTYrGFNDV3Rf3QCGhemG8iIl9iYR3x61GxNDw-GLWmIKAZSjz4mq9GfzpViApYYGNP9rhrGaxry8DZxo6idSYov46-y5VQhr0W7OD+w1lqdX3L5dWzCnlwjTlTlq5kjajUinWVebddlgildmzJtQwJwRmlfZ51V41jwDN1is74vFI7e$fi8bVthjW+7AtaVZle3TwdCM9RtlRtVD3HJqdQ8kjYSxosV6Vl72lztgVdfpD1AfA3I7jj1DNbCLiqAl9$tgwJiR755LIkYp8fymW-JG9rp6m6lzEDwJNbohzZ9iDESLEDwwiqJ-S4mhKwiOxlzhpRsCNeS5hdjRiWm058hqJ8yooBj-05y5hG9+7IJOIBVlzRp0zo6f3qx$V98qAqdBoMtoGMJjIi9f5516YQE57xmqzZ8LDMiZAf35vW5Y1Gha5C30VSYWVqzWVZozYoilhBC1do6698Cl6DEqsWfj0G8lEpzzl9DZ3F9djDIGD$hCV+7gjf5aS4SHYR3qdOz+DYEOKzmTp4hmtUCzGfsxGshSw$zq7+DNhFEBs9G5GWdHoGYf610hWOfhVf9UNbmfSDC87NUiDcUPIe3gpmvJwyI9SJhgmUEsdqfxEbe$73xl7dYUGVs164Wcj00apxvvGvpR6L5j11JcRleqEYCiW1RVe-WEjawxIPE+j9vOsL5zNve9DPI5p8+tClfzC8pv7MYp9Ep+if9GznwUi-z3I+Itt8HAhNE8p8447Z8WfZmMG8QkVkV+-1o$GXJh3HCfVHpWoHhlteG2fy0p7IioAh1Q6ZS2zYYqsph-R2UFmmUepS2HVS4VKV3YNc1TvbNVI$D0H+Dq6p8KCd3bIJlftm1bUfC9KwlOJ7Y$J9U$yi+dzHJ9I$00GKmHmJRyv8zof+5Bog-8ywsZzkN0-fWRvmI+DJGEIRdIwTYEmm3cWH0eJQF3C$KxRY3v8N19Vhp-tzJxRmi+Cd3xGgE8jvfQoq9gmNj-0vw$zOfdDp6HEgYyxTAkY6z0yaKltr1p-O1fe1YaebYe1csMHgVQdrJnNr+h3RD+WtDUwSeicl87Vlyixp8hyrhl8cojoU3QRj3gwr+Ns2ID3Cfy86zq9ZNi53IxvoozYz-adofd7xotw10zC1iR6+534fYehDewS19J1Te2lUy5WAYfyKNtzj2RmWdyIcUL9Rz1dA0G9$RNszVj7-fZ8qFAmM+ys6lMtAfqHfCMfcNsR1Hdd0-dG8QRxPh8WA+BKq44l3116vIQFHl7VTSjc4H1ydJ$Nb+wJVsCsyx$hd197$V6HkyhQl8wlzy78IjpflQoAm9rN12jAMEoy6m$IRisfR5sAZQSxDJRdy29Fbhr1MQGwvlO37s6Uf+6ojzr0071mOwPdTVGfIYE1rQXwdQ1RTQryNIw++3fDzxaN7p5pFFH0ovE3wUZFGQo31+VG2VUYhYi9pzep4-zI7Y8h0N+796m8dDOQR9+0VFL+2fpjk327yRH0J0KI8+gYR7AGZ4-KvUZzmCddIKV3gNzf8N8VGz9ICCWNDCzhQ9mRTjTdPSL6m4qiZlXJIGd+QVTsEAbK+C$KzW$daS6wjpR8Nd8jc3Qhv4oVEQoKEISFjjMj1f1c+5ZEh5wYUhoot4KCk30v7JfhT2T+LfAHDAaUoxntpDoiTcMsR-Z1y16G+ddmsGHjHWe05tNhDW14-6OSwYp0mNX+A9XzX9BIlCfxv7SK+6UsHoO0pDcl1Cit7VAppKTp8yBmKFL9RCTpHdvhGQ5IMtv6TCdwU3kF2V0jMWHtysVHDRfsHHvmd5aJL4h4+Mq0s8x2GFUYlCi6+A6mrFo8N1V3fDjSP1cxL8dAjUkYJohRce-CPlaE$hEG4JTF0CpzEi0gKo+6ihM-MwJI+fl+5sR15dwovhjJlt8HxVlyfpJm$z$DLzitwSHtPcEmtAlJi86gsN2Y8Fl84yl8gww3LQi9lsOUMdhy8Ey51sU9YMI48fDQZ1aw0g07xUbJLsQGA5h5SjhYrpgOODvz5d2FfRriJUPCOGz67C8bE+w++iReN442DC4QyQbFbFdsCFR6pfp9itQ-BNDy9PSd+IR2z-LEkYaik3NtaAaxNpHIfj9-lWxSJozYvVvVpxRwwAfQkdhINhcKRUzOp5p8pHwRBEjmZDlGZQRv47V+8cRlem+8FSm7gpJ2vSwSQKS3f3QCN20gCpR89tKwe3ahjCbSHta-csiGqSpIQDCmPI+R+6ZRfzN3Gvi8o0706QjJrEgZUpXRC-QwWzqmOTQVrzft8Q9IbDI+6lq6pG5+fdPH1xnE+FG+A2QpE06mA11oiM59dK946EBSVKAWtM0MFPifFZmP7pE498UFQDrHS+BQyF52dJdUScg-cAa4a+4lvTzw$Gy3ZQvwU9fk-Np7Sg+zeQx1KC2KKRZF-QBPHFSEBZZ-Ti+TKcr2edxmUmMTe303Pw$1p5zjTvC2+w7jwkhvwT5FGwiQH+fWQ-2d$5zWsemidx9fzOA-ZSjlesHC-ONEBo$EKiSIwyb+Cw+hdUO8L5Zy9g-fq1TpwVKKxH1sRPMz6Q2Ng2a+UKRRCF0kC2b2KKcCM5GwRoshqVkvMhzbPdxAVg9QlNHy48sYhAPGUh0-8kEHHOqGPwFykcCVRN7S4Uk-KdFU9fpOQ9XQ3CyH9816wtgjsK+fPNrHsVl7PA4w$oZ8wEqm+gqlO9$4tYffK-W-v7iTNZL6LxDH4yCH4OscRTZfgfayHZOAz61zr0v5fcaer6sHDZyxgR1Mgcctp5FMtbtZXUtPcl9Wbd$YxhojQ6dzQ7L+HNZZyxNQZTWMKe$biYBQxkdU5HSaCQHo7RTQod5499xR4wY0fAxAieroVCzWa+54rc+fOsCMiho8sWrlEhKeFAcQsPFg82Cy9CrHIjPxNgegiWP3Q8HNvdG80sP0d6pkqpbsKGTILhGWbv9ZVxYqUonpxCP5tY$z1j2pvzhRbPQbZ3IOcOt$WmRcRAmMLKTm2-rMMgj+p25e5xAPiZdxGySXpZQYx22ho4EjViiwBcUMkQ+cOj+df57Yi5W-$ZA6bAXxvoj6cyFwRJY-iwfbmbzQX9jO-6QfMB4G+swRO0Iykj3HzE7DXPSQyVyw5bW-ZX3cohcKBdV4mxmxHsNbzb4fUKi5Wwpa6FAmUjmMfeBPyd1lY2UvylhfB0lg+cx2L6AAC+DF5314YYi+8+6-irfTLj7eaejT3CL8CSA7LApo9F0k9cIxPCp7qO2mvWr0VUKb6yWD-HoxGpfZZQ2+199T6lrTpW96DEcTxPjKj5cPccldTowxXMzjOv3cRbQKF$YxODIkEn-vDpYh-ACcgY0z+PvFoi4OE5ZBq$aoynpq4acbfPvz2ZLzZsHci59-v6g0Y0orHjN+mqA7Fci7YRrtXy8FQPWE7fC-d$ywIG6Vvi1ZCdYCl9iYCjqS3VVSog59V16iv87cUWZHP75zg$-HEPh+j5zNaKo1sRi5sCbWoNc0s867i74JroWFZLCgYLLVYL61-Qi3p$hvWsTL+9rh7v$J0giTjmiOf6IgA+L5$j7GcM93WichPKPKedTZHNPIYwRolxRJMM1OW31bDPzsMgJ0zdzseAtFf$-l+poC$hy+aXan2B8Dv-zfsMrqnErL$eGc7v1apps9rpJnDxXC3hdpR5$eBrbgeQBFy2xG9YsLlxm$-sQndki9MK9yRH1is+rl+KoG1fxXL9C3-Gpg7p2nGxzGSp-yKH8rDKzpgd6DX8K$l7ZRzs0FGzGG6rif8vzYp6X8oheQk7mqWlCFoqAXhREGPDp85QtQeeGvfZ6FHgGGMixgCH5m$bHy$fE5MbfSjFDKiVdER5V2ejJqlqXSPtAS76A-la85iXzM4CW77jJgXSzikeoXDpfaf6Z1ayootYPEq8XSZtkXz86FCd8-0rSWZhG9LlMwiZYzf3TbElS2sZ1RSLRKGKj8UyTGpby35FdhE$Dvqj1MtfGoYlVvr8yDgdm+KV6dECSYyb8-TNf8bvL0GSx-yvip63YR3Z34Kf9pifvDGMFGk+C9K5q1q9lM6ZRD9GJfE6vgJihzfA52lvq7pZGZ+PFEA556tAq0bS3vi7x9ijlw3SMhjSHjK6jpPYK+8YIffKDYfiMC8vaft73Zt3bp3r-YKVD-8MSZ8pZOiKzE2De+fn6ghihWAx9qAbdhZxOdmf18B-pX9phiy3P83YzD5TZdGfY$v+JAdleZiYKh7OvNlBOsGP0IA52G9lh30pfbDr4oD-A5G51RI1gAafclNQeqhrKV6p3v8YIRJfA6$3B31+7Y9GPQ6ySay+vflGGbGG4DtUmFaY8tSwd4ahvivrmT9bYGpRABgv6fv9bX7$DxT7Y4iZ031GEzkvpgctERCH79fgs4S5GpZpt1F$oDt36QG+v558-yEq+ZGv0O1mmA6UTSeAbVfd16D+YVve3vnGN6ozjBfQ9q6iOESF6mb0O9G13kEVb$cy3vIpp8PQCZjBBaGspxMDztJf+1Q+bbPbKAhHEq6OZEb3CR9KjDdUNh5G993xEhzAftV5Gv3xD6X5d6GvAMpYdY829llQ+xtYpOzyT9XG2FXjKGiOd+8H8VggSEZkbz0ySfiE+Z$ZvmyQ1qqgEixp+emKBSow6E1np9I1oW6n3ytI8MQP6hm8h6w6l8A9z+DqlsDVlORMW9gh$726il2kk8pstUzdppdGZDRfDNtEU63vJvsQTFU59d8-ivBPd-jKH7gf$Epq-97$paAE0hGCZNgvhzmDKvTEHZ10fF5QyDyL+v3nVhe1CzafYqCBf9zpCVblKr8FZXjhE5-7a+nGiDG+gv0Pv11s8w8KS9X50MhvndZG36gfhq63wg-7t7Efh7x16g4l7Md6PrIifGpSVCSCgiOhmAZx-qZGO-CoAN1P5hi$Z996L79Dq8f8bS5QdUViBz3Bhq3Qt5JJAt+EyqhAdD9ED6Ddfig8dK1MTzvSF+TGzB93IECt6$v8SZ008Ggvj4zyj0p0HeHW9B$mrPZ3jv9RtxRZpsVi$HpoURI0fQrWgbSKqD$etf7XDjTp8cJizeZwoTmri51PCmztSXN8PL7qz+DovYENMOCIt8b1pj8EepX0CYxSA+z+533L56l6EIlCVDY+fCZ3yi5+om888icY8B8gD78iczX9MS98VUMY01OVH83iP1fL9RW8jJx7FA5EBfF3fECZUrzaSjgn0+B7+yF3GlifOSmpmLtezKxM6dCvScC0qxdDXSLaf2J1NVDofMm3Gd37+pYlPBs8OyIt31fJqdQxfFtCIzt7$oYAHM9q6RxVyz5y4ghGZR$l5NLBT6M8yBDYkb348QtGSZ+L95eDx9lSV4aa86vZ5d0ilAiZ+UNfBD57I8vM$YGnlA8b198OZZ+FQbpJOJ$+dON6T$Tb3bbT6S36GZ$HdGevMrt3n0eibsKOJ9ZEv9GR9hVGJ6hvU9A7DgP6hZDLvL0vp++eFCifNUe4x0bI4xG480N03XpXpCz8YUioxFrtZR5lYr8dfFS-hAI5ACrzq5R8PZVD4IDf868w++SbiAzDz6R14S53s$sCIvHG1q3QGFdsCGs0zfsbSQ0p6VKD1dvYt28vqRr7RxS4c4EYD3hm6M-1v-EwgOjpr6z0TfqADQFCUN8i4kZzRHQ+MOaytqit-8np0-hb80zHpr8X0ijyI7QSz3UGtgwM6Q6m0lp38qgBgvqfZ6EsSBXpKhg-3NmQ87f1S9t89DkZmTaGytCKfJRhNdtABJtQhbqSlxTGhyzgm+7kfCJ3EABkVDhOkvHo-8m86gjFbX97xfjVE+izQiJIaJDjLMegtT9o6ORxjpSrgAhdIppf$T8j+r2Qe46a0rvYQPg4jb9Jg1q2xF0AKn8kGgS8+LOtg1thJyH0dfDZXSZhbK0iDi6nRX0OLk1oizUNaBxYZheHAn0JTA+brmFeHsR18b3joQ7LO+ze0yfaG73Pr+nhDJ3CE81GOVAt7Sebv$psiRfxHjI5tRTORQiOAScJJZCcjJrmFAEf3-fbaG6SRhp7GiDko-5VgmFeJpcjUjcG6MMWp7R97PNY5C89c48FqiStF5ztAMDep9dMBUBbIIPfszBl7b58Ptpa6aCNB1f9ztglfkSsA-UNRyc$ZvO1iqeRCCZ3fpvMcmTURR-gXZqheDC9fIvK6e6qDovSv8$RA5Z-IrQ+Ht93CJ5K+2mIZ27m$vlqB$6lO-Gw1bNzZw6nETZ5SipR3oJQsF7qQFDeyqqtAmyZeKqegt9of6ry30Q3iCN0o4mMOstFx+CGGoK1TI88HrUBR9olA0sUeCz6AN4v3txEvSQ$DsC4bmtotfW5UJE1FGPFglPW7MizfUBH8zayy0iCjCLoABGByPfeJy2aYiD3yknEHJigU0iDe4dZ-R4QEIZxrUx5p+41FRA5OfTmUY47JVvlbLfDw8pcQS81emYz3BPQ4hdUC2o+r+Bga7me05DBEr$tRY4HJ0fASwSCjDBfHostx0JMhFCtcLd-4tiWrmFA6pGfwR1ggrREl9zliBswMe6E5M5DOsobaGw8dG8UK7JVvQs56YRIHRqel8S+SpmSgt4-f$gClX0MZG7S4UABhgZ1EjstcfxY-wbKRXYxeCfiJTSBZrfCGJWQ13b2+IRBn-77xlV3LSFied3vpp1ACklwRLj0IoO1ORt3jgS5vXI9SnfFG5tosPW6Lezyrh70A9s-2L7gvOG1GxnF17z56CelD0bdPi-$yjHPsKAB4d1c5maf+oVAlfQ-cTs4jGoRYwwvA8N75pO4LVPwZNGOZz4ev580p89DtE84RE9AB7cz2V6KRsbeGUdi96wovwj0h--SR7y2ivN8wyrmhvh7QlENOBvM05Tp8cmTjPsmgchidcHeR06BT8CtGV+TdK-RBJMcjG$c5iM-eZAOv2iWpPd2jhw4MH1Cd4weTNr85MrTiIIk+VHBwAjFTZhSjs5HBwhAXTZhoAdCHfYTj-TOTeedPjRZW-WOsB1oiLHOo5$-hMkpzqV-Mwo-QBinU0AtUJBARpyxM4koQCEw7rwFD-cfiVH85+ghXkL2no-fS5nrtDATWWiL-i57$JsASHeeU-i5m$BDbSH1s+PcjF6lDxS-79qM15k$JwM3+RDh1kso6asdv2d1m+PsDMrTZtHii$-d5GrPlFh+qsU-PsI6+2xw50CU-v5vM0vgF42e1RmFi1agHGHWyD6ksR1$X3+2iiC-Tsz1JMHEFYeQM5KO12dkEQpdI-U0y1txx-cpddCvEh-mEP5oIiQ8VG9mfUsy4geUC2K1m0XM44XeORyRU-Hy39Q$s5-WK+Aw806GXiME15Kz1ysSH+YvCQKbzYCelc6W4CxpJmcwPHfJ0V-roemJw7jye53PnGjdr4do4tYKRasNAQNsiHjYs88wq$0bscGrVoPXoH$a4Mg+pxd8X4FMX4xfQmiCRxw5dmwirQdiUNXKRj$oO61CdTM2o2m+23r4Fe4ZXKvz$Bds+4UJRz20VjSpgFmwQEm2Bm$BZKHbSxPG0LO3KMEdQ6kUCs6SI15pKcz7PTpeGn5CG-4ELZm8x6Q95Zz$xePOgrmWZfFzODY1R3nM0tl87x6sf7SUAHKv+0Byv3QROtb$8G6I$W22vFQ0M3e7tyWTSlOSLjDFtFoXQys3-XpKq8d31fG888OlEYQ36TFtv39U7G88fM93GDCtjFlt3mYvqhaIkPdSGZr0kjHnDiUMy7Sd1TAhm6e3dfXQUt7J3ZS9U4l4R285Z888GsSA8T88A93AI8XSk0A37hd26lge6UiO1hpCe9+lJSp32AysyQvalwTTZJeeS836afp8ZFS8fxf8Jt88AUoYMaF8PvK-FmDQ8QfYGXFltd85yxR$FS-FJ7MPcKYdaeTw803zCcEf1axtbFS8KE1aeT16zIAQ7Uw1aKZp858KxQt8V$ETn$KzK3fEW1lp84q8c3eH5Yjy4Sf05ZDUFSf4$NTXFarQ367lvyYtVO2ShvCY6S$8Slm7MFm8p60$M3-3Xegt6pft-XtWOoSCWc$8qfCG8LV5bTz2fBH$8U83kvt881af669q8$3tRY9RlH3MRdnyaNp3H$aGaqSRI$Jx8-lZt4hF1yl5Cmw9KZl+Q+bIe18eAYBrBxEIs7HU4lLwhhatzY6K17$khMG682M8yYQ31TyhrJbxH8Di$UXT+R$Sg8QDdlHSnL+6btm26Zfe3oON87J-9U+8GXH+A86Sf363fE3oZ5kZNKtNwv7GsG+VMx8pvM4L+zS5kd6vIy91jyQ3d8rK9p8Q8RDGLc8pbKqDUqa3nf0Kvs5ZKq8a39ttwx2DvJQDYt88ZSWWZ9sXHV0XHx8EWaTQTOh08V8M6f0$RT0IM8B2fEWDtgTT+5zhGfr3W888coZM88"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: S4YFa5BAxAjQcQ+XfjOnLg==$k6G7XDdsR2fVzZ0o/GHxWw==\r\nset-cookie: cf_clearance=dGdmTblEfHSL1MQpc_9QmjoBgACNJEyGS.K3zLjVgpk-1775831606-1.2.1.1-DafpvIT6fsA64xxLxwIbjEXDVYjtdgvzGB3UxjXc5YBUY0Vx1wEJ9SN8fla4gFNprNcet85rlZFgM2Rtk8PJnaZgnuv4EwiHSiBXriFAOIUWyM6OlWQBx2fzkCtyEd1KEWivRV8xtc4vIvQh.ZdJZB0rXujwFTa0omGmdPXmruBAFMZFKy6yLGj3W7SO5qU_.OIKyV3v55JcDVhA4.gIz_7zjU8u.3BTBOQNBHlWV9oRva8OpqjqbuL6CgxD02hTfBMDxoCjlLwc0YaoXIw.KKKbV8UpDrq8l1f3Ein_M6MsQkG1b5q31jSkWRr_tHl1lCxYOvAa7EdAQyFfU2egDQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=yalla-shoot4.com; Expires=Sat, 10 Apr 2027 14:33:26 GMT\r\ntiming-allow-origin: https://www.yalla-shoot4.