{"report_id":"e6c8132d-0464-4139-893f-6b4d6cc49e92","version":6,"status":"done","tags":[],"date":"2026-05-04T23:22:04Z","url":{"schema":"https","addr":"kra19c.cc","fqdn":"kra19c.cc","domain":"kra19c.cc","tld":"cc"},"ip":{"addr":"104.21.75.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"captcha.zlon7.to/","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"title":"Captcha","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"191ccf3079465e61de5caf71fd772f28","sha1":"dab8557219a249d30b050785034f8454180460cc","sha256":"a3652fda9a77a097e833547f2b840d6bcdad102cc6217a7cb3b313082d98dacc","sha512":"871410dd2ad140d95b576045e1ec6ff59bd138b522627fd24d157b6d63bed6afbde5d02f0edbabd619c94941baad1ddcae50f56dc0942909d1be090f3cc103c0","ssdeep":"","tlshash":"c3e026e96c76c83465b4138620b5e29c166061a0bb11e64882e8dc7a9f20fe38d9299c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kra19c.cc","fqdn":"kra19c.cc","domain":"kra19c.cc","tld":"cc"},"ip":{"addr":"104.21.75.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-08T23:22:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"kra19c.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"kra19c.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-03T22:20:33.622142Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-03T22:17:40.953609Z","alert_count":0,"request_count":2,"received_data":68922,"sent_data":1115,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kra19c.cc","ip":{"addr":"104.21.75.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4024612,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":6335,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zlon7.to","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-01T01:21:36.288998Z","last_seen":"2026-05-01T01:21:36.288998Z","alert_count":8,"request_count":8,"received_data":73992,"sent_data":5455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"captcha.zlon7.to","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-01T01:21:36.287866Z","last_seen":"2026-05-01T01:21:36.287866Z","alert_count":8,"request_count":8,"received_data":92274,"sent_data":6717,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zlon7.to/?from_host=kra19c.cc","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"faba138840d4e88acb26ab9f8d0995be","sha1":"cc82e2625e121d16274c4ca7f1040bb4b7597b58","sha256":"63dd3df5569001599f8b8e70bdb01b74432063e43f1de85627404be1d4809add","sha512":"07917792d3b31b148087b5a2f1fc0fb43e9b886486aa4cae33c5fde405c1d8947c2d4ed2739190f108822956a16243dc26388a333950c4c3a06955786b371684","ssdeep":"","tlshash":"51e0ab6772b2882009eb9932107b3f4aac32b08e9c46a6664c2d08b40970f95313accc","size":421,"data":"","first_seen":"2026-05-04T23:22:10.276958Z","last_seen":"2026-05-04T23:22:10.276958Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1edc37c8e3ac768dd33e2d4cb42cafe","sha1":"18a8b4436ac3a7c43c4e0a4b0447fa0a0c4326f1","sha256":"5e65b7779aa16aca85d3187a963ac1ecad9ce623c7df36c7fb315b00fcb2c6a9","sha512":"02b5bc7079232b511de90c8d5ac447721b96a1472138cf0e9de274ba3d895b52e4e781a05812ce8f32a30a3822c9240cc7fde176731d9a04a76cf7a3ac352e36","ssdeep":"","tlshash":"899002a359b1509b87265a14524671122b260971870e5717155a0a718574744e941b55","size":57,"data":"","first_seen":"2025-03-07T11:01:59.145819Z","last_seen":"2026-07-21T12:02:27.319183Z","times_seen":829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12978975387fb7372ee55fc1d679bd7e","sha1":"bebba2610b1d33faf2d38a29cdfbd5b06067da28","sha256":"8160c752f60cab1a341d809e2efc258c2989328f6f343a03348652e4dcd642e7","sha512":"905c0fd3402933ea3278a4036ea68aff6fe26a02eda0c5f79404eb4d7fd2cc12d0a7d71d17df5f8d7f1cf392b4f1f8aed229b1d577676441e7d9d0891641b37d","ssdeep":"","tlshash":"5f1100753a2a5534c6d5818b317ee7a83d3260717b02a084c26ccc285d68e9318efcbe","size":902,"data":"","first_seen":"2026-05-04T23:22:10.280173Z","last_seen":"2026-05-04T23:22:10.280173Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac996a59d805b0d58d47da1ab6f7dd4d","sha1":"461995e82738a3f142a9a63093b08577085ab3ed","sha256":"9c689e4ba08ec9b0dcb9d926e334a9ed1f5d77522dc70e65ed7edece79e761e3","sha512":"c9feed2505d342fd5af4b18d41b29739d378f936f426122bdf50481fae4bf7e6b91bb863f10ce79c26a9be569b188b52e51823b510893e9b9d203f069bb60596","ssdeep":"","tlshash":"ec7000c28b80e08280302200800802388228e0008a20aa00022c0c222080033a200200","size":24,"data":"","first_seen":"2024-10-05T07:52:52Z","last_seen":"2026-06-07T07:16:29.618964Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/js/connect.min.js?2","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","size":11274,"data":"","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-07-21T12:02:27.31767Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5395242a0bfb4fd0959fe2d970527657","sha1":"37b508997b5cfb014d544f49c1118c9efe1eb488","sha256":"9075900ad1e7f61a99bd147150afec571bd67ecbe842c694d338eb7c7f3279b3","sha512":"c3195da87f6da9ed0cc393075