{"report_id":"e7acf5d1-5a7a-449b-bfe7-ad6ef9518a55","version":6,"status":"done","tags":[],"date":"2026-03-26T14:15:09Z","url":{"schema":"http","addr":"keeta.us.cc","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"172.67.152.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pc.keeta.us.cc//#/?from=mobile","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"title":"Keeta: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil","dom":{"size":64252,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55664)","md5":"d6c7d8af4e2d58753c0f0ff590511509","sha1":"3dd4d7eca299227b5e180d8acafa56dd1e3b801d","sha256":"4835a43e47ccc5351f765d57a61dca8b5ba9ae528e5d7635a4a74108b5073e42","sha512":"a95be5b3f492c3fa18939d975f8fbc3dee5fab7d1def18770112e04cdff10e77a6bf894ca237f8ff5f1e6efe3b0a1634f25566335d4ee6521944055e73ecc630","ssdeep":"1536:qQ+xHtSH1Bsg4XNgx3kG9c82i3kZsc8Qe3kDoc8M6mMqHSakKc:udt01Bs/kH","tlshash":"c2535134615052bb017385e4f0b9be197ea5fb4fc32bce4277ec92a16fcadb465211a0","dom_hash":"domhashe71f856897cde77dfc583ef517972aaa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"keeta.us.cc","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"172.67.152.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T14:15:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:52Z","timestamp":1774534492,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44472,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:52.466540+0000\",\"flow_id\":595824696078879,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44472,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:51.897567+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:52Z","timestamp":1774534492,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44460,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:52.473744+0000\",\"flow_id\":1673116310545057,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44460,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:51.893601+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:52Z","timestamp":1774534492,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44502,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:52.662920+0000\",\"flow_id\":1855214334002989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44502,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.149293+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:52Z","timestamp":1774534492,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44486,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:52.672723+0000\",\"flow_id\":441798578947559,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44486,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.148967+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:52Z","timestamp":1774534492,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44514,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:52.849372+0000\",\"flow_id\":837057976742349,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44514,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":910,\"bytes_toclient\":3148,\"start\":\"2026-03-26T14:14:52.274893+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44524,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.071429+0000\",\"flow_id\":582441578006712,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44524,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.526520+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44558,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.154391+0000\",\"flow_id\":1768593433573808,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44