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ea27776f8c756c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=ghImAVYA1H19MaRlwwiO0QWuDdsyyZPQ4pXa-A","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"GET /api/index.php?q=ghImAVYA1H19MaRlwwiO0QWuDdsyyZPQ4pXa-A HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nsurrogate-control: no-store\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79527,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"34403bf9dbbf355c073f9eb8f5ad52fe","sha1":"75b83314404c2937ba1f150398f6674937ff79ab","sha256":"38393f6426885a3ca7c93564e0c80942d10402f62bc40065b19418822b9a5bf0","sha512":"7f9c982e7c180980202f6073692a1415796764d62ff18a7707bcb1329f7aff7149ee824c8d964314918cc16cff846b2c7f7c345b772fd017b9faed96b4fcab0f","ssdeep":"1536:kykn1g0TMHm0SuWCraX6y4n5/KSdK95N2mrKcQ:oG0TMHm0SuWCrS6y0/KSdK932mrKcQ","tlshash":"1a733a9cde6ade48ef40898095fc97c693ec5745da8f1bc1e94e02d4252f296e0fc878","first_seen":"2026-04-10T14:33:55.498754Z","last_seen":"2026-04-10T14:33:55.498754Z","times_seen":1,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":143,"dns":1,"connect":64,"send":0,"wait":266,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 119730\r\nexpires: Wed, 31 Mar 2027 14:33:27 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im%2BscIbYlzg%2BTrbfueJqk3SDyfkjqKZMJI4BvNrbov%2Bydc%2F%2B1Kh7fnHOKPpKO0Y%2FUfCk59YJQ02LLawUtsRuvQjnx1%2FTicJ%2BgUGAtB8sMUJUPSlUsnSJaVWkQGmrV7xTTNXIBFiZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ea2777a4a1f56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T19:43:47.077084Z","times_seen":34354,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":20,"dns":1,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/gg/","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /gg/ HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlink: \u003chttps://www.yalla-shoot4.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.yalla-shoot4.com/wp-json/wp/v2/pages/349\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.yalla-shoot4.com/?p=349\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUVTLi8DhyiCkQe5AaV5jiwOQGegYxdHswuIxLRgAaQib%2FrdjKmoX%2F2EoXJZ9R87IV%2BwHjtYZNwXb%2FrMLj1H1nsrwZ9oaYB86I9mPhvyXsj9tll2Tu6TQWWuZ911%2FVk4dd%2ByAjY17g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea2776f9e0c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":48655,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"baaf8b99a4a16daf8da9e13132bd994d","sha1":"846e7caab1504a564e314855d6f5894b05b3e25f","sha256":"8b87b743f5dd5098feb797da1a3a8319a32b9e9d660c8b93c778dfb90070fc9a","sha512":"a47d429e53f0636fb7c9ee119c8d7aa34e70e1c67c291aaf2d520acd0966e2b349bd9e1cbe69f8d50b48b3e29788553dae35927cad62a43aae82f553ce74c30f","ssdeep":"768:DNh9ZdypJM1gPOOA+G5dRgdxGdElxa+Pj2Q7NBx/k:7VypOVdKxa+r2Q7NBx/k","tlshash":"692376b172a040333ebfd2ad80a16f0afe45a507c9879e80b3ed9b555f97ca3195312d","first_seen":"2026-04-10T14:33:55.500663Z","last_seen":"2026-04-10T14:33:55.500663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":64,"dns":47,"connect":1,"send":0,"wait":187,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gekeebsirs.com/tag.min.js","fqdn":"gekeebsirs.com","domain":"gekeebsirs.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gekeebsirs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 14:26:48 GMT","end":"Wed, 24 Jun 2026 15:25:36 GMT"},"fingerprint":{"sha1":"A5:C1:27:43:37:FF:2B:D4:CA:F0:41:D8:34:F9:0E:CA:FE:72:C6:62","sha256":"B5:37:F1:2A:33:9D:B3:7F:15:BD:5F:4F:27:E6:4A:94:36:D1:F8:AE:06:78:4A:FB:26:F0:37:52:4F:76:33:50"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: gekeebsirs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 2dd018babdd8a69ecbabff70b7ab1ffd\r\ncache-control: public, max-age=3600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1006\r\nlast-modified: Fri, 10 Apr 2026 14:16:39 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4B626d6tswVK6lhEV6Z7IJEsAYkKRhMoODyajOYGOBv%2Fit9EjFjvvoHyb7GLdHFpB8jlRkbeDVEMz9L8dd75VEVGkXuveExc%2FeB543oIt%2F%2F23IdjNxqm1GRKDG6ALAx1g%3D%3D\"}]}\r\ncf-ray: 9ea27771686d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107646,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da9319ef8cea26ba244e2abd1f12e5d9","sha1":"b5820c62118863db31cd09466e727c80a22bfae4","sha256":"c3cef5e6bcff82154ec8fa7279506c4a0cc687f81c406058a1183d5383365d4c","sha512":"02a3d66a6e28b80696a74a505d81520b618c6ebe9093fd3e51f06e1bc1a239e2d8d43da1f05d913ad0f6c09554fc9f60577f820e043004919a8fad5a138d38d3","ssdeep":"1536:RM8AL/g1vljcofRXSiK4KymJ2XfjVQMUWF8DmSD87ewcC/0fi3bcZ5cO:RM8fvljcohKfJlSN0f0IF","tlshash":"bdb3f79e33b37055029f82f6a03b4d2eb5a58ddb98cec3a4d15575a63864104c3affe8","first_seen":"2026-04-09T14:22:33.166558Z","last_seen":"2026-04-16T09:18:21.620364Z","times_seen":190,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":55,"dns":24,"connect":1,"send":0,"wait":12,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/06/cropped-download-1.jpg","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-download-1.jpg HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5183\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Jun 2025 14:56:09 GMT\r\nexpires: Sat, 06 Jun 2026 16:00:46 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 253959\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZK9Do7H4YkB7dM6c%2FNLvJy0X5fZTxsIfknM8hCpvJZPKgydJ%2BZCROSdId2L5tahN7ofLwJMyxR%2Ffkq3GD0yceCyJqiOA4rWkNqcVWJkd5JWqRYwMg2saItVuP7rAWagupnawW%2Bdyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277722c0456c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 168x89, components 3","md5":"98f4934e841efbeff0850583ec275b01","sha1":"8a560c3dc494ad8cf320d920479fd297cc52b019","sha256":"656278e40b8e9044eb8a4a8919e0418855eb279cee984d4072e8e78c1b437635","sha512":"2940dd31f17ad4c846361a42b9175e3311db8cd4a058914ca16c0dda0a2e7aed12b68b00cc0a5a3da060d5003c9072e6ccd4070f329fdee145d5b4a5108e198b","ssdeep":"96:/SEWVdQxo0k7lZl2q0Du8XnkUcvrqO48/Q1u8f5C+W+GCymK9UhW:/S3S2n7Onq94ogxbfyr9z","tlshash":"c4b16cf7e7309771e9244de54876e1b050ca2aa9789099001131e7e3891abed3d96219","first_seen":"2025-10-13T21:22:21.734073Z","last_seen":"2026-04-10T14:33:55.502281Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/js/AlbaSport.js?ver=14.2","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/plugins/AlbaSport/public/js/AlbaSport.js?ver=14.2 HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jun 2025 15:05:07 GMT\r\nexpires: Sat, 02 May 2026 16:13:58 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 685167\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MOJNzGU1xgqcez61Y1gElliu9wag2kjA21ZlAcOMmCfazD9oRoDiccvUi5B1zM5cad7LOJ1EWEgjp9LX1Lj6wRPm8j46yPYGze1VcOVI3XWcG3gt9619pfhvm3ZrIosx0L1WrCSFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277725c3b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3430,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3430), with no line terminators","md5":"ca7ab15b9175cc3afff43d6a0a9e2958","sha1":"0d6fc4be989592cff2ce53aefd243bc91ef0a90a","sha256":"80ee84618704d2f695ca273805a9b21eb0109ca0cebfad93431ce989763c8331","sha512":"f02c1b3b5de1fbbb549bd752de4241d8e808873df6001ba6bbf02d9a7902457e56baa16fcb72151ef65cd33495cef58951f71a73a350338429ae7400d5beaeec","ssdeep":"","tlshash":"7d612524b17091a71fffb1a924bbfa45b9527d32c410d240a4abd2f04a3adc82237f57","first_seen":"2023-11-19T16:01:30Z","last_seen":"2026-07-11T21:31:46.756064Z","times_seen":46,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Bold.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /ea/droidarabickufi/v6/DroidKufi-Bold.