d8a4353176d13034b9d7774c90a80504d547ee6cb3f5ea3ed8ee522f8610242fc751df25dafd9e92cf70f9ccca19ede943ee58a","ssdeep":"","tlshash":"8090024585867151d432257441ad50a0416854016c1dec12210c9c210d4032b5d44291","size":53,"data":"","first_seen":"2025-03-07T11:01:59.148941Z","last_seen":"2026-06-07T07:16:29.618226Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/js/connect.min.js?2","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","size":11274,"data":"","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-07-21T12:02:27.31767Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"538ed9849627bf6d0c69e2ab35d62fce","sha1":"b14ee2289b474768897391c3caf8ba159e827560","sha256":"2742180097f756f91092c8d4c0f3e91c141ee965de1175d7bf0b6993beeef666","sha512":"0da0f8f6c775944230f7a1bc3606ecad888ecd8623e5491d5bf913eb3fced1fee1ebc0416c3de56ff4b637b6b83b98539d0066860fbc2ea109c468391007a9fe","ssdeep":"","tlshash":"7dd0a7552875883062a802461176d394256121a477516644c1dccc2b6a21ea34da155c","size":217,"data":"","first_seen":"2026-05-04T23:22:10.28373Z","last_seen":"2026-05-04T23:22:10.28373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b82a242fbc188e9c6a27e942b4d01ce9","sha1":"dcb5c9afc619718035ed48764918a23997ee04fc","sha256":"babda690dea687a5e5beafd08f0a448a8421b71eec1ac4a64562884f8b919c4e","sha512":"86c62eeee5ed633cdd65dba2200bb074773a39d0fecb1e023b9e552ebb1db297d9ecb8b1e1049aa30d2c5d1b775c6aa18b3e9d3f400d61c77dc2f0b4e450882b","ssdeep":"","tlshash":"2c51511f6ab63cb59663b0298b7fd2013435200f1c87ea017e9e1a54cf26d3711a2bf4","size":2565,"data":"","first_seen":"2026-03-21T04:29:53.627736Z","last_seen":"2026-06-07T07:16:29.619675Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4f256ff7f93df592eb42b03f75427fa","sha1":"ff59eaefc1a9e92279f278c2b6021770901f6de2","sha256":"fb3cc5e8024600c2631e8c17f01b119dbbff258b68b543aebe50b4a64f414a14","sha512":"c8bab4e43fd984cae80e832091feabfb1b6191856f53268577ce5a5d79da0b55a9b9cdb5f556c2098b5d0f08c7190713876ed4ee8f901959761089cfb8908a44","ssdeep":"384:bgvJUcEsLyHHowFs6iwX7rNMer9oGgrwfckfNGeHKjMAkqE5q:bgvJ+EyHHojwX7BrsSN3h8","tlshash":"6aa2dbda74d274244795e0b5082bbcd7e2afac84340c9458e6a1e7f8be76704c5b7a3c","size":23126,"data":"","first_seen":"2026-05-04T23:22:10.274435Z","last_seen":"2026-05-05T00:14:19.224816Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"captcha.zlon7.to/","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:45.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9f6b3e5b5f6eb509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: tor_scheme_id=1778541791; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\ntor_port=9140; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\nsession_id=40d5f347f66f4e31c23811cf20749028; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\nonion_server_id=6; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\nremote_route=7; path=/\nremote_server_id=csrv_18; path=/; domain=.zlon7.to\nremote_user_id=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon7.to\nrefresh_page_error_count=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon7.to\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUVEsf3KQXmcfZGnxFPEt08FHdcFD4dlK6%2Bn0F%2BBy0ibacyjkkzljgshNUawwMnJr5exR1ZF6JNF%2BIwj%2FJFinoRtOl3uRDHaiboN0j38YBklPE4KX5FEEflJFmSzPhgBa3%2F9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23931,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15782), with CRLF, LF line terminators","md5":"33b3228957f006b5ffbe1cbea009ea4e","sha1":"c99fb490a79c59ca8c78a24edcbbef9288874c3d","sha256":"c6e4e04927aaf26aef0d724585f8e8f3ccd7e74ff5564ef327f90d7b9a523d6e","sha512":"ed638060d1eff33e6223a572db7f5592f9fb8d26b0577f5f76920e08bf5eebaac846645fd3a2dca7b33eecbc901091e64431def879989b65779daa5cf21c28c2","ssdeep":"384:8bnxFjI3SGYa7nrB8VeshpUV0Q89xtbHrp9qRIdQFH8tnx/clqZFc:CI3jYa7iVtPUV0Q89nbHrjq/FH8Fx/cT","tlshash":"c2b2aea91c535ca0da52e464b36be705bca58027c241e8887f4c49e88febdd145b3fed","first_seen":"2026-05-04T23:22:10.261803Z","last_seen":"2026-05-04T23:22:10.261803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":179,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon7.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 04 May 2026 23:21:45 GMT\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1be305145d51ecbeb52ba67f2208dea9","sha1":"6f97fc00e9d6771004cb17d53c7ff7d62011e78e","sha256":"5fb68a19bfedc1331144c73515b5cc021af26ac8605c62e73a31771a0e19ee62","sha512":"b3a73238231bbeeaf01907f0e3a78d4221d24b50de71345c66a6d6a4ff6afb5fd8d88b242a57ba35d37f0466edc6d3a19c7e02dfd4563d2ee565ca2cc06182c6","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:8KYXuM1+4","tlshash":"dd227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:25:11.707221Z","last_seen":"2026-07-21T20:01:41.144498Z","times_seen":3969,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":81,"dns":0,"connect":21,"send":0,"wait":31,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/js/connect.min.js?2","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /js/connect.min.js?2 HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon7.to/\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2923\r\ncf-ray: 9f6b3e5d089bb509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 4051\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"2c0a-648ec1d15a121-gzip\"\r\nlast-modified: Wed, 21 Jan 2026 20:53:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOW%2BC6QIpDUs2Z0T2qxWAIhY%2Bm4HfzH43DqYf718I1j%2BW%2F2Dr4QnK2gJix9DzfwqpbdYtNBt6hNjlSkMdXgTpXHtpTFkiqoFLK%2Fr5xyCoTUO%2BDyuphe7zMYfRpa8dlZuvZ%2BM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11274), with no line terminators","md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-07-21T12:02:27.31767Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://captcha.zlon7.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 08:59:57 GMT\r\nexpires: Mon, 03 May 2027 08:59:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nage: 138109\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-07-22T01:37:57.84984Z","times_seen":10951,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":57,"dns":1,"connect":21,"send":0,"wait":16,"receive":4,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fe6331af5207/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f6b3e5e4974b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23126,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/cdn-cgi/challenge-platform/h/g/jsd/oneshot/fe6331af5207/0.1622349061604098:1777936226:p51_w4hlnNRkcfc6PHcfW0sZ9bZEetp8X9szkiDWX4w/9f6b3e5bff69353c","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:46.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/fe6331af5207/0.1622349061604098:1777936226:p51_w4hlnNRkcfc6PHcfW0sZ9bZEetp8X9szkiDWX4w/9f6b3e5bff69353c HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12145\r\nOrigin: https://captcha.zlon7.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon7.to/\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12145,"data":"iP5IYxjgCwT-aVPTwAsjAoAHAoUAoNA-AlbVA6NCwjGAq1VIH15T-jHVdwIjNV-BA1wlITeA3yNjhA3YoPcpASJP9pACpW6zbAoyaBJInwNjTxjGi7BBIn3R9PzDeKxACqVaTjCY7VXxqFTNATqiJAyVIInruDhL8VLk465ji3YSNJeh$QdhVQdQAoqLudYkaJIAqbxJvFFQ6l1YkqiNAKEBAYNjSCE-ApX07jOjsGfzxA2SErBX4AYNAKv5ATsnVu2dr7R$Aer2q9OBSAIALblwN$WAAdq+BnWjq36AtnIrWVJJrQvNASv5NTN9bpqTfhhNabBAbSP3XfDWIATCfo$aqj35b35K35AgU3AFBPE5AVXU5Ss+wxx5A9fxaDxvOVurQbry5hhagXclyVREgqTVW3BgX0HIAVNF3VA669Lqud6A6fXU$XXKvgbTbvXz6vog1KREo0ajgbchxAebxMj5X3G5qjArVQrKIA-f-W+Sr38+D6LjBJv8qhNOqiOciyvSp05JATL5I3COLHo0Y0g6SU0RoKgrag2$yThvhVqTqgzQEUwth-zKEKl$Y2vHa9qCu-EYDx1dQJZvjZo2y2Aj1cE5Yndkh3UGdUU7W4tPtrP9KZ9Q5KtwbUFCBbYxxgr2-FQNiKzj2XCzvKU-gqp5lVfnfF6RJlPFG-g+tJXayhuktCdFQLVU3wOkhu5T6jK4zvIRV0zlsCJAK2NHPI99WOMIDGlrj$JzroUOZA-SE$h9NoolQfz5rQwpZ5xHOT-ucNVo6WC9AAGM+Bh5-NVIQV63+g6B+GBob0HFH6$jKoPnURwR$BT9RcUxq$fhsC$2$PIaVhbo5fWIi3OhaL6tLdYIhAa2$yvzb$6UKFVVU3wN4AaV6HXUFPHWgFVdjVjgBW3w5$AYb5NhCeMczXiN$Aa253YFAx+MILw-SMo5wq+2$PWInQFExj5IYsRrev5cJZCxbBDWIVB$3hAC+Ej2BFjMb$GX+q3vq3YLCBC0I31CTNnXxbytqjdyBxZ03gEjeiXWP5i-1vKicApgX+WMT6Rj5r6+dxKqLKNriaEZ63JUjDfIXZXgBd+0y4qqS+P7B9$ijgbBA5gpfu1wbBaKepk55QeJf6JYaNQZS6RyT6Ahh66qILQ9xNBx6UPj6pAXeNPqgvagw5QhbiBz$3+61T3HwTNu+JgNwpVo6ab7j5YT8nISiMNC6b3kvfiTqNqjVoA3bav1OI3YOhKgYOLCAsALWMz5$rQQrWTX4Cg-uTMFvx361+CFYBUwRHqU2tIOUVkTC+8FP$TSRh5jrbkdvGeVCBaoAuNyTP$jVVgMqvbBxYbS$uMJwgq79iC-KBMZ4lzL$jiNcyQdUsAMDtvnoBaw5aUIwg93F0ICO3AVc8wb$+b82$eY4W69gIeqt7ob$NwoLCE+cEA4FuC6cTzQ61jCetIcPLbjIoLwjx8DtlZfP0VaiENP61GINFaL$uh8A8igbbxb1HyceGHkXaHHyb8obA9iA+idz-T-DyiZXAy5diDSktuHPVtPBOIFzx04Fz$z8BR4eudaNAAi4HIowEIAXIi89$CjbINABjZ5A1uha4$Q+tbBpjRgFT9Q6qIMAv-TTAYNKAIUeTgPIjeFPp$ZkHCzy$V-qcKqPxrQfIAiWPb5LxOIuIbL2i65scAzLML$wNQNqTiHOE9hogN6Iu9-t-BtZenf2nQbdBP$6e5ET9qNeloWOi+SOC5o5ejA5hLxnq9$5bkwZEF3-YP0Iq3lUsXRADYBqxc50rVoPMVe38Lcbbf1XNLTqGuFr5VuECSvAcA9A-ABYIdpPjUnCbScA$r+eSwlpSa5bLy62c8ZSj6uhEo$iMyS5jCrJY5o3xUD6sn7hzC+pssZ$6JFx53xBBUrUIoFHHoOa6-UPoerboIk39CjiUjvnea6IU+5XKAYINwx0uKx0VIB+5l5JqQM6j64vvAqoO-N$6jrlbyyyxJdASNHCfnvHyREaqE9qvzA6D5XZroH5EvNpPREQrHShT1qBFE6C5r0wxoI9SuxGqVYai2q39MAorWAbnxB3U3EqB9fFb3VCz+U7JRXClgPcrEHAl5ucaX5LA+C2sHB3rN+Ow33YBW6gQj6GOZYJBl3N1iEp-s72$WVF-V6iWVnZwI+ySJy52vM5LdWx6bIO6AbEsRqn7qqprLb-wbM2Ma6KfxUgayJTgIOjeQHacSLQepABFU9Ox+NY3QtxOXAxvV9da8cp0qVDW2jVnRTxY+FTzlgfRhfecjIAQi5kc$ANEgFlHeLq6ScTYPxXcjHr5LXfBq1+eBF3p654qFnTWVPS3fTlnb-TogLcqRqS9JKATsPx+KBxKZTLpcj16QyVF5q6paztJqNC9z7PWNylAcTo-yzEgUxOVVCOrYbOWqfxhQAEdYgy3o-T1qIM1ayqqyDayVLySlxv$35LfwYN$ILuj3TQ$AWAnS$jln7E0zM1fVwEIB0C0SZwA$9HpP01XEtUCBBLrGVWdb-S+XNq2uQy+BwYjoeEFYAMcZ3g9Pkedk-T2vg7BILU3C7vKtAcGGSIjhYH0sBUhyPLF0CQNyIEC+KR$PBIsGud-vAogd9LiNsaFP6V5LRzXeBE9Ob1OtXeFe1proBLqXACbQwZrhOAT5sV8CBzAfWT-8kyizB5xj6wLJ9U$Kv+nWCBIDbwF7l1w38TWyFjaN5EwvB5o-Hjvp-fW5FAFS-tsq0FBnURzCSH834wI3xTUot3Ckq+STY4dbRsuVd2eiqd46V6ECh7Tx2PGIjLXY3eWKV5NackoFAAIn-