558,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.604592+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44536,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.180680+0000\",\"flow_id\":1573181011538016,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44536,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.602208+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44578,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.382877+0000\",\"flow_id\":1340228427847209,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44578,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.857641+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44564,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.392317+0000\",\"flow_id\":322273934051635,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44564,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-03-26T14:14:52.854323+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44570,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.433099+0000\",\"flow_id\":1132032035654981,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44570,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-03-26T14:14:52.855365+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44550,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.899801+0000\",\"flow_id\":1919202904257837,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":44550,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":1638,\"bytes_toclient\":3148,\"start\":\"2026-03-26T14:14:52.603437+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pc.keeta.us.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-04-07","domain_rank":0,"first_seen":"2026-03-26T14:15:17.817275Z","last_seen":"2026-03-26T14:15:17.817275Z","alert_count":38,"request_count":38,"received_data":10562872,"sent_data":15788,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"keeta.us.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-04-07","domain_rank":0,"first_seen":"2026-03-26T13:09:21.298144Z","last_seen":"2026-03-26T13:09:21.298144Z","alert_count":25,"request_count":25,"received_data":3956472,"sent_data":10084,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.keeta.bz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-06","domain_rank":0,"first_seen":"2026-03-16T14:21:40.582885Z","last_seen":"2026-03-16T14:21:40.582885Z","alert_count":0,"request_count":16,"received_data":62878,"sent_data":8146,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-12T08:38:00.929095Z","last_seen":"2026-03-14T09:22:16.004508Z","alert_count":0,"request_count":13,"received_data":3933091,"sent_data":6234,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-2c48c360.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"54706ed2fbff5c698576521e14d86022","sha1":"eb5f9a259fbc039ad2f0f1300c345a851e87e6fc","sha256":"edd91ebfa6bcdcce33363cd4efd1101e65c8739d386f4983c5083fe8aa171764","sha512":"330a3d114d6ae6a0b1c8717c47cc1d58d9f47f412b001c8d48587985ea01e83dd9b9018d3caf773060fc2026fa83356dd2c9112650bdde656f0fe8494774e40a","ssdeep":"","tlshash":"b7f0053f747dc1b25fe2c45c61630420991d1b453720c8d4ba0d072157385a6f37e515","size":569,"data":"","first_seen":"2026-03-26T13:09:32.689141Z","last_seen":"2026-03-26T14:42:32.266102Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4bdbb140ce1563e4b69697bfc87a22ed","sha1":"3d0bf1d707b71f8e08c64440b932b1313be97021","sha256":"80b1970f763f3e19389f0305389f079d22b077722a71eccede3d5133f3f5db89","sha512":"8d9ca42b5cf4816ea6845418284410fd1eb52a6375357986f67d0c5936536a2b53072c33f33511bd979ef5ed1d06977ae4220dce191b1b20352