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yalla-shoot4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31544\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 23:04:17 GMT\r\nexpires: Sat, 03 Apr 2027 23:04:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574149\r\nlast-modified: Wed, 13 Aug 2014 16:50:04 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31544, version 1.0","md5":"4650b9f9ddfc876d3fde0a9663539522","sha1":"7dc2e4b8c259f1bb4d98ec64a39645373d31d71e","sha256":"31f02fb9a8ae77e5d8bb229bf73f473f783e8155042655926cafca211cd11c98","sha512":"a6120c8dd92790c4d8e06889e88b6068e38ded2ae3f17abc8e33267125bc209f0a770348a5d29858e5b58f6cb776b182af3dd58c6b139ccdaf8d9ba069f81b41","ssdeep":"768:+481wu3EzLzK8lu/S86MMWkKjjN/1Eoel96gN/KE9SoIzh+L:lkD30zKm8nbjZdEzhN/K8M1C","tlshash":"d0e20269d9895329d0593f72933bf988b95b398ac0a2865170e8f134ca3125f76ec0bc","first_seen":"2023-04-05T23:36:55Z","last_seen":"2026-08-04T11:53:15.050753Z","times_seen":971,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=0-NLfGLPoy2jwGYQwQ","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"POST /api/index.php?q=0-NLfGLPoy2jwGYQwQ HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kora-show.com/\r\nContent-Type: application/json\r\nContent-Length: 209\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":209,"data":"{\"eventType\":\"cloudflare_shown\",\"browser\":\"Firefox\",\"os\":\"windows\",\"mode\":\"cloudflare\",\"referrer\":\"https://www.kora-show.com/index2/\",\"token\":\"d997568a12f113c3751a85dc89e1afb5d11d8d7b16c7a9afbbf63eef81db0233\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nsurrogate-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-08-08T16:23:56.734678Z","times_seen":34447,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/themes/AlbaSportTheme/style.css?ver=3.0","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/themes/AlbaSportTheme/style.css?ver=3.0 HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Jun 2025 21:46:05 GMT\r\nexpires: Thu, 07 May 2026 16:00:46 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 253959\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hduPdrBl0%2FXF3EQ7kmLUXD9lqsJEvS4h4F1x9EE3R8cGtGRbfx6m9bhjwwdpzCCgSB3yVQEOVbBu4nR3adIHKXE%2B8qrIrjIqS6zGb%2BPxpmXijo7N4Ujpn3JCQWO399nqXyn70Px4WQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277722c0356c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70189,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65291)","md5":"4478898028668559f81602ddf1ed70b7","sha1":"87dd340c009b15b1076023b99c7ab1d04a3fc611","sha256":"37209e110c6f313fd429a7fc05dee742341b131bd58abde77e927c96a50b5612","sha512":"7e59260cbd22315f79e2bd2fcec26634d6f195ee87f87c1e3d7fde04fb60ca7a18ec780cc560d520894f7411e208494e90d2ad2455d07f4e346f9082282e915a","ssdeep":"768:RDXlMtMs18SmO1CkuO3SPi/6NUoe0ENM6yN26K2rYvVXQNfcQHtpTYVxHjWY:js8Sh3SPiCENM6yN26KrvV3QHtpTY5","tlshash":"ec631ee3f5e1160cc193820da0e17afc297fc549e752adeba9233b7587453d709a284d","first_seen":"2024-06-29T21:02:06Z","last_seen":"2026-07-18T17:20:53.594131Z","times_seen":35,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9YBFDDBGXK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=G-9YBFDDBGXK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\nexpires: Fri, 10 Apr 2026 14:33:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154999\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465099,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"f5813ea98980d9a1e76e33c89d9f23d7","sha1":"84514448afc5e3585788412585f5962371e62f44","sha256":"ea2dcfa1c3dc0477c4b46a71255a0cd0ec7a26ec967c1e2eae1ab4ac6b34fc6d","sha512":"d1a4505eff52721daf335fd9435787f6c2edee2741c7aaec0de4419783cfc0cc2244319bfffe5847da125a154ff90399132d39ce0942381b1455971db5ad6411","ssdeep":"6144:CESjtDw7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:oDw7WiJKzV8Fuw","tlshash":"c3a4f9ceb3d674225396f478903f018ba57b29e2b44cc899f189c8d42e7469a5237f7c","first_seen":"2026-04-10T14:33:55.508566Z","last_seen":"2026-04-10T14:33:55.508566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/08/8945.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/8945.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 11040\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 21:02:37 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=832998qXNV4c7ekwjY9uKGMFoUclVTFbiVQhDY8w%2FDugGmYZKHTTNZzy%2FPDw9aWk7LhDMTEQD4DpaQAU%2F0K0m7V3nKY7z8daQdNAdsQo7HorwjM25Rwx%2B6AEx0ECM8TeN19lD9xmYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277724c3056c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 163, 8-bit colormap, non-interlaced","md5":"8f9ae4245f3d78fd8bc28bfa65246e9d","sha1":"2eed31cc9b9bb24c2f7d6a2a7924af72970028cc","sha256":"1d118479908e5c6c0768d17d1d5ce904f2aceddb70b3cf048bc51717dc0fe059","sha512":"b2f6295dbf1d345a952fe8e57e31fb5cf5f17a9d11a772cf4a15cfbc043aefafcd563b0e0d4181ffb16f1cd12524b97a513b3501c51d03837985e0847268ec1f","ssdeep":"192:kXrsJUuYSCZ0Ig/aqMeQuQ0I7okSup+CjUdxcr1Z/MbUE48dyRhvT:etoCZNgyqM7D3SudUdxa1ZEbUE7kT","tlshash":"ba32afb84c3c4ea56a331d3ea705995a44393884bb7f4413af0647604e774eda175d2e","first_seen":"2025-09-19T06:59:09.689706Z","last_seen":"2026-04-10T14:33:55.510231Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/img/com.svg","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/plugins/AlbaSport/public/img/com.svg HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/css/AlbaSport.css?ver=14.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jun 2025 15:05:07 GMT\r\nexpires: Sat, 06 Jun 2026 17:11:48 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 249697\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BSlB%2BxLfQvS4KLTLs3jY2hR49O88BInDf7FDd8PDtUJzOvzZQyMkYFda%2BYIXvwpq2FTek0DwK2GnYc6o0114kFTtd1n6sSy9zF%2BuRzEbS5f%2F40DqnWhEFCgT8s7P0aOqUx%2FYc8Gcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277741dbb56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":754,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5e4576e5671eeb983827942471c6f66","sha1":"eff0245c188f668b63b650f8dfbb378b4b53a50e","sha256":"bc567c997abd62a245f8a83d82f6ecb6da56f7e40d814e8db2d1ed096228c674","sha512":"aa2824cd5187305536ac0d808a0a341f49fc3109fe9c982fe7f0873dc53347c44f237d522d537df82a6a37ccfd172d5f04f357943d8968f828f4710ceb43f7d1","ssdeep":"","tlshash":"bb019c10e1153b3d56c21e91ab50572889cef52ff25481dce1ac2af270df37a5be7990","first_seen":"2023-05-25T15:35:25Z","last_seen":"2026-07-11T21:31:46.745114Z","times_seen":35,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/wp-content/themes/AlbaSportTheme/style.css?ver=3.0","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET /wp-content/themes/AlbaSportTheme/style.css?ver=3.0 HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/index2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2Bq2S2b1CmOPDabE60v8J6Rpkf9UPDOH2ygTIBlii0WBOtVTQXO7HTw6tHKQlFtW6c1d9pg3ISanY76JxjzwEgCDRNkg%2FV8QsFxUTA%2FBjWkoqmOMT%2B%2Bg2xvr6VQT46FSZLLUBQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea2776f2ef6120a-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nexpires: Sun, 10 May 2026 14:33:25 GMT\r\nlast-modified: Tue, 15 Jul 2025 15:42:21 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70189,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65291)","md5":"4478898028668559f81602ddf1ed70b7","sha1":"87dd340c009b15b1076023b99c7ab1d04a3fc611","sha256":"37209e110c6f313fd429a7fc05dee742341b131bd58abde77e927c96a50b5612","sha512":"7e59260cbd22315f79e2bd2fcec26634d6f195ee87f87c1e3d7fde04fb60ca7a18ec780cc560d520894f7411e208494e90d2ad2455d07f4e346f9082282e915a","ssdeep":"768:RDXlMtMs18SmO1CkuO3SPi/6NUoe0ENM6yN26K2rYvVXQNfcQHtpTYVxHjWY:js8Sh3SPiCENM6yN26KrvV3QHtpTY5","tlshash":"ec631ee3f5e1160cc193820da0e17afc297fc549e752adeba9233b7587453d709a284d","first_seen":"2024-06-29T21:02:06Z","last_seen":"2026-07-18T17:20:53.594131Z","times_seen":35,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/wp-content/uploads/2025/11/cropped-download-3-1.jpg","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-download-3-1.jpg HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/index2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5983\r\npriority: u=4,i=?0\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea2776f3ef7120a-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\nexpires: Tue, 09 Jun 2026 14:33:25 GMT\r\nlast-modified: Sun, 16 Nov 2025 22:01:58 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bj5zhCGf1r55eNdhhqzidooCm2%2BTOe0nLd7I2SFYF3KveRTD%2B84%2B6j%2BKZrKwtDdL%2F9P2uEXwQi32gYlPEacfikcos3e7LqcHGJ6qil8MgHQ%2FTGwD8dhEDQR7i%2F0c%2B3PgopCurA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5983,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/625261456364/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ea277746e3656c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27294,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=mNh1L24IfOeYUzTapA","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"GET /api/index.php?q=mNh1L24IfOeYUzTapA HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kora-show.com/\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nsurrogate-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"429d649c32e2a5f3c7724630e380d4db","sha1":"7257edd415646962770f9b9611e5344010d98f7a","sha256":"58da6918d7da27db57bba71f44beaf7974eb4f9372bb2a8a253afbe997463f44","sha512":"e26225ad401a0df066fbf9fb4f8ce0812b4b0883c647208a05a41d0f1527738ffe77ae7719d48eb89d3ba606a8181d0d036e95c5f22b4715ebded6219f0f3edf","ssdeep":"","tlshash":"e1f0dcb81de57c028983ce85648c1181351e45c972c3989a0a5f4c5586a6c6eca068f5","first_seen":"2026-04-10T14:33:55.514094Z","last_seen":"2026-04-10T14:33:55.514094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":182,"dns":31,"connect":59,"send":0,"wait":76,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/wp-content/uploads/2025/11/cropped-download-3-32x32.jpg","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-download-3-32x32.jpg HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/index2/\r\nCookie: _ga_9YBFDDBGXK=GS2.1.s1775831606$o1$g0$t1775831606$j60$l0$h0; _ga=GA1.1.831685522.1775831606\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1382\r\npriority: u=6,i=?0\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277759fb1120a-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\nexpires: Tue, 09 Jun 2026 14:33:26 GMT\r\nlast-modified: Sun, 16 Nov 2025 21:51:17 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOKEWbR9RxAoSHjJ1tIFJgVFZTW8wLr9CnRv1rB4jnwkHl5mjIDIor7iSLodvgJPKpXEXoE7XLM9dCY0TztA6%2BIlBGTMmE%2B0PzZKjDxpjQIVvRZtywr0lRzXHCQbgUclIHFuoQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1382,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.kora-show.com\u0026size=128","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.kora-show.com\u0026size=128 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kora-show.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ncontent-location: https://www.kora-show.com/wp-content/uploads/2025/11/cropped-download-3-180x180.jpg\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 4164\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\nexpires: Fri, 17 Apr 2026 14:33:27 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Fri, 30 Jan 2026 21:58:27 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3","md5":"078a2ccfb6d3408d3767c43426d0dfeb","sha1":"35c4ee933636d897d3dddcad8f99b359401e3aa6","sha256":"177fe25d8516bcede4dc9d7a05d68a5cd01002d7a8c5f02f59cb0983c35d4168","sha512":"0b51a30b4af087cfa22ede932a218c728a0bd4080262388c96b03166d5eae81728bce46a759e01e304e0611ae56c8e4d0e952cb04d6adfab45521a8bc1020daf","ssdeep":"96:ohpIxnnxpmkxUHWI6UxXuNTGGtkIUEjg6/kL11ETxgoXnQJl:oAJnxAsXZUXuNTGkwEjgj63QJl","tlshash":"02815d2ace516663880976fbfc971117761370927dfc4ee5a5c190ec8cd4a94c824cda","first_seen":"2026-04-10T14:33:55.515319Z","last_seen":"2026-04-10T14:33:55.515319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":39,"connect":20,"send":0,"wait":44,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/07/8593.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/8593.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2244\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Jul 2025 08:43:40 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3O%2B%2FotUu1tAZcH%2FRyIAs7sf8TBWx7T8SCgj5%2Fvle4wNaQB9C95mWEgwEtBRO5yacAUqSLWqORCNR8jto3YFpzqRa1jpM40aKnRN4bux%2Fd90pUwxOBsvzfD8ShGNu6t8sLFyBlJJiBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277724c3156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 122 x 164, 8-bit colormap, non-interlaced","md5":"537c900c912dfd2c46772ee46a11d46f","sha1":"4bc23a0f91e6701eb881764217bd25d9b7cb6e8c","sha256":"f816a01df8675fd2e6f2c33d0b7e7cf46f0efab698c3445f4a5528df95cb77c6","sha512":"bf1e43333b2af27e197f5b47c536922b9acddd06639962f81957ff86e43b34388bb2997586f73fd535986295db90e956c1bff4b477887f73a694983a15357818","ssdeep":"","tlshash":"e7415e007fcfeffeb56c2151f2a0a452f8b8c825452fcde77d7a65301093659d6641a2","first_seen":"2025-10-17T19:55:20.512028Z","last_seen":"2026-04-10T14:33:55.516227Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kora-show.com/","fqdn":"kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:33:24.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.kora-show.com/\r\ncf-ray: 9ea2776a989c0b41-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-redirect-by: WordPress\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHjb03qAq6wBK8OunBAW8vjpa198GrQkGWa4b0QVurvuBnUgNxrx9eB5w5zuz4abLQAI%2BC2otIxGi%2BSQgSSBu1P%2B23S%2B%2FJkzhx0rtjAlq0jM8VteXMx%2BSu1XuVHrPOl8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51016,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":170,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/css/AlbaSport.css?ver=14.2","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/plugins/AlbaSport/public/css/AlbaSport.css?ver=14.2 HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jun 2025 15:05:07 GMT\r\nexpires: Sat, 25 Apr 2026 13:57:08 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 1298177\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99cs4XuuURS2frQz3VrxF9SybN3ZwfcqohtVbxcn9WVW1vjN6aHpjqaUpe98h9u88vNM8JgIktTG7EbUaI8zRf0p1XHFG3D1xRJI3FO6Fkk%2FQdrX04yZCJV0ogmmgxRhk1D1j6fjXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277722c0156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":25918,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25879)","md5":"51cfa341b2f628405d60b12ae3fcff09","sha1":"9a632265040586f22a26b91dc4da0da456d61ead","sha256":"c4c6e8b61d91ed81b84d69c07da970f5dfde2c395fe2811060ccb0447b59fc57","sha512":"b1ec2a6da066583d0ed8f3502d73316bb6ee6ab140b2e52af1725f6577257645ebe644adf5bccb36e413029b47691b552617d63e7b8c042ecbdb4ab3801445b4","ssdeep":"384:43NkR2SWJG3y2k6FoYdn79UepYIVvOtF5IBGws:43NDSWE3yijbpdY5IBGws","tlshash":"8ec2943152e1903cbe2bc6a7a8e07acfb160b013e212535be52ea775d4876d653b374c","first_seen":"2024-06-29T21:02:06Z","last_seen":"2026-07-11T21:31:46.764765Z","times_seen":41,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/10/484.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/484.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1147\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Oct 2025 21:13:50 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkQB1HbR2HrFHNcQA2dyA35%2B624uoZ7VFJrCMTxEOW2sC0MpNSX66YWOs%2F22Xd4B%2F0j80VEDxl3t3FjUzi9fyUb9mi%2BYHt3d7nUNqh8O%2FvAXeOtVLeMPdTzxlp14MWfeKKSCvAKKrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277723c1956c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 164, 8-bit colormap, non-interlaced","md5":"4df535dbe69d42dbe22dec879a2e0fc0","sha1":"a7c0a4d60920ed8100432c90b86269ddd1bae2aa","sha256":"eb9d0c2fad76d94a88860a0310c86f2add56b14270be3b3a0a35964e5fc486f4","sha512":"bcc39d5c67605be6dc7e1cce8b81c846001058f98678bf1f1fd47db9e514dd0434022ade5e92595038f4f85cd5401e50fb71a93bfd0bd82ce30187efd35be3e4","ssdeep":"","tlshash":"492196df1ada0abcce317875caa53f36022d2399405bdb66d1620c91979059df248f83","first_seen":"2025-10-04T13:50:19.986551Z","last_seen":"2026-04-10T14:33:55.517972Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/7805835/?oo=1\u0026js_build=iclick-v1.1764.0\u0026userId=08031487b2094478f9b78c6e086a1e2e\u0026dmn=gekeebsirs.com\u0026tt=2\u0026ix=0\u0026tspl=1291\u0026cslt=34","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:09:05 GMT","end":"Sun, 28 Jun 2026 05:09:04 GMT"},"fingerprint":{"sha1":"DE:6B:DB:E4:3B:CA:D1:76:0B:71:39:66:E7:61:FC:A0:DE:EC:0C:75","sha256":"F8:AD:B9:43:78:9F:5A:53:7C:3C:43:A4:F4:43:5C:71:83:66:EC:0F:33:A3:DA:92:60:0A:FD:46:74:01:42:16"}}},"request":{"raw":"POST /5/7805835/?oo=1\u0026js_build=iclick-v1.1764.0\u0026userId=08031487b2094478f9b78c6e086a1e2e\u0026dmn=gekeebsirs.com\u0026tt=2\u0026ix=0\u0026tspl=1291\u0026cslt=34 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3472\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3472,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":true,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://www.kora-show.com/index2/\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://www.kora-show.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":84,"dns":26,"connect":26,"send":0,"wait":29,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"b7510.