Cy-LyNUl99xPpWFwGPYLrqQwP8i$y3NGgNEYebCTAsVofpiINRn0iCcpMAv99x-VbeaGYO3oOROPcaKhHzKqlN8UbuOLWxM-TQ1rnx1-LjlCoW5j6nCAhOZoP38v7oK00d1BdLISgW1iOUcoO$NUKjzgfBCC64+TAy0KKPi637nFLFEwgdU95d7kWWK-lk22neEBq5xnxNIR2sowSWzohsLxOHAwTi6MW7jPT8rgJEfEspJpBAaPY9H4iN4-EMsOkvgD$GMsBFuaiWTYv3VwIeLlaNWwP+x+laWbisnstrlZhLRUPob3wcfqIKeVDRc3Equ$LXNMuhbUsN7i8-9jXw-p0YcMrQthviPNUAMkqWa+4ye2+lsBcp6MrAbo2xCEfX+KpwBtxYgr5PoX9BerF6+3fplvtSwnVrZHavLSf7$gJ346iAdy8fVuWQNbdrTQNOOrtrAfSJqFz$0BVasDKxCqEAnYCUqFxq2FekPNq+L3$we$Djqv3QaERop4FBtfsbR3uGJLfDHTR3fBN36Au1MQtT3oG2Zzh7M8G+C$v-o0Mg8bdGv1yA7Y9LNVzsc30LeMkSKGxzLNr$ukNolck2iMRxV3PhpIKfUTAQuO9NN+cNjxULeeE5dlGl5xjj0YRpGP+pfbG1XYYPyJNUYp8OEpKjtNZSI16O3A-vWGXNtHCJfb7A-X89-Te1KHa9fhq2b01zg2aBUzq50hX21pMC51EA3A6IXpjWYO50rpkTq$rN8j8APpP$3nrbipgI60AnsXh2k$h63O39+6vAhvr+RSZA2Er2vNIpZT8CFGy68XoYIS6LTJNIcA-CgGUOOJ-9BIEOE9-b3TBHx5cGeWcJYjVTKEWCuA6xWPaNqzz95BbTaAg+jXgnhOEpPp$VCVEN6LfzQnNVb0bbh2vzzofA0SvCJvy0zoDvl9pJO$315xZzEYx6NJ+bjXK1WGJIqOgv7hWPNUTSgAO6e0dG3EtJ$GhBk9zXr55JEBDHoS-E5hXG1NUJqSvJezRVdpUG5LABKLMnY+VAbLNxb2LY+UWVSJUzyVD01n7OwvOT3+gAVAho0bSo22V2fxRnRVZOuVIj-bEUbY62XH3UqVxGKnR60U8jQ2+6aYRH8CH0hL4NzJeNc1gC8JZJW9DGGY-HY6cb6OvTvPK21zrW6hwC+03+p2UJ+5bhQBtnhOkTbAwG$nppQTO$ZGw6HBezHofCL$6r$0jBq1aSKAFJ26SE9Gjp6hsNh$epYToj+SAO5nhJpWjJ-r4bgb6xZ$e21BLjxx4n8PoAAM10yWMCRojvj6h$Uz1J-NljwAbjPND$Uzz9gvy631noz9FbNhnoLbrJHNClYpLb0+XCIngvIVEEaJqXCMxrVA3Tl18naJ6hLVXjXUABgSkpCAgSgYgEf$XMivJL9AAxx+j2K0ChO+gjwT8jfbwSABCH0xzWVLZxrBX0620JgT0GwXh2X96lgr+SXxjCAoNUjPa5GIJ6VA6GoTTvCj-YlCYpjrMjknLJ3Tc2AxkN3NqzL5gSFj3jz$8ohve73lv$WrhVA9OMbl6$kjgjQjJld$a9xVCM0HqEM$AUWXnp8AlpAxWJ-1ANjrITJE9jt+flHBeov51zMlx6vlevWP9OgAOP-OkTBbNhH2WM05+j3GtJXXZ7SBBM5MLCDCJWWvtr6Ha$zL90+L0Yy0PJZzOlfPQpC5854ChpBOxjflx7A3$oNIhLIV5hf$oC$735AIVTDz+BqT5nQnP$AqOnpPIoAd3U-THI-viVAKFGFG3qWXkVR1l5qrIGq70Eyl6PYl7IMNoTl9XOnXKjwv7h22gb7nqLK+tvvWH76KyG63GoG52pt+eB-JGLkjEKQCaCoAorH5wl1NIPvWw+IrxozN8vhzZvxWkV9d1Tq1xnkXXVo1q1vrVBIjXh3CaEcqAVzB-TFJEqAGr51LQj1M$lrYnzcz$1v5dGyEY1sd5LkoOr2YNIp+C0noq$TvOrvb3LH5SMe$I25Is6aCevpJqX5PkjFTYC7jqPc2VOcOFPjTXVk7NPRWoqFWAH+2ZH-zY+d9fqc0KYRv4Ju3nYJjQpPj+zNY9qNITG6M9b7AnVuL6IdEJX+BKLp5e2u3p9slUHJhVhujgCw29CBnOBEEh2TqZOXhYTOEP2+XTL+5LC3CB3IzYljHz1UCv+eHsN+MxGO2AM7zPTpKrv0HVltE4ALTWYS6VCZLp9hppjyTwAgdSvi3V9U6f0+AaqI7fAtJ9rWqHYXqYVAKLSflA0O3g7a3QNBXWj5lsdqNhGeNpdQy+VHvkp-Q21Gbr9MOknYXCTk0jq8Ml36I2NhVhInzoANsX9vCRp+KJSi$EMUvZnr5bhLC9OwK6SU1rYVsxdwlRWiKV2BN85T9UWIQj6JTR6XT+vF2fHeJVAlz$+RKRzHKWLesRVJlzQ3Y4jhSkJh7C7ddqEXBPB2+-dVKXBW30VKGWzn$bAoTY73yTnhzAnX2QjxCvT1j83LC3X0dDd7I7pFH7hMrqEvEolI3e$LTOVw3yoBE-TvLHYn7G5e2hAIpIpVTCnrrGJUrhLKCvLeJeHi18jv3abw6u1lMY3K0e9POw7QLkoh0kYZNj2JVLApHApdBKn5QEG$sX7PlNdppi2WA+qQC-0nCzzWlXEP37r8BX5h1Ilesct8AOqUOZ+EO4GzjE9etfbrqwWV+jV3YYvbMqJqGHECPpljG+dqjF62zoXvput+ARURxglNrI9BhNVQjW9yE86ojtN+L9$TGSoooc7AVa1oyDCLLc7qH5lVKClf0NUerH2+BFtKGXpi0yPV9GqUrA9yyB+YCk143l3Qig6bISsMdWz679j3SjvRqXIp+0Y4jJ6i+d94AYSpW8zvElLdHyLfNkPkn$M31ctXo7T$9XeoNQjbniqi21rQANQC9rWCH2EBlpvNPAqOG6MI7v+ZjZC4Tb$2NqPitP1$S6+9AjebJszAq6I3l6Ie2zBD3bC698WfYnVI0Vx+5+x2inQIAUswWZzEwXTO+-14bsn+AlCNpn2RoeiFCBhCHKtArRbv+fr8nkjTrIwPQ2Q3bLYJQQsUrQsVswtwtYbryLCoToCb$KqgJUMxiNY3nrKhqD$8zZ9FBpPZOZOJ7qlIJCq6GONvEh25G5GoSr2zOAsFHnnJld7rWhioA7AoqzrgPJWwjNMwKLY3hG3Adr6H+3AdvhTcovsBN2NKoN5ABKLJsEeLMLAC$ozHBZlpL-NqPZyd99Vg6oLsjr1ilQo3jwoAhpBVYbAXETEjKpvu$cwW7RrLyK$GhgvFespRTAPAKCL-UlQjvgjoVCQAHiy+S4PQdV3SKso$EjvSWWX9eCxYox3U$aN0oO0PiXide9Atwvih7$tCAWyKjuqN3gsVtCsHvHWNdcqdOZQkQ3NBch2kVVBwK5P+xA8y27TNw3TYsS+ors77rwdqKgfyt6$a-wqe93e7tuKHHS1W1ieHBX5izkXoChpeBrsQ2hJ28l5zcxtV29KqQAGsqKOZCh09H1bYbxAhFSqw6p6H9yryFpPaEk$796nzM-QLzQnYX8T8C-VxwqAaWe72Go7Oy+brefTjKKJcKkQW7rLLtXFrs-s77t7fCM2rX9lg0FBfnTwfHSO0eCK6Jyl3IbznSiMWlXqAFPyy8gViztV8trGLphN3+8yoHdXxA7iKCRs5LMsxTUj2PepbMQAfJuq9J6hfO3zk6-A2Pav3egvFCZ3P$AI7y0s5h9eJ88jDSUyQMryQ8btrw-TeAkMy-FbTCWTR65xItkOujbyU-VOcLWiedtGzCti$wPwR+PitNx0-HZ2SlXzKCYjKT43qJ-wVOJsweGfoHkw92gsS8HWxyNZrsqEhresXHCtCCSr3zzXAOSObYuXGLh0kQCQuqQA8brfbLXIbGu6PloHtSdsbfteAKrMxLuqlJiOJcYcb0fH7AqJBOVAXbfNYjoFaow97Mel4nV0-Bxw0SzgWE47S7fxP$ZTWpKM5hnLwfsw-5n8d8$Z01LdrSviDoc1KyRiiep3oKxHxOOi9wYSMVNR7wK2SsslXQPJ0bb2at+fFs3d8p3SAxhPbCGyZF+jwOROBNJjdMt2rvzqb2I-1wh3RxpiqCKAfgQM3bzrFXnM8J5qh$hUufNKVGVzx-GywRBdEld7aH031S1Sy9J-hF3I+M9CGz7ZUdSvWJviAHafMHW6zK+BM1nAaE6c3dOQ4jSSLQjtCBW3z2b3A3jqbRAc4pTHkHJeBo4AL1+T4SoXxdXFxdlOf77TaFK15GuX0W7-Un0UyqEOMoA-wKKtUCCeU6ue7pxjjPtcOfJVJCtfttNHeEzOufTpF5BdrwsotZ2b8jl8P4y5U72nqSLtc$XT3iBtX93f$x-gaZZEM47g3kt-IcBhK88Twbyy9CxK5UeX2XXuqJpQvD+Ttq9TzLR$RMIdKiGPhIryYZVzlMj059WwLH2oNxb2LJg65006X-Cx0Wj55ITt+G-KfUxheZqqPfldOChpk7E+b7bC9r-GEJtNbhuj9TQ1uXGtwDLc2DD02DjWqKb5oZn5G9ck3CRnTBkvEebeJvbiAUncSd8CkpTMdfC509dli7f7HHe-qJflz2rXNOrvfiWF0BWwUfhbfevETYTbHO$dAkq6QoXrknVQZuk4saIjBsTA9fRgDPuDZYMdhB+Z7VbxRov4UOurBnYVLCkYauwcYsgtVsOMC2b46O1ZqbsDHi9CioxVrq+bbQR6QoElUAOa4CLBqVoeT7K4MShV6oqV7qIRj7hoeSjAuIok6h-LTbEdVTVVjRbAI5h$oARIXlYsFh1g0NrtXaSRlL$Mix7ACs$KYHM5lwjdqcVVibScLyx1ZwyMkAPxfwIN2dj790Y$rCGKHJva6acNqPj6TUSqWZIC9Rhi3rGhhJvccNTbFHEux7jZIUwWZMEEP2iJgAcN3$FuhAjdVHAqXR6v-TVCD6f29w2TABe-PNNK9-WL6DLoMVJAWMcMowBBCtYn$kjBapWL$AMXz6G5RAVUcYv3VGjY$LN2V-IqezIIwB4X$6SyVBBoj52J5w537IxVbABUMinVnQLxoxaWgC6fjwLjxVvIPU5cv9nTnSCsNBaT73Vw3it$OCxU$SgXwN559TOxbp6zB6inp6qJoUpoizbQA2LII7UzA9iLI5kIPTBwB5w75Rq2VGAyAy6wAowFboh$sUHQA4Uenbn0OSxgSwHnwS8SvjWAgyoR-onbVBwI52Tjxc-iVAzZ5QvOY6H-b2olT85JNa8bMiEnOCsMC6l5goA-Uu3EUySgMC+Ln+e5ZItNJsTanRVGjo5NI2nrvlSjZ5gBW3TzCVSsjVNZMQ5INMVwMnMUPW1dZzA$62H3kl595uvexwzVoLSgc5UABxwuUkjOchz39wX5WV$hFB7edP$rLyUxAcb3NgMbwo$WdZXU$5jKV35xxIqVPa33V5EFWvvSjWeNYOwGAHXjjQ2051B54MpUXhpgIsCgjbF$1ljvwEFCVW5FPGwkdMB5l7oAisL-pgakMb7Sfjh$vIQWK3w-f-7OnqPajFw$-BLrCVJjHWJlgMCC5SPlCSAP0gM5BSUURxHjV5Oio2i2AKhINs3SP2oFTVcxRMKtRJoMbFS3jrI0ee6$-F-hXVNA9$QwZw51VsWgge$9S73Y1oaNXzU$+D9Cn+6GUDBVP0IiKiULvAnj2UAIjCL3ja69UG68Li0xenZTsUb6s8lIobPWhYooY$wjrAUJP$+U551B9setWxh1Aqb5afHqpoyxcAk$7gpCTkoZO$EnVL-pc5ljvj7BcPy-RXndCsVUM435BDGnY+LxZIzgLa8CToLGwN7RAdwRJn$xyTkQDMbjM3e5EiB+WEIbIbNCRxEin54H3V5jeArgj52cqZPTPIlTO+je3NhfYjiuL9AMo60pNLcbFnvSwSyg3VFqLEOp+ixlbiwwCoDjxAaA4A3NCsYWGbgh5glg52$C11O$3$ManSYjx$xUAHA9eAYo+ieh5Nd3eMTg-5nP7PjZ5A6wXXAVe5J3hVJXoXqHyGxgkvRi-5pAxL$SrwobGbZq7X+rLEAsR0c3NbajkSPAhuUJe7Ady9TY-2Ec1RbC+ir1T$6RpIi4iaL3jEBz$JfFLHPAw+opA$H7RELzSNS3T3C55DCU6U$lNrGjz3ArM5A9CQvvAAAbvzT-IejTIbdhRxivaA0Wf2XWF0qI5bw+A4CL0IpvOhtSCPaIl5APr-WuCZNpeDE3ghQVtSP69A86vovD$YhoOfjYLBNdrEgSHjRNDZIs1+2GAEIfv6VT5TQo26fabIFVlPFUA1aYKSIl$Llr$TkXzSqfCgjLSGVhCMQcn$wLZ6xJ4gcUyAVaUzF-HMIK$P6w3dCCHUOhIN03kkIjFwCHvE6Obw3WJIaUxxlI5fZ2VDtSAwNCAFww3dKw7v8vk3YFpUeke-Bw-cUI5RVwZqHVYBfRB5DEY9w978vxw$BaVSCn0VvUn5+xSTUciULwj454X5733Yto9AJ+HQOEwlQOlMIXpX5R7K7jhA2W9XOte$wLCNPRj1Ad6qnSnxOLuTgCLAi-0jQlxIUuA2QV6w9eTChjLWMNgBjzY-CywH6iAjPCanbvIO8O+QZ6o7C29xW9+ygREVaColfjPX+-cYh1A3OD$obL-B2q0SNP3+bA4wM9epAMoHigAkM3ESFn-Io6h50-y2w-C7MUw6Ad-JgRPo$C+3tpkwXeg9KhM-AnjCI$NFPTD$7ZG5+NYiinbe1K+QJlN1spPIUvZ5eSQgzBnDnvl6NwJDs2eRDd179joANglepkVnWcEs+B3o-2nb0rfEu2fgNZVrCR5k1QIagnspt5wjzZAEngf-dOLHMaWQ-rgOEpVlgxPfvcMXi4w85gIABuR0-aNLnF1l7jT$ZIispiI3T3C4bkM5uDxr3VZEhJvQisdHq8MlZXB7a4edHqbxAp6Er-RuKBTnl+jG5G60axDYZr4E+AC55sgNCAdpWzwq3duvHEFoAbZRb-TcRA9nrNY8Eia4eX+j69jpG5aIbeoGFMTDMaLgg4e$lw8NZE85C22toGbVL1EBL1AV8h4YB3I+2LzNX2FlS$K2PyJpFF0jqoJUn$LAHNwGe0Y1zxjVo0-PjDIqXBZ1bS8ziURxWBqxYY$6jvU287ZUxb9gk$fsdTiVjFWiCfCPTrWlUTEYQL$9Fa75HNnDE1LiBf7V$BG7zWUPJz0jR95yI+1o$RCO+q$AAdVYtLl-qc5PBcTdSPP0x4+Xl5$dg+IrECH+gVOAdTENrO7Fc06cvBYS8LixZFw4YaUSYIrbXMq8lioCX1OWINo+ZABzjJYOp7NJNjtATl+xc50cYj0tC9dzAyJYAoGSSM3SCb7rXJ5JS0nnlSfGQ3TL+D4t1l3ghM3TjOpB9bO-+F$OahvYQBOIKYQLRjZ78380lsWUpujTywQ8-IAxd7QoLp6-8K3ZbJrngypgGCodMVqJ2a9Nj381rMAXIqIYETJn1rqNvMl2ecAN9RK9ON3Za4eXC55CLbxggab+cVTu3Jqy2fCML2LVcqrpG5qAo5Ah5Gls6PqsCQbCswdJ59HOIw7IK6c9jzgYUkMb$5nIOhXJeglC+E068jWVH$60$Q6AXffMNMxgStisKFAXESkG5Mo025EcDzU+QPZMdBYrVLlGvT5FCtPdx8-OTJdBixQVoneR3Dv+5tN0xjgwrKk+0r+xDTUJVUnEHDUtVdxAxV4JBU+UHCyP6JCrlBQSqeNdsg2-oC6H+pp9EeZPOK7794LgXUjr28SAphx7F340b2-pMFwT3HBxIgonajP$I3r$G+ghsT3GAXrzigidYbrMb1kAP2uES6Ak7oH8pH9kRDG5lCS92A6gGeK78RqvjfJigNyvnwvrO9XyEOpe06Vajr9cxN9HxY7-1dy945Z2lr0bOZUSPEyOg-fWdiHdZ9kq+-uc6s-iKf1tzNzNZbw-03hHBr22MZDVOlKTB5r$zk55g-qKv1KP9z7RWvAZKKjLJlCKVRg8JKbHX3vaNy$K8GKMNlagxDZKNCWXRYTqJaEU$sc8lH90qdENyX4iTxTZtyTay6o4SFKb9k2bz7yRAH8KbHNLQz+fRAHlK62$LIX7TZu66qI0PL6POT2IOD3HYwL22lj69OfdPYv3U9Qf$sO5KXYLqJCMRiNQ0d3YRyrocWcROzxELoyGCfiRNBlKo9cLvddUZc6VqGMUUi9aW$RHPtJASLBz+qZ5Os9w2JLyofh$B-Odw2qLJz8H5Bt07b9fLexQg$98QK+pfy0VCvCW-VQsxIiUlb+RlbMQ92VQVref0Vcg3yb-itxQT0UcaqBbCitxsj3WcaK52niPXrTpJfwN60liNXzT$2-XqK2HAKXrgZu8aIU2D3D5aY3Ucb3K9ErsztS6r8bAcHoyGXsRvp8XyYYHyoKx7L-Hs7b9af0w61Zwcoq09-fU9QJXwc3QsH9fLwXpK789Qr2crJzPJD-8XE-0LqGKPHp-f23khZrLAip0y-zqw6sfREJHRgHvqO0dUHLbNSuYydEAu53Nsa3ffQ+gha3Ax9lnJM$CMY66rI0OTffJNx2ZIzPSPFXFSjf9vCVAiwj3ARArbPyDrRa0fx7j$qZI1QDIVDy802huq5QIcFIvcGjCkjkMnZ9kSXt+9Df-57i$VVRt5hpiCV8fHE8pqOI8ACE$6SAAATQoerSWlSsAZj4$-ADNRW53hRWtsqBRo-uo6W9WfVTNYWeOTvjYO1AusjP51Bw6C6QNQr0i6AASrIAPLAFxV66FjZIDMC6neXfCUgdCh3RxewYdn5IlIw6fXSqS-XGUOZZ$Ud0IVNAGjQAdeIAjWjjnNAAXxLQEzcA0Wi977L-TwjQ5+cUNKALSvxGeIMchnpHcyQzGYZyAP6L1H+jgzvNKcIAi+gGYZxCAFg-oTygGi$wASACzCyQozcZ4zioL6A+yxUQASPLFXl9JQE5OIjMp$jhcIjWzfZ+cGaM6CnUW5QNaRyIwvOAT804AU7n277nQAAj22MbMerywjTAIbtgFdc$jizuIsAXEbtBjKd6H6X2cIANT0t-j55UjCgAZ5$L2TJ6qBiLYDMkJ7S55ZMZa6LnkWOUr6w$j8dWVNIp12xo-6QK3wlO+AYOMgugOPl9hyNQN02hnqPL2jo+qkFlqVjAXfAPGo5ReIl3vffjdqkIJIbQLgoDyAveVqBYAjh86AcIMk6MLAL1HLj5j5A$B2ASAjZA6Ww5hwtTFqVgU3xQNPbSlRi58L3h55$SVaMXY5M+jDkNQANwNVNeZGgA+MlIeFrfAwoFqL3wIGILfAvCyqeQioRNYvAAjxoDZI3IUl2vsfwLnDftWy$zFkpAY4DpVSsz6wZfBLoo5javdAAA8cB2AA"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:46 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: RoPN6UN8Ne4u4ylaWAVp/w==$pdHoyGDrbTm2MMrZjJMnqw==\r\nset-cookie: cf_clearance=Luc5B_xGNKud4Qcu78u1ru2iBAXns_RK.YAdvRy4R3Y-1777936906-1.2.1.1-nO4fOl99X2eiHT3ZUBZ4pPK1tVMt9KXbFAowztzUfjmwaIu4.Qqsj2ocQ7Yjbx7nsdQcE0L7tWzpZLluugg8UpVCoUeS6IR3xjXXrIrAKxDnxUkc80MZYHxBQqaCL6khJeCPTrpS_sZGyG5XVNOaLbC5gOHIhKyHcKVYxMV6VrlDLfbJfVWzEtiT7yY57EQJw6e9uJlOi3slKS6Q0O6dLiVNmVoraHePkMepQllWrrKpn..EqxYAwGF0fBekSV08dmXiwtLsYdwRtZn1.hxw0NzXCxQrfs5O_wbVjQV2wTcOGhX0bJXoHlKvls_z0gxBqTpyE3AeF8rIx6WxRpsaLg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=zlon7.to; Expires=Tue, 04 May 2027 23:21:46 GMT\r\ntiming-allow-origin: https://captcha.zlon7.to\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f6b3e5f2a0fb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra19c.cc/","fqdn":"kra19c.cc","domain":"kra19c.cc","tld":"cc"},"ip":{"addr":"104.21.75.