cda01ef12bddf","ssdeep":"","tlshash":"6ac08cc4a0c23e001602642011af24e49024402770482b128cd4d8582e220b48233ed8","size":137,"data":"","first_seen":"2024-12-26T23:29:40.159201Z","last_seen":"2026-06-08T05:16:21.747197Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ce2a497ed52d60984017d6c50050212f","sha1":"e5061d81325e8091799c99881264070b9ac648df","sha256":"87fe3ff7d869ecf3e942e21576e5622bea21282217409f77a14020c2160da30f","sha512":"88dbc2af0f09af280efe0b5ef7e7ba913e866c50c75aae5916ef6ffccb16a7a55ffc7b6c8158d18d17636845b7e139c2afd21b3dc1f030de36bf63136c7aa88d","ssdeep":"","tlshash":"34c08cc4a1c33d001a06661120bf39e4a0248026704c5b128cd4e8492e230b88237e9c","size":145,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-08T05:16:21.800816Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"958713e9cfe5596854ed0b863f4d907b","sha1":"dac8755881013fc4078021ba1e551de0af8f6d94","sha256":"4eaeb0325b6bfce2510e1786f9cd8513dd1617a9f384725983745751cb6960dc","sha512":"9e713931d544f9a9b15a59606205b925ea5ca6dee61ab50ac01b9ed6459c92720c5c31c81939ee0a5a1caf3c414bb1ca5172af93f19afd79adf6045c68304b56","ssdeep":"","tlshash":"f9c08cc4a0c26d001a16649010bf25e4a024402af44c1b02cc94d8482e220b08233edc","size":141,"data":"","first_seen":"2024-08-20T15:10:19.411327Z","last_seen":"2026-06-08T05:16:21.779649Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/charting_library/charting_library.min.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a77ffc8fcd5be8f12fb99bc8118151ea","sha1":"65c43d3029a382b86defc99c54613aa6a32ea375","sha256":"40516dd855287dd360d48125cb9de73ff1ac1d47f2faedbac5227338bf02948e","sha512":"3f80885ba525b9069484a79918215f8e3f8f830d5e81286b8772be124ed6928c6a994c91617a57d7558ac347bb079f660f65aeffebd15768b4e403210299d170","ssdeep":"","tlshash":"64c08cc4a0c66d101612652010bf25e89034402770581b068c94dc482e220b18233e9c","size":141,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.737756Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0bdfbccbc6d898ee51eaa3b961c798a6","sha1":"c894c07aef0757480960b3686131f827f8ce3f50","sha256":"3a3185c3a7e53a7152a5e17ac9970a556b6fb332b13daca744c0f305ad32abc5","sha512":"3d9fdf087e9de100b08c2cb899fc211e30960fe4fbe7352afedf7ece185b4a275d1e2d1c53ebc7058cc9261edad1f2ec8481bacd15f1f2c6d62ed99d718b0df1","ssdeep":"","tlshash":"56c08cc4a0c23d001602661150af25e49034402a70481b02cc95d8482e220b08237ea8","size":138,"data":"","first_seen":"2024-12-26T23:29:40.150645Z","last_seen":"2026-06-08T05:16:21.751621Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02b0d6f6fd6bafb529a8dd3a4a1e6852","sha1":"914f1241f7921c6be7ab7aa7dddffa9fd2d2431a","sha256":"bd5008e08c5e13916e0b7e2f6eb9c79397a28285e1fe0fdf2fd0c2835ee837db","sha512":"4bbe30ec966374b9a8e651d30e73aead81d973095412c5b1431599a7fe43f33442b27ea4f417c2426e27d1dcd35fe24003542e535914274f23b4d6a9158d6d4a","ssdeep":"","tlshash":"00c08cc5a0e3bd102a02641150af25e4a0244026b08c5b13cc94e8483f730f48237eac","size":150,"data":"","first_seen":"2024-12-26T23:29:40.182164Z","last_seen":"2026-06-08T05:16:21.739533Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.767001Z","times_seen":1327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.741287Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"926ad28c98be26c2ab7d8f231631853c","sha1":"c1c7788df347ea5ab2369ae95456a8a1f7d9f150","sha256":"ec5e8816f60cbbf34b660d2d1455234d92295ab1a210868d6bbfeab7359e438a","sha512":"6f8eb48bc8638821747a26fc6370ee240e58d47699acbe5a1fb2bff1b25d62c6918f6df77dd78da3bc1b3e3d14eb849ccd4e0d1e01593294187bfd509be2ebdb","ssdeep":"","tlshash":"a5c08cc4a0c22d001a02641410af24e49024402ab44c1b029dd4d8482e220