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=TqrnBEgMtMytpFwfiQ","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"OPTIONS /api/index.php?q=TqrnBEgMtMytpFwfiQ HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kora-show.com/\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nsurrogate-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 00:37:16 GMT\r\nexpires: Sun, 04 Apr 2027 00:37:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 568570\r\nlast-modified: Wed, 13 Aug 2014 16:50:04 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31248, version 1.0","md5":"436938da6ed799ca17110e719e4d2e51","sha1":"b7ef31b6085a9f0963dffe7939abca527724d389","sha256":"a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2","sha512":"7e4d6769197b05994e2ee2d8570e66d235a5322e8250179f97e501dc6bcd7c0d5f9f07e270670977812e9d72d652b736ef5c81c587d180ead66cd83aa4a10f99","ssdeep":"768:FJtbpWa4AHdCpfyRcVsjmk4h348ZOtsQivESLbxl:L6nAHdC86Vs6k4hVZvhl","tlshash":"b6e2e1539eb17dca103a71f14ed1be97c5c148729229a9741ca7b4f820ce49b72fb287","first_seen":"2023-04-11T00:32:28Z","last_seen":"2026-08-07T22:22:10.445699Z","times_seen":1534,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":133,"dns":3,"connect":20,"send":0,"wait":8,"receive":4,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc-mainnet.matic.quiknode.pro/","fqdn":"rpc-mainnet.matic.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"132.145.155.63","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matic.quiknode.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:00:00 GMT","end":"Sun, 31 May 2026 18:59:59 GMT"},"fingerprint":{"sha1":"02:83:6D:DB:CA:18:CD:B3:5C:F5:94:9D:AC:8F:3E:87:CD:9C:DA:DF","sha256":"98:DA:12:2E:FC:0F:89:2D:D2:11:9F:81:3F:A0:62:53:A5:75:D7:97:B9:13:44:7A:9D:19:C5:66:C7:43:B1:FA"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc-mainnet.matic.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kora-show.com/\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Accept-Encoding\r\nx-node-id: polygon_matic_iad\r\ncontent-length: 0\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":251,"dns":43,"connect":92,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\nage: 2964712\r\nx-served-by: cache-lga13622-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 65601\r\nx-timer: S1775831606.143050,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-08T19:41:51.94889Z","times_seen":142309,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/wp-content/uploads/2025/11/cropped-download-3-192x192.jpg","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-download-3-192x192.jpg HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/index2/\r\nCookie: _ga_9YBFDDBGXK=GS2.1.s1775831606$o1$g0$t1775831606$j60$l0$h0; _ga=GA1.1.831685522.1775831606\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15256\r\npriority: u=6,i=?0\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277759fb0120a-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\nexpires: Tue, 09 Jun 2026 14:33:26 GMT\r\nlast-modified: Sun, 16 Nov 2025 21:51:17 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdTf1Kz1GUx9gzSZnovNl3PxrBiaPU0OQV72YjAVmBM%2FjPwRh%2BPqy1nwFnDdnjEoFpiel%2BFeA1k8XdQk0W9Vs99kcxiEbN1FIAM%2BL%2BCfE5tjav8%2FKKWwP2JIjVf7pKIU8S0gOg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15256,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?sz=128\u0026domain=www.kora-show.com","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:39:57 GMT","end":"Mon, 08 Jun 2026 08:39:56 GMT"},"fingerprint":{"sha1":"44:67:F3:BD:1F:DC:02:1F:AC:C4:43:AB:AB:44:EB:51:01:F4:F4:15","sha256":"5D:32:31:96:9E:E2:EC:38:9B:FD:69:CA:23:54:58:F2:80:BA:E3:D2:A2:C8:B5:A1:17:D0:1F:09:7B:4D:1F:2D"}}},"request":{"raw":"GET /s2/favicons?sz=128\u0026domain=www.kora-show.com HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.kora-show.com\u0026size=128\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\nexpires: Fri, 10 Apr 2026 15:03:27 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 338\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":4164,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment.js/2.29.4/moment.min.js?ver=2.29.4","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/moment.js/2.29.4/moment.min.js?ver=2.29.4 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16837\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62c614dc-41c5\"\r\nlast-modified: Wed, 06 Jul 2022 23:03:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 212251\r\nexpires: Wed, 31 Mar 2027 14:33:26 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAbJmOeX%2BfD3kdgIU0QU8IbIphfpnxf1%2BnZ6Hq2udy0ZUv%2F3bR6nSFqTUEdm7z8gpmdXisu14jeNKTLQL1GE3FoOrffL4yva%2BKTwKDL17o1yQLlwD55eG2RbGbcLwfEkGB%2B5EiW%2B\"}]}\r\ncf-ray: 9ea27772984d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58024,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58024), with no line terminators","md5":"99d33210b6eb23cf25fcd4ab7cfc9f2a","sha1":"473543a8a80fb55d800d4356864b9491ba819cae","sha256":"081737985335af4be15fc676ed4ccc0703c7446c6b5cbc9317e40bcdc6428e5d","sha512":"f87e222e363726c2a217657a377eba8a7e484078f6b84b0657b3e9fc645c9b47e7efa68f024e55f3107a9fc7d08614a89d3a935ecfe4945cf80f41889fa06bf6","ssdeep":"768:H9LqJUvlg0L4IhCiFgAOckHUU/aIkk/Z1LH/4GHlrY+5i:deAlrL4WvOciBJZ1r/4WlMn","tlshash":"9343a3ce3546b112576212b5082f480be33e6999680e4d1cf508e9e97d79c6e42bffbc","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-08-08T16:47:21.210922Z","times_seen":3330,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":18,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.43/moment-timezone-with-data-10-year-range.min.js?ver=0.5.43","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/moment-timezone/0.5.43/moment-timezone-with-data-10-year-range.min.js?ver=0.5.43 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 9732\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6426bd50-2604\"\r\nlast-modified: Fri, 31 Mar 2023 11:00:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1290935\r\nexpires: Wed, 31 Mar 2027 14:33:26 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HXFENlP2ZzcNfbpM%2Fu5CLNQufZlwRbzwitI186dGmXeBlq%2FyLhhpyLYJCzuRm%2BhXs5VwyhdUICYhPQ0P7mGRocUJF%2Fjp1KRt%2BWgq9cW3iJz8d547rr4kOWmRuFtdVRYTGrWnW1M\"}]}\r\ncf-ray: 9ea2777298634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42195,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42195), with no line terminators","md5":"a365b61955be78da13c648270d7f1729","sha1":"78817143d00e9cc69ca4106391b5676b294b8f3b","sha256":"4541068197d1c1139b529987b03db202070cd3df77a20ebde2edeb6e96d83144","sha512":"cb6798ba9fa6b157102883e06c2f6cb65191c2966e54505f498eae6af9e9c4bf91cfa895191491cc230b15b79dd0430a83a15bab9d93995c0de823ee3477072d","ssdeep":"768:gwKn9NUBkzCLkFaDCDgZD3500kvmdM8O7W4md:+PhaDCDEJ0FvOM8EHmd","tlshash":"3913fe814126355a96d7c017b82bbbc560a6d1099ccabd872fec07b3c960ec1fbf3916","first_seen":"2023-05-16T17:51:35Z","last_seen":"2026-07-22T17:53:56.867075Z","times_seen":102,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":17,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/js/countdowntimer.js?ver=14.2","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/plugins/AlbaSport/public/js/countdowntimer.js?ver=14.2 HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jun 2025 15:05:07 GMT\r\nexpires: Thu, 07 May 2026 16:00:46 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 253959\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNtEcGRMkwk42xHmK9nBFaWGAq4RQ1SLfD1o58rsv4HlMTDH4X8nntJ%2Fyq%2B%2F73Wes2FFeyRli9kjRb9FHdmJhPnQ4t4SAGm6cS8hqvqhRTaAiwCwd7pfvJ61C8t5d3RP3FFdbU1Prw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277725c3956c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17754,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17754), with no line terminators","md5":"81105385e5616805fdab6bb80e1d56a2","sha1":"09bb412e27aa2bf6cd06e3ed8f73100fdf7f33d1","sha256":"e5da99a8d4dfec19b3fd9a8dd7fedf5787e21d18645a9520ea5a785c31efa91c","sha512":"e09fde7b754d73e280280dfc615133b57419d9516e03fcb93bf362bdfc63bc9db3b1e45ab92933e046a4c70bb743b964876e3f968bdc7496cdffc85c3b148010","ssdeep":"384:tpybp9pkdpvlSRX5frOH2THpfNfWB8B/0LRD+M0ZhH5jA:tpcp9pebW06MUA","tlshash":"7782eade628260e0acb7d5914b0f37060501b32f7db72d0d57eaa8d4391ec87d196eea","first_seen":"2023-11-19T16:01:30Z","last_seen":"2026-07-11T21:31:46.774807Z","times_seen":35,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=TqrnBEgMtMytpFwfiQ","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"POST /api/index.php?q=TqrnBEgMtMytpFwfiQ HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kora-show.com/\r\nContent-Type: application/json\r\nContent-Length: 134\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":134,"data":"{\"eventType\":\"cloudflare_shown\",\"browser\":\"Firefox\",\"os\":\"windows\",\"mode\":\"cloudflare\",\"referrer\":\"https://www.kora-show.com/index2/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nsurrogate-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-08-08T16:23:56.734678Z","times_seen":34447,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9YBFDDBGXK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=G-9YBFDDBGXK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\nexpires: Fri, 10 Apr 2026 14:33:25 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154999\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465099,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"f5813ea98980d9a1e76e33c89d9f23d7","sha1":"84514448afc5e3585788412585f5962371e62f44","sha256":"ea2dcfa1c3dc0477c4b46a71255a0cd0ec7a26ec967c1e2eae1ab4ac6b34fc6d","sha512":"d1a4505eff52721daf335fd9435787f6c2edee2741c7aaec0de4419783cfc0cc2244319bfffe5847da125a154ff90399132d39ce0942381b1455971db5ad6411","ssdeep":"6144:CESjtDw7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:oDw7WiJKzV8Fuw","tlshash":"c3a4f9ceb3d674225396f478903f018ba57b29e2b44cc899f189c8d42e7469a5237f7c","first_seen":"2026-04-10T14:33:55.508566Z","last_seen":"2026-04-10T14:33:55.508566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":89,"dns":1,"connect":8,"send":0,"wait":38,"receive":28,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/07/175.