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:42.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra19c.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 15:36:54 GMT","end":"Fri, 19 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"C4:FA:9D:C2:0B:87:5E:D4:D5:00:9A:06:51:1E:43:D1:93:44:A5:53","sha256":"28:82:BC:05:0D:5D:CD:86:0E:8B:83:6F:93:46:40:8B:7F:DD:90:11:23:2C:03:7E:3F:28:2E:8A:71:A2:E5:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kra19c.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 04 May 2026 23:21:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://zlon7.to?from_host=kra19c.cc\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex\r\nset-cookie: go=1; expires=Mon, 04 May 2026 23:31:42 GMT; Max-Age=600; path=/\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIJ%2BKO8VL8rvwwooiz4tNm7stjVS1nD%2BtyPNfi37KXjlKdRNHDJa%2FP7CaxSeysIe%2F3AU47qjwSp1dz46rjVP6ZXUfmxiQUQFh7%2BPIlQQDY9wl1GmUUIapGMqw7Y%3D\"}]}\r\ncf-ray: 9f6b3e4b49755689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":44,"dns":29,"connect":2,"send":0,"wait":84,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"kra19c.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"kra19c.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:45.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zlon7.to/?from_host=kra19c.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9f6b3e597e5fb509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: tor_scheme_id=1778459409; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\ntor_port=9376; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\nsession_id=79670104478fa733d47b24154c6b6e86; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\nsession_id_e=819b7e4cba378eda85585b2083a20120; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/; domain=.zlon7.to\nconnecting_hash_lite_version=1777936905; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/; domain=.zlon7.to\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4B%2F9znSHdnzRSZ7YK7PUyJ0qG3bKDD1pW%2F7mt%2BT%2FFGqpfYXQ8jILHGy4s3stD%2FCVxm9YtPeslnAGVzLpewfvW4JnVdiJDIumKMjwlOz%2BiMvriHkz3hsHrny4RA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"db0ef7a6fa6d70fbefefba1b207d2c03","sha1":"dcaa051c8001b7c22c0071ed24608f19240927d7","sha256":"628cc79a542babcf19310709d632aa0f63758be9467b6fe4080d830e3340c8e8","sha512":"94c299fd3bb47de6f4e6cc3b8458c324765e7a8bf51b21e29eaec030ce80803afc4e8903d7264e052fa3cf6ddef67724b155d47df4bb75583577f5412e1ed6ff","ssdeep":"","tlshash":"3b21dc229c82cc9083308621fc6af90c9b95d1bf1b899e8971c8146fb8d1bc4c86379d","first_seen":"2026-05-04T23:22:10.268392Z","last_seen":"2026-05-04T23:22:10.268392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:45.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; tor_scheme_id=1778459409; tor_port=9376; session_id=79670104478fa733d47b24154c6b6e86; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; connecting_hash=94ca0849e056f6d43434456e10582471; onion_server_id=5\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: /\r\ncf-ray: 9f6b3e5a7ef3b509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: proxy_cf_session_id=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.zlon7.to\nsession_temp_active=1; expires=Tue, 05 May 2026 00:51:45 GMT; Max-Age=5400; path=/; domain=.zlon7.to\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ityLCxrzeIGv3QBfvXZs5q96fvYnYbI1aOaS96wc04OJIVdO6n%2FZbBYOvZLvLamc2OGHAi8bm2hgMfXz70nJI4LA6UFVw4Mbu%2BBfptfOf5Pbi5v3zeSJ%2FgZeUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23931,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/css/normalize.css","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon7.to/\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/css\r\ncontent-length: 1369\r\ncf-ray: 9f6b3e5d0896b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 4051\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"116d-648ec19fb4db8-gzip\"\r\nlast-modified: Wed, 21 Jan 2026 20:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0FiYbbnNvxucXrVKCFEOB7VzlzC8xmlCFmKC8%2BtxbN6zUmFwSfbZDwBuGJ4nuzfrWV9bgJSV01SCPrz8wPl3sQ9wGGcsjkhPt3LjL2y2klvT4rR2DXDkVKCLpELOnl32zLt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aab74d6ca10a0902b9fac0e304c4be13","sha1":"7cc28584e1cd4acf258f32322b198faa19e2c47c","sha256":"6b1e238b3810eef313f24f098db4d880175b3ed1168f0c9faaaff9b53089c2fa","sha512":"8908ebef958dec57ec62f0841a1631bfa992ce53e13a55fe00686f1c3ecabedfb662d50d5e567c69c03b0470de149c2bddeaa1a9f9903cfce4bdccfc5ffe1d27","ssdeep":"48:z2Gaml89fIcJq7e/BQLQ1nrnccRjXdmnm/IZvJzXsacPaQfk:KM89fI6z/tTnWHO1c","tlshash":"549151651b604f11522b4e38339beb1533188233895d38ececa199edcf8675bd6d17ca","first_seen":"2023-04-18T10:14:13Z","last_seen":"2026-07-21T12:02:27.317175Z","times_seen":1257,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/?from_host=kra19c.cc","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:43.