f08237ed8","size":138,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-06-08T05:16:21.74392Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6761399667e159382795670307c56d4a","sha1":"0a7d1e2ee37ca2a7ad94d37a8cf3195e0454ee6a","sha256":"3eb331e48962f88c94b472a1734ca51229e4233d4759f0574e6224791cc1a8a1","sha512":"85151f1ac3d7cfc6a12be0a617c2f6cea16ef6a5c692ad096577c4f82702ca3ae18b9561bafcf019076702ae2ed9157707a756555edbcce8f91945705ea00b91","ssdeep":"","tlshash":"1ac08cc5a0e22e001a02b41018bf28e89028402678485b138cd4d8682e220b48233e98","size":144,"data":"","first_seen":"2024-11-12T08:48:04.754569Z","last_seen":"2026-06-08T05:16:21.762817Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e76eb5064dc39e5a2b6a62342ae8703f","sha1":"046af428ba37b0afcd09551ec358126c7e5fb2f7","sha256":"9e2df5013aaf547c80e4c019eb5a4313788ceb2ad6e32c7934aa82160fea41dc","sha512":"3644c12ae07c497b666c72d28dabb67a2e874e249a10885adeb1d5d5e80e58ac8ad51e4993b9fcaa12393d69c816af8e2d87e331266c0fc2bf32084562cd8803","ssdeep":"","tlshash":"75c08cc4b0d22d006602641092af34e490288426b0482b028ca4dc682ea20b08233ea8","size":138,"data":"","first_seen":"2024-12-26T23:29:40.115592Z","last_seen":"2026-06-08T05:16:21.786Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d80fe4b7bbdcc84c4954304b7f65ab19","sha1":"91d3251c7e36145106999abaf130a3108e9da46b","sha256":"9e4fe10b1520f75266816a855536031d99b800c719f948f8c360c6775cbd1baa","sha512":"8c8dd0f47da79cf25188d9228f1b84df49eba05c702f32c078465d357387fc1729c81d77a822106c43383eb0809bbd1bd3f8114ef382dc8f508723cc3e86822e","ssdeep":"","tlshash":"9cc08cd4a0d22d002a06645419ef24e490284027b0481b129ce8e8482e230b08333ea8","size":145,"data":"","first_seen":"2024-12-26T23:29:40.190285Z","last_seen":"2026-06-08T05:16:21.74069Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b13214394869cfc2263a80ebda9e97c2","sha1":"fd3d0446b76ba18f204c51bd7ae6f1bcfa735327","sha256":"2e3e5884ee90f598aea5fe2e6145b26de946cee0b0e91d938847fd98a131507c","sha512":"dad8bff9fac46e795e696e5476a920621f8620d23b38e50d6f992ee503e6ea8095b5824cfabb09a288e2e3a450347e9c3e20e18a946e71ada0e11911a32d6dde","ssdeep":"","tlshash":"02c08cc4a0c23e001a02a41014af75e49024402670881b528cd4d8482e630b08233ea8","size":140,"data":"","first_seen":"2024-11-12T08:48:04.739405Z","last_seen":"2026-06-08T05:16:21.802062Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/PdfViewer-Bywmxs84.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e3c39d8baec42a02312cbcb0eb0c7855","sha1":"e178c011915fcc641147a3be32e5d1c795de0835","sha256":"8815fe9866f6809e8e00c92ffcb86bf437d4d6830f68634e551bb3391eb196d1","sha512":"6e6d4bf6bfd4c2f3c8364ea714878f5df35edce33c4def4c1d259a2850e067e7e8ff99aa949c423b8ed8eb7632343378c7d47de4b310be7ad6af2a00d4c9bc17","ssdeep":"24576:rkpMcCJkPXXqhIqbOt7aFMz3FuEoYlOsp8yDpm0gLsC7Xl/:rkpMcCKPXXqh/CFR+l/","tlshash":"3ea5a072634372e96b79468671b91609437f154d34f3a1c8ed8e2edac52ed2a237c23c","size":2202788,"data":"","first_seen":"2026-03-16T14:21:50.149469Z","last_seen":"2026-03-26T14:42:32.290868Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a1161c3435dbb64633547fa555f68dae","sha1":"321b3b17aaee8ba598a7e8a550f51a4feb9a2bdd","sha256":"97e68db2fc8a0da179e8514910d515327fa981a336dec334a4587a5b2140b632","sha512":"35230123e5758b1e238b830069457699e1ba21f302b7ab4f5a9c706ec65487f1b415c9106ac9fc13bc451f4980ca3a908c17eadd85831d4ee794152cc873b168","ssdeep":"","tlshash":"9ac08cc4a0ca2d001602642420af24e89024402ab0485b428cd4d8482e220b08233ea8","size":139,"data":"","first_seen":"2024-12-26T23:29:40.133617Z","last_seen":"2026-06-08T05:16:21.791483Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