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/175.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5051\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Jul 2025 19:04:35 GMT\r\nexpires: Fri, 05 Jun 2026 13:03:19 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 351006\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ymx2Vf7QUWUUMaJGFSRB4FPqj5tFdVWl2sU5xUYhrVh7dJ7lyHVylJhT4PeBry79bbFu6nCnon17JMOiutrsl7SeovvPjLydRr2jOGy8H7VB7AH0xxekFGqRjPcKmj6EggqPydyUwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277723c2756c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 164, 8-bit colormap, non-interlaced","md5":"4837692180cfab54996ddaba6d8df691","sha1":"7dc77f0add67a41ea52fa066e69776ee2242a739","sha256":"523bb86b37cfc2d757015a18567eec342cc45457d99384bbded03aefcf7b1dae","sha512":"5f93b8ac91f56c6bd56540e3e6982d8930f930a02ccac28bb61b8d41533901624dba2dd62b1188e6715a237ad39bcb084cf4d0ff09a5b744dfdb0a59d2f973d9","ssdeep":"96:cSLBXq1a3mUVyhz7oRGe2RSZGEg9SyXBnn7XmZ9jr/AVQW4zP7YAOTIB6lU:JLBXxnVy8GelGEgJn7XmZ9XAVQFTcAO2","tlshash":"40a18e9189b8ce23f5b0cedee16689b06cd428009307d83817bb1ec411db36c6bbd56c","first_seen":"2025-02-03T15:38:01.836037Z","last_seen":"2026-04-25T17:05:40.870252Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index1/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:33:25.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET /index1/ HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRJF%2BnblQH0vyPHgoKwAcRqGNGPgUl%2BpTvoTb6Ezw775RE0X8OrQGqbvGizi5zURv21zshk6spjXoVIetkpokKY%2BEd31MGtOg0XTt9EIQ0L%2BpCSEMlxL%2FHdcXiZ%2FeijWE7Dvtw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\nlocation: https://www.kora-show.com/index2/\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea2776c0e34120a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-redirect-by: WordPress\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51016,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:25.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\nage: 2964712\r\nx-served-by: cache-lga13622-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 65599\r\nx-timer: S1775831606.727809,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-08T19:41:51.94889Z","times_seen":142309,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":71,"dns":1,"connect":26,"send":0,"wait":30,"receive":7,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/06/131.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/131.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5338\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Jun 2025 21:53:25 GMT\r\nexpires: Sun, 07 Jun 2026 19:00:00 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 156805\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ak88JloEYrFjV1ovI6IeJXCKKiG2Dtwn8t06l2wa3%2BdhPYR1W4MKKKo4YbiUeuQkKvSbW%2BNs6ZjWPYmW0pkGEQevKH1me1zCv%2BcPK3Y2oKFsEvCOMHo8oEI4da6S0VztqtlSU3tYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277723c2456c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 164, 8-bit colormap, non-interlaced","md5":"725b3cfb5e778dd2d9308b4d8146a30e","sha1":"8240347cec92f9ccec112099388d9c97fd2646ac","sha256":"14dcca12b7e045984690978acf784ac3e9ace6aa5d574e86559b399c54685979","sha512":"67baa7d751ebfec4420ddb3ff4c599a856637b78a5ff951e0adf194a6e97f36e87f4bf3c803bbe5e1f345ce92987fa45f63c1203ddb494b42e680e6ac24b8efa","ssdeep":"96:9ZmORKiY17poxOUmvMqpGSzZoiJ2J4jrtpnL1cvr7GQ0YqTOZA96Fqxk+qA:RBY17pE0vb0Jg3JcDD0YqyZ3F0qA","tlshash":"b0b16dd25c8d8ef21ec5125e6c2500237ce9efac0ea369665036289d8c8a6dd29194db","first_seen":"2025-04-26T20:14:56.485445Z","last_seen":"2026-04-10T14:33:55.528896Z","times_seen":15,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://www.kora-show.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08031487b2094478f9b78c6e086a1e2e; expires=Sat, 10 Apr 2027 14:33:26 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9ea277745dc256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83d7e3199db64560d13352b75646ea43","sha1":"a1193888ea12ca7b9a247765bd23b74a7002f7f7","sha256":"7fcd3f73e1721401ba307584df6028a63ba546eff41f73898cf225618eb836e4","sha512":"7153b258df5faf3879a1ed394c197553ad8406792be4a5aab9af92019580718375da81c6e5c4f237cd50cb37f6d79a39521811155eb30a0a21bcb581aa1a2250","ssdeep":"","tlshash":"3fa022302b0e0ec0008002000be2c303008000e20002a38082e0c00000cb20c82a8202","first_seen":"2026-04-10T14:33:55.547884Z","last_seen":"2026-04-10T14:33:55.547884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":25,"dns":21,"connect":1,"send":0,"wait":37,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/7805835/?oo=1\u0026js_build=iclick-v1.1764.0\u0026userId=08031487b2094478f9b78c6e086a1e2e\u0026dmn=gekeebsirs.com\u0026tt=2\u0026ix=1\u0026tspl=1006\u0026cslt=0","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:27.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:09:05 GMT","end":"Sun, 28 Jun 2026 05:09:04 GMT"},"fingerprint":{"sha1":"DE:6B:DB:E4:3B:CA:D1:76:0B:71:39:66:E7:61:FC:A0:DE:EC:0C:75","sha256":"F8:AD:B9:43:78:9F:5A:53:7C:3C:43:A4:F4:43:5C:71:83:66:EC:0F:33:A3:DA:92:60:0A:FD:46:74:01:42:16"}}},"request":{"raw":"POST /5/7805835/?oo=1\u0026js_build=iclick-v1.1764.0\u0026userId=08031487b2094478f9b78c6e086a1e2e\u0026dmn=gekeebsirs.com\u0026tt=2\u0026ix=1\u0026tspl=1006\u0026cslt=0 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3520\r\nOrigin: https://www.yalla-shoot4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3520,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":true,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://www.yalla-shoot4.com/gg/\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1110,\"wiw\":1110,\"wih\":1200,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://www.kora-show.com/\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://www.yalla-shoot4.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"b7510.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/08/6075.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/6075.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4698\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Aug 2025 22:07:04 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dp5pyVuoeNS8oytx41AAGD5tqE4Q%2FweltdslrcGfA1sv%2F0FXDNwB7k%2BoBXYe%2FiPSBYrPzpNp8jZanLH88cF3YjJpDhAvoLz9nZLUkqXfWeSfpamfwn%2FcOrCqvR2Ev6OppMqfQhpkVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277722c0856c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"2a02a8bc5cf7b0f330a5dbb1a7bd0fc5","sha1":"e9a309c273296548d76291ff971ef17951f487a8","sha256":"9a90771c8441f14ef7982a01ebe582419ed2abfb39962d9569d1bee8388cb7ea","sha512":"716543fd6c55acd6c9f99998bfd1c2aba68789e903e1f53198a0390212e2fc683373bb84798b9931a39c69325234a91612068a7efdecc67b5c7dce7372cfd852","ssdeep":"96:TvXEYUY6KKD4ORaqoC8NnCRNhO7k3IXdHerCDrO5hTZyhZdR8d6QpGQCJ:T/w9KKcOpB3IX5er6K5h8h5/7QCJ","tlshash":"43a18e8831817ff432a7093f8655953ed22d02a5b84b328033bf4d748db26882785732","first_seen":"2025-09-28T14:25:32.527139Z","last_seen":"2026-05-17T08:05:36.315255Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/625261456364/main.js?","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/625261456364/main.js? HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ea277759f6956c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27294,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (27294), with no line terminators","md5":"4a011b4a6bf45c764e3fc4702dd3a2f6","sha1":"74f9abde6ecd5befa32fdfd863e693639f951bfe","sha256":"009319aedbc05811fc98d3db86247295be0a007a94c86fbfe2d136b9da93720d","sha512":"b291010a8afbc9b4c87f0e9eb7087e34790f228bae635926178c08a1cf250001afa785c17d243bdfa9b961a73fedb6a9a009629655c1ac5a00ec0e5bbc01946e","ssdeep":"384:ccRjz1aVe7D3NBvVsHYbD2sMqAMT/DW5HWUw+XgOvcltikQIR7mFpAwfZ8Z:ccTBa8D2GA9WUmXFQYXwBC","tlshash":"32c2d8863dc975ed03a250770cab74dbb66bac40304c8905d314dbb4fca1b9daae5db8","first_seen":"2026-04-10T13:31:52.935583Z","last_seen":"2026-04-10T14:40:24.769484Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=0-NLfGLPoy2jwGYQwQ","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"OPTIONS /api/index.php?q=0-NLfGLPoy2jwGYQwQ HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kora-show.com/\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nsurrogate-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/img/tv.svg","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/plugins/AlbaSport/public/img/tv.svg HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/css/AlbaSport.css?ver=14.