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /?from_host=kra19c.cc HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 04 May 2026 23:21:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wd1vf%2FQXdK1Ubk95a7c4HxmkbmtV3z65bgEru8gh1A8DjBKOpqXsHGAf99IrqAQ47Mo7qz1CgTtrCPFD7tXuQvODeVVu%2FnYSaekBbWSYblgLqbK1ksmS25mEtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f6b3e4c0bb556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5530), with no line terminators","md5":"017f0d8cfd843919231ae41cefefd866","sha1":"5a0fd538d92af0790409575e11e2d3ad6ff56f8c","sha256":"ba0ab85ea9afa30e6fe7f9190b5a75f0a5a496a19ab2e2cb46c03f56ec22621b","sha512":"a9189e1b0817bdfb49a82ec3caa1eeb65bd6616a5f24a45c40ae177777570410d49768d611a6134f7b3747673ea92f68b5f4fe5582b5d76c7358722a36862ea7","ssdeep":"96:hybXZSIO/CebOV/EQnRGJkuY6NllVj5P888rwSDF8/:h+O/CebwsQRGJkuY4LjJM6","tlshash":"86b1c9376e24300e1227cbeeb5d4f7892070c108c24392a5fd9b5b548fc66a76933b9c","first_seen":"2026-05-04T23:22:10.270791Z","last_seen":"2026-05-04T23:22:10.270791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":45,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/favicon.ico","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zlon7.to/?from_host=kra19c.cc","date":"2026-05-04T23:21:43.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zlon7.to/?from_host=kra19c.cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:43 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-ray: 9f6b3e4d9f21b509-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 4051\r\ncache-control: max-age=14400\r\nlast-modified: Wed, 21 Jan 2026 20:51:55 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwXF9Oe5Zy6ZoaAdUOWo%2FmW1%2FsIhQzw5WTJme2wL6%2FGoN7jGn5NkspIhKNSVQ9t%2BxOo9LpRxcHn28ZxSzrluDwNgB2XL5oy0yyuT4CdgIeJS6BxUYESMtFGS9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"256-648ec182ae724\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-07-21T23:36:49.581003Z","times_seen":3745,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/modules/onion_servers/take_server.php","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zlon7.to/","date":"2026-05-04T23:21:45.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /modules/onion_servers/take_server.php HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; tor_scheme_id=1778459409; tor_port=9376; session_id=79670104478fa733d47b24154c6b6e86; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; connecting_hash=94ca0849e056f6d43434456e10582471\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9f6b3e5a1eb5b509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: onion_server_id=5; expires=Tue, 04 May 2027 23:21:45 GMT; Max-Age=31536000; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kehCl9woG0NaczwDbseYPglchKeu%2BoLMizl9neQCwOYVpshSujrg%2BIBND2shHBX7b0aoMksmPw7d0hedDguamhSf8fed7LRziZMmRLGDsnVq6El696gXZ3pAQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://captcha.zlon7.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 13:42:27 GMT\r\nexpires: Mon, 03 May 2027 13:42:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 121159\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T02:26:42.186822Z","times_seen":241776,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/fe6331af5207/main.js?","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fe6331af5207/main.js? HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f6b3e5e597cb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23126,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23126), with no line terminators","md5":"f4f256ff7f93df592eb42b03f75427fa","sha1":"ff59eaefc1a9e92279f278c2b6021770901f6de2","sha256":"fb3cc5e8024600c2631e8c17f01b119dbbff258b68b543aebe50b4a64f414a14","sha512":"c8bab4e43fd984cae80e832091feabfb1b6191856f53268577ce5a5d79da0b55a9b9cdb5f556c2098b5d0f08c7190713876ed4ee8f901959761089cfb8908a44","ssdeep":"384:bgvJUcEsLyHHowFs6iwX7rNMer9oGgrwfckfNGeHKjMAkqE5q:bgvJ+EyHHojwX7BrsSN3h8","tlshash":"6aa2dbda74d274244795e0b5082bbcd7e2afac84340c9458e6a1e7f8be76704c5b7a3c","first_seen":"2026-05-04T23:22:10.274435Z","last_seen":"2026-05-05T00:14:19.224816Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:45.