"527ccf0c9fea936f7220396c42116f9e","sha1":"bb83e06e63a61a2b078dbe2db49aea4136118615","sha256":"7a6d8de28f2908198b85042a943d78cc771a471342545d3a1c0d473156a2861b","sha512":"cb3690488d304aeb6011d6de928f189c4eeec9134ab6a8b269eae6879a36741cad69179e87582b70fe9ebad18db0faf0f90c54e88c45aa28df5e5634fe17a634","ssdeep":"","tlshash":"7ac08cc4b0c22e001602641010af28e490244026b4481b138cd4e8482e230b08233e98","size":136,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-06-08T05:16:21.769911Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"754f1a92bcda7b7b70bcb4c84d6b90a2","sha1":"68dae7cea08fcdf789277cc378cb53d8c9540c8a","sha256":"bf00ce7899e0c4b35810c2cb7c550f0db913f7240ba6dbb7df0e374fa7c127a6","sha512":"741805a147e34ae9e3faab586312edf0097951d85015bf6d9dab655ff4dd2e968eb4beeb762544d19f6a8d357f12fa5c310f061359e21fb00d2906d4a9728a74","ssdeep":"","tlshash":"4fc08cc4a0cb6e001a02781010ef24e8a024802670481b43ddd4d8482e230b48233e98","size":146,"data":"","first_seen":"2024-12-26T23:29:40.208529Z","last_seen":"2026-06-08T05:16:21.735928Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b278df981fcb78387c3848ae889c87e0","sha1":"b981f308e8430a10c0d0552a561c2367d3b90347","sha256":"0d3c1103f316cb04c462c59ca12a02937ae82958daaf8b63b2c34b5fe1969777","sha512":"cb0c64bc51d8e0d47f87ab0cfb30cef2b2c478aa2d726e6869450bbbfed9e4de2e30a429542c4722f14548b59db01eb4d6b2fdd7915a22b374784068054ddebc","ssdeep":"","tlshash":"78c08cc4b0c36e112b86695415bf2de490288026b44c1b139de8e8492e630f08333eac","size":154,"data":"","first_seen":"2024-12-26T23:29:40.161991Z","last_seen":"2026-06-08T05:16:21.798348Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/assets-756b88fd.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ae12174f6149b7fbecb0df6d32955994","sha1":"3db185ce2ad823e143e0bbda1e3ff74664f6c8ce","sha256":"7886a5957c26ad1c7747b1539cd9cf72336a9b38218a0ce329cba5d8df79a0de","sha512":"f7b5acced7dc8c949cca7a114ab0d6e759d05cea68e523e81d322bdbe75aba158d04e300dfbce9dc2fb9aa275c51166e30fc016bec662f7e1eb612ee1c9d984e","ssdeep":"","tlshash":"6241b6342242313bc6f6408646405b51b70dab5a4f18edb0bcee47b55f38cc9d17e2e4","size":2245,"data":"","first_seen":"2026-03-26T13:09:32.675791Z","last_seen":"2026-03-26T14:42:32.279139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-06-08T05:16:21.762094Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6ac9071d9932331d6f13c28662df3eaa","sha1":"f6eb1baa0bd1ae6f59ae6aceb867f897511aeee1","sha256":"b4c3e0db43ddfac91e82f4f458144da6e4066d57aa41fed04d86cd9b3c0e368d","sha512":"cefe8e65fa5d8690b53f96ad56320e72dba887c3ccd4df0d4eb9000a5bc903b77d1b7ae8b1ad7ec25ec0443e8fd41327e3deb9238f38884b08549579c918e3ca","ssdeep":"","tlshash":"25c08cc4a0c22d201606682014af24e490244026704c2b028dd4d8492ea34b48233e98","size":140,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T06:01:07.252666Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e129ae180e9f42bd8fb792476a7bd80a","sha1":"2c533ecafe5fc62de12ee7c6390d2a710d755554","sha256":"3cab2efc0da1eb38ecca758bcc3dc3d9e1d3e520287715d8401cc5bd6b99b5a5","sha512":"def450ab91d82d748f72da131700c83c67309c51912be7d21ee8f58cc04bbd905b5b4a549ee51e72b9ff6047743077228ba1577f584ea9fd8267861c9e0a2559","ssdeep":"","tlshash":"7dc08cc4a0cb2d001a02646010ef29e4a028402670485b42dc94dc492e220b08237ed8","size":139,"data":"","first_seen":"2024-12-26T23:29:40.179271Z","last_seen":"2026-06-08T05:16:21.741965Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afc8490e468f7b633e2c4221d6712d54","sha1":"b6efa8027a8b452305ca1d2fcaa32632cbd108ff","sha256":"38bc34c915b53e2444ae9e6c602d5010d370de127ec7c141a55d964a91ed7f96