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jun 2025 15:05:07 GMT\r\nexpires: Mon, 08 Jun 2026 11:30:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 97393\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vXciOqTtRnAnN7EpQeq8tfeFn7Sl42cjjrKcpbMImFmIXDH7VZiBiIfuIyo6uBpOwcNno76%2FJeKkDseEqlNtls4O176IupupHjF1mI7%2FJmYrBjN1dvv3xEjE9Il69040DMnK%2FfppA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277743df456c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66e5c826840792d918a2efec45a6495e","sha1":"c91db52d41fe1569a19cc50acc1a3add3bf18fd1","sha256":"3f6a791b59aa71a798884cd452b38c37db49485d7c090a9cbae940a49889cef0","sha512":"9f7ec13cd79c8b68d2d8ae1ab96dcf47e0d3d815904613db8dfd0fd9c736210c512018fd83b72298a78805b9979532f5e9a975dc54d3e0a3e600f7da9d598b0c","ssdeep":"","tlshash":"6111078ba604b37ec6c29f64e5341624c2cf616f95f00240e2d6c6b06b9b5d4f2cf0c4","first_seen":"2025-04-26T20:14:56.465793Z","last_seen":"2026-07-11T21:31:46.747196Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/07/225.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/225.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4191\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Jul 2025 19:03:11 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcQasciQh%2B4E0nBrQP97u1yw%2B%2Bvx496OoFMDoZurx%2B3By7rUfC0mZ%2BXkDsQ%2FNNPVGyMQjD7uCUNN9EbghQa83HpNPAhCff%2BHaEW2fitDgTlOavrFzldPpLgBaIO3ibhdVzF5Fo5ezg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277722c0b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":4191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 164, 8-bit colormap, non-interlaced","md5":"f8da966742fb51cdbc70e39631336e77","sha1":"98a1fee7d812a034432bdf967e3c0b4f58dfdaed","sha256":"6233d9e01c35002afb5459767d35c04692c271f3d24f20e117f5af198ba8339f","sha512":"c31edf0be440c59cba97e77e5d89756724803845e4ad0d33cc599d66732bd4df062684bf88b83dcde38ecefd8bc71e152ba200b21f728d76d3baeb0f36b86f95","ssdeep":"96:A3FWZ4UcnMl01LvG2a1lisvep3V0+rYAmGW6NRd+:AYZ460c2slisvtGW2d+","tlshash":"c7816e21b33284d5b772832bdbb152f260a1e935db77a519244a0c7303d907b8f67984","first_seen":"2025-08-16T17:22:52.969895Z","last_seen":"2026-04-10T14:33:55.553071Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/08/248.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/248.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5750\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Aug 2025 11:52:51 GMT\r\nexpires: Mon, 08 Jun 2026 23:37:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 53772\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNMQztR8Nu03xQLXyzjmjBLDHg8N0848s4yVHjlgEksqZdBrs7vGlh2XcaB9x%2FtRsW2b1BoEaSpumJ5DjXKI%2FwiLGtsVJ4fa8VQf8wTrCiWFkoTj3NyVbyf8rXLKh8KaWWYWKdK%2BUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277723c0f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 164, 8-bit colormap, non-interlaced","md5":"15a9eabfa922d2119e3db9c419ea933d","sha1":"1796bfef4a73f2b4c5918b7107391fd4fc930a3f","sha256":"f677b846292ee6b2e34378d5fceeb16b0d168aa216c879faa48dec012f12ce87","sha512":"1e76880c157c6c815a087d91c18ffdfaf8e27e1768ebc394c406ad8e39d3134ccce45131e29ed9ad5f0e9d13b805ba9f896f967670d6bd62f6a5c5fd89ec3328","ssdeep":"96:RliR2GoTzCXT6+Qxi63sRXFma1/BwafZoJuQmX9dr/CmZCMkGHMSV8eeXAblG6qO:RliCWXnmi681oa1/BkXc9dr/qMkGHMvk","tlshash":"3ac18d2f65bda4e10f1f5352c141841d88c30f678c4dc39691a4a4eaf8aef6a73a8086","first_seen":"2024-08-19T14:51:26.781217Z","last_seen":"2026-05-17T08:05:36.341898Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kora-show.com/index2/","fqdn":"www.kora-show.com","domain":"kora-show.com","tld":"com"},"ip":{"addr":"104.21.53.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:33:25.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kora-show.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 23:21:23 GMT","end":"Thu, 18 Jun 2026 00:19:00 GMT"},"fingerprint":{"sha1":"1B:26:42:D2:94:69:66:7F:55:80:1D:09:2F:41:84:29:3A:91:A5:83","sha256":"E0:7C:D5:F2:A1:71:C9:6F:5E:1F:D9:B6:7B:1F:DD:5B:3A:F5:80:B5:AE:EA:B0:81:DD:B9:FA:9A:52:E8:68:CB"}}},"request":{"raw":"GET /index2/ HTTP/1.1\r\nHost: www.kora-show.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Fri, 10 Apr 2026 14:33:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\ncf-ray: 9ea2776cfe9f120a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=3, must-revalidate\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bcZoXo%2BtFm3UJy3jClRAkVEv1lzfemZi476VdYMpz1tPVjdkgOnYDwCkWk0qXnNyznn4r0pO4leuc4eUh98TMhv%2FYlE0mOvP8Ja2kCjFj2qTEoLtkjc6eEU%2BQcej3U2axYJzA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":51016,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17560), with CRLF, LF line terminators","md5":"92e8f65cd1091e04db5f5a2906229c26","sha1":"4460767ec391c145dad149e2fe3ff5dc11bbea7d","sha256":"4858bebce71cf30f8805ed1ec7530ef7e9fc9a9d0227f217a9545f7ba8641696","sha512":"1ba068b4f836fe687ea02051a8e6482f3feab47487d45d6116c834f043e142c0ba832e84d2c95edd700503967b61279701d3902ba0dbe3fae70461c67068a252","ssdeep":"768:exbr9ZdypJp3ExGdE6xafvHTvKzNoM1fILh3L5Sl8oOXcTaF:eBVyptdRxafvHTvKKEfnl8oOXcT8","tlshash":"003309e1712184333f6d93fd80d07f16f949b812cd429d91b29e9b2486cbab216b753e","first_seen":"2026-04-10T14:33:55.555127Z","last_seen":"2026-04-10T14:33:55.555127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"rpc-mainnet.matic.quiknode.pro/","fqdn":"rpc-mainnet.matic.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"132.145.155.63","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:26.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matic.quiknode.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:00:00 GMT","end":"Sun, 31 May 2026 18:59:59 GMT"},"fingerprint":{"sha1":"02:83:6D:DB:CA:18:CD:B3:5C:F5:94:9D:AC:8F:3E:87:CD:9C:DA:DF","sha256":"98:DA:12:2E:FC:0F:89:2D:D2:11:9F:81:3F:A0:62:53:A5:75:D7:97:B9:13:44:7A:9D:19:C5:66:C7:43:B1:FA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rpc-mainnet.matic.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kora-show.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x224579e572cEEc5309A7d9F5fAf85dea5dBb7D4A\",\"data\":\"0xb68d1809\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://www.kora-show.com\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-host-id: f1b546936d23e3b5-54c375d1b1bbbf3c\r\nx-node-id: polygon_matic_iad\r\ncontent-length: 231\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a89a5e144b69d619275065ea5dc5fc6","sha1":"eefa599a7c8c9d26dd18212d3b8303dfae14912b","sha256":"6dddd9acd9e7d4f1b29c26dd2bb7221bf059d90a3aef9737b540b34c5eca14d7","sha512":"605202c26643eec046f490263f9ad0c923af055a543c065a20f992d47d0d25175eaed2dfe862a2a23f0754cb7e8741caa1bdb6d100cbbe0bb8bfbceaa41a1126","ssdeep":"","tlshash":"3ad012e0050b0b30e0bd49415004b1003122bd574ec80d43484c0dc031960817314332","first_seen":"2026-04-10T14:33:55.556455Z","last_seen":"2026-04-19T09:42:21.405288Z","times_seen":8,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/img/champ.svg","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/plugins/AlbaSport/public/img/champ.svg HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/wp-content/plugins/AlbaSport/public/css/AlbaSport.css?ver=14.