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; tor_scheme_id=1778459409; tor_port=9376; session_id=79670104478fa733d47b24154c6b6e86; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; connecting_hash=94ca0849e056f6d43434456e10582471; onion_server_id=5; session_temp_active=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://captcha.zlon7.to\r\ncf-ray: 9f6b3e5abf19b509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PgjMlRaBKrvttE5D8fphsJtRljQ8IXL7McH8wDVWRiqmSvmGClGj13mHkqWAe8Q%2BTmz4vrxJaZZIPFERbvfpDql26EI8It%2F7okaLrdv9%2Fi98Vr%2FQlTqMdtAIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23931,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/modules/onion_servers/take_server.php","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:45.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /modules/onion_servers/take_server.php HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon7.to/\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9f6b3e5e2962b509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7vYAkTaeYz6CHRz33dRt2JzrIX286UT2eRGbB8rnDy%2BtmlgaSCy2tO3YqD4MSj%2BwxWmdxfHUdrCfonh%2BhU7s5ZQNWK0L%2FNNwYVi3D01bfh89qUz7%2B0tK%2BXOOr9g9z4uE2Kh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.zlon7.to/favicon.ico","fqdn":"captcha.zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.zlon7.to/","date":"2026-05-04T23:21:46.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.zlon7.to/\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905; session_temp_active=1; tor_scheme_id=1778541791; tor_port=9140; session_id=40d5f347f66f4e31c23811cf20749028; onion_server_id=6; remote_route=7; remote_server_id=csrv_18\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:46 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-ray: 9f6b3e5ef9f1b509-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 4051\r\ncache-control: max-age=14400\r\nlast-modified: Wed, 21 Jan 2026 20:51:55 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRKDd%2FdsBBV2dmAkXH805c8UR751RAMWNcCBidI18it9YEZsWrKhlbudiryWzRhZbLWm%2BZZ9YgDWfjqVVHkqYVfRYvtXSKN7MlxhWnAqRQorff0gQN5SNTLaDqWd635BkW0m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"256-648ec182ae724\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-07-21T23:36:49.581003Z","times_seen":3745,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"captcha.zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/?from_host=kra19c.cc","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T23:21:45.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /?from_host=kra19c.cc HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zlon7.to/?from_host=kra19c.cc\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: /\r\ncf-ray: 9f6b3e593e2eb509-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: http_refererq2=https%3A%2F%2Fkra19c.cc; expires=Tue, 05 May 2026 00:21:45 GMT; Max-Age=3600; path=/; domain=.zlon7.to\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5biF2vaJ3mYyLpZz%2BABBLb206YnPIY9c0cmg4KU2a6sGnKY1adxQQUQxf1nP%2F2FXXA7nOHacYhFj4%2BWB7Cj6m8gk17GEhe5a00DRMng%2B2IOAUkJP8DnCJMTDdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T02:24:28.635112Z","times_seen":17437918,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zlon7.to/js/connect.min.js?2","fqdn":"zlon7.to","domain":"zlon7.to","tld":"to"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zlon7.to/","date":"2026-05-04T23:21:45.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlon7.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 16:04:03 GMT","end":"Tue, 28 Jul 2026 16:04:02 GMT"},"fingerprint":{"sha1":"AF:38:04:2F:B7:F5:4A:0E:DB:59:44:99:21:4D:D0:42:F7:82:30:08","sha256":"8E:DC:14:0C:71:46:43:3A:09:8D:40:E5:E3:46:FC:BF:CC:5F:49:FD:CA:0F:86:7D:AE:B5:68:C9:20:45:CA:E7"}}},"request":{"raw":"GET /js/connect.min.js?2 HTTP/1.1\r\nHost: zlon7.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zlon7.to/\r\nCookie: __cf_turnstile_clearance=1777936903:zrRF4FVKT+MvsuqvQSDS9NlbsjSRx44tTEkxvIpY+NY=; http_refererq2=https%3A%2F%2Fkra19c.cc; tor_scheme_id=1778459409; tor_port=9376; session_id=79670104478fa733d47b24154c6b6e86; session_id_e=819b7e4cba378eda85585b2083a20120; connecting_hash_lite_version=1777936905\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 23:21:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2923\r\ncf-ray: 9f6b3e59fe9fb509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 6969\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"2c0a-648ec1d15a121-gzip\"\r\nlast-modified: Wed, 21 Jan 2026 20:53:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jgC2O7c%2Fe8S04oPC9BQbvnJwZojB6Fh6jIRbAuU5XAL9WuBYiTCyW%2Bn4qgm4n8tvpVVHzxyYHI5B1VT37LTz3kgT%2BA26yu1oIZkJ%2BfnOBeTv6oYC1tH3y%2BHYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11274), with no line terminators","md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-07-21T12:02:27.31767Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"zlon7.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}