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jun 2025 15:05:07 GMT\r\nexpires: Mon, 25 May 2026 13:57:10 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 1298176\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbQX0HIJaYMVyb7IEGJn%2Fm03wHUP3D2w75bE47MACKO1yc4HqxtdMkCBGLenO1kYTzf5sJp8x8pbXgQDihhcvnzYmQeFH%2B%2FXPS3CBhoJzdgKjB6NVk7%2FGyQl3lvJ1D6lAupn9qSqNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277743df956c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1756696dc45c356857325a4cfef9ff72","sha1":"f5bc7079f4ac2280a98f0955f9ce257e6d17a4a5","sha256":"de4da33b195ae3ae4ee56ee1d9a0d3104c5d1614502781f743e1dfc9f52ea5ea","sha512":"4084ac1f828b80dbf17b4a83e9b60238944725f5aa7d91f4607ebc8558296dfab4e87bd8963fad8629935ded5e62c1b8e9a48085d1af33359d47382caeec20cb","ssdeep":"","tlshash":"88011018554c771c4497caf89e236074342ea1aeb0c00392d30a0f6073d27f4a57d18d","first_seen":"2023-07-25T13:20:28Z","last_seen":"2026-07-11T21:31:46.757638Z","times_seen":36,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yalla-shoot4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 00:37:16 GMT\r\nexpires: Sun, 04 Apr 2027 00:37:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 568570\r\nlast-modified: Wed, 13 Aug 2014 16:50:04 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31248, version 1.0","md5":"436938da6ed799ca17110e719e4d2e51","sha1":"b7ef31b6085a9f0963dffe7939abca527724d389","sha256":"a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2","sha512":"7e4d6769197b05994e2ee2d8570e66d235a5322e8250179f97e501dc6bcd7c0d5f9f07e270670977812e9d72d652b736ef5c81c587d180ead66cd83aa4a10f99","ssdeep":"768:FJtbpWa4AHdCpfyRcVsjmk4h348ZOtsQivESLbxl:L6nAHdC86Vs6k4hVZvhl","tlshash":"b6e2e1539eb17dca103a71f14ed1be97c5c148729229a9741ca7b4f820ce49b72fb287","first_seen":"2023-04-11T00:32:28Z","last_seen":"2026-08-07T22:22:10.445699Z","times_seen":1534,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gekeebsirs.com/tag.min.js","fqdn":"gekeebsirs.com","domain":"gekeebsirs.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gekeebsirs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 14:26:48 GMT","end":"Wed, 24 Jun 2026 15:25:36 GMT"},"fingerprint":{"sha1":"A5:C1:27:43:37:FF:2B:D4:CA:F0:41:D8:34:F9:0E:CA:FE:72:C6:62","sha256":"B5:37:F1:2A:33:9D:B3:7F:15:BD:5F:4F:27:E6:4A:94:36:D1:F8:AE:06:78:4A:FB:26:F0:37:52:4F:76:33:50"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: gekeebsirs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-trace-id: 2dd018babdd8a69ecbabff70b7ab1ffd\r\ncache-control: public, max-age=3600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1006\r\nlast-modified: Fri, 10 Apr 2026 14:16:39 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUasjbr6gPELgYFe1SXRts%2BkbHw%2BQiuAEMeF3G2CBtyPF9a%2BcSh1We5Z7BrrSgEDU60dGckxrekmXee2YosC7yLwkEZV86Zr5b%2B%2Fa27vj0qtwAST4xWtCG5MIyABFlhmJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277744dd15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107646,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da9319ef8cea26ba244e2abd1f12e5d9","sha1":"b5820c62118863db31cd09466e727c80a22bfae4","sha256":"c3cef5e6bcff82154ec8fa7279506c4a0cc687f81c406058a1183d5383365d4c","sha512":"02a3d66a6e28b80696a74a505d81520b618c6ebe9093fd3e51f06e1bc1a239e2d8d43da1f05d913ad0f6c09554fc9f60577f820e043004919a8fad5a138d38d3","ssdeep":"1536:RM8AL/g1vljcofRXSiK4KymJ2XfjVQMUWF8DmSD87ewcC/0fi3bcZ5cO:RM8fvljcohKfJlSN0f0IF","tlshash":"bdb3f79e33b37055029f82f6a03b4d2eb5a58ddb98cec3a4d15575a63864104c3affe8","first_seen":"2026-04-09T14:22:33.166558Z","last_seen":"2026-04-16T09:18:21.620364Z","times_seen":190,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yalla-shoot4.com/wp-content/uploads/2025/07/469.png","fqdn":"www.yalla-shoot4.com","domain":"yalla-shoot4.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yalla-shoot4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 07:21:14 GMT","end":"Fri, 26 Jun 2026 08:19:40 GMT"},"fingerprint":{"sha1":"0D:66:E2:0D:D2:6E:CE:CD:D8:B8:E7:BF:A5:27:DE:18:81:3B:CB:4F","sha256":"27:E4:84:1A:B3:91:B1:3E:B7:3C:AE:26:8D:5B:13:59:3B:6A:8D:A4:31:77:83:07:B9:1E:AE:4F:DF:D0:D5:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/469.png HTTP/1.1\r\nHost: www.yalla-shoot4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/gg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2483\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Jul 2025 19:04:36 GMT\r\nexpires: Tue, 09 Jun 2026 14:33:26 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IzuJVDb54x%2FETLrgAPNXa27h%2FcsXnXjKGAloj3Kh63dWbz0i7kcxC26woJskLVuI4d2NofHHeMFGtEmy6r4C25CqRixH7SA5476VcLoA7YnMSYJcWf%2BayOLYo0nblOJgkCKAWjBvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea277723c1656c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"913cdafd974ee4fa8e0bc86d9834ce58","sha1":"918876e68a0b44c3209d99c2728b1452a34f0624","sha256":"c754cdcbd94e8a0eb8cf517bb1f10a4c6ceef0140f12a13fcfc3088267d3bb88","sha512":"0e172e75ab18b262217e88ad056b1b4ad125cc7eb3577465b86f7e27f42da3375ee735dc386805d0162b63f7cbae1774f2cae8c819654ebb702629f18e53f0d2","ssdeep":"","tlshash":"29512ce9309c64a167d5d916c4a00554907db5f22048ab095c67a9e7ca30f1eed3c538","first_seen":"2025-09-22T20:29:53.664389Z","last_seen":"2026-04-10T14:33:55.558012Z","times_seen":10,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yalla-shoot4.com/gg/","date":"2026-04-10T14:33:26.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yalla-shoot4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yalla-shoot4.com/\r\nCookie: ID=08031487b2094478f9b78c6e086a1e2e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 14:33:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.yalla-shoot4.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08031487b2094478f9b78c6e086a1e2e; expires=Sat, 10 Apr 2027 14:33:26 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9ea2777588f7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83d7e3199db64560d13352b75646ea43","sha1":"a1193888ea12ca7b9a247765bd23b74a7002f7f7","sha256":"7fcd3f73e1721401ba307584df6028a63ba546eff41f73898cf225618eb836e4","sha512":"7153b258df5faf3879a1ed394c197553ad8406792be4a5aab9af92019580718375da81c6e5c4f237cd50cb37f6d79a39521811155eb30a0a21bcb581aa1a2250","ssdeep":"","tlshash":"3fa022302b0e0ec0008002000be2c303008000e20002a38082e0c00000cb20c82a8202","first_seen":"2026-04-10T14:33:55.547884Z","last_seen":"2026-04-10T14:33:55.547884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/icons/cloudflare.svg","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"GET /api/icons/cloudflare.svg HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kora-show.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 21:59:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b09448-9b9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a4e6756bb30b0cc2dc2f2cd9663a618","sha1":"933c25cecf637ef4dce0ee85c6c323cde74b4924","sha256":"4b93fcbf1272a7d27752a97a4acf28abaacd0c0220eaf2b1fd36e181b3361af3","sha512":"935747f285b3a536c86aa9682fb5ea9a6d06f44aa717470cb8b154eda548e78313fcb7964ab1bbf0233c4f479a60a2228d22e54b9f114c46bd433484042d2c8b","ssdeep":"","tlshash":"3751cfb60324cb66d9b0c7d9aa08348af2a59197707cc181bfdf141bdf24de3e52da52","first_seen":"2026-03-24T20:34:36.26609Z","last_seen":"2026-06-07T06:18:24.273074Z","times_seen":78,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clnsdns.beer/api/index.php?q=-ZvfpoR5aRZ_gKNeG0vSv6Wnd4qjX8uE0Zr_cH_YLGDvGALhHgPbkn-XeOzvRwRdaAMO0vcQeJqqeWdN9FavSRVvKk5sNKZ8vYaQECw8cVvs4davmq4JUigvlGm3bPRNEoME3AmlEwijAOTNTDzwUmemxGeMByS5HM0Ugq5HRt-6Jme2Rs0z","fqdn":"clnsdns.beer","domain":"clnsdns.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kora-show.com/index2/","date":"2026-04-10T14:33:27.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clnsdns.beer","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 10:28:16 GMT","end":"Tue, 07 Jul 2026 10:28:15 GMT"},"fingerprint":{"sha1":"24:82:40:0F:CD:49:BB:74:74:2F:86:8F:1B:10:70:FD:C6:41:0C:A1","sha256":"90:83:37:5C:30:90:00:E9:C4:DA:86:AC:44:C7:1B:6D:D6:0C:3A:52:AA:A8:37:CE:D2:73:D4:31:54:FC:D8:F6"}}},"request":{"raw":"GET /api/index.php?q=-ZvfpoR5aRZ_gKNeG0vSv6Wnd4qjX8uE0Zr_cH_YLGDvGALhHgPbkn-XeOzvRwRdaAMO0vcQeJqqeWdN9FavSRVvKk5sNKZ8vYaQECw8cVvs4davmq4JUigvlGm3bPRNEoME3AmlEwijAOTNTDzwUmemxGeMByS5HM0Ugq5HRt-6Jme2Rs0z HTTP/1.1\r\nHost: clnsdns.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kora-show.com/\r\nOrigin: https://www.kora-show.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:33:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nsurrogate-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.kora-show.com\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12312,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f5554627a22d24a7fa20af644d0f4150","sha1":"a4a09e017332f0a315bfd4f1601336d9840170dc","sha256":"559f9874494ac5549a104d85bc4815a414f992274b1596494b2459c2ede78b7d","sha512":"bafba4b0dd6d19cb1e08c5f3b0aa831b1eba926b30de291f13523e1ce3122daceac34acfefb163a9c59543f199fa76905911d98ce02b5652e86259dfc35669bf","ssdeep":"384:Ii0zYQ9FvmV7L/tycjPEZWpQkM5JXi6vh+Ju5Kofd7UuZ:3RsFv6vtyo7ukMcsvZ","tlshash":"3d42c0d2d078574041c4c9fc8c878e003d7ea17066f3525a2aa9b44bd2ea98c9ed5f75","first_seen":"2026-04-10T14:33:55.559747Z","last_seen":"2026-04-10T14:33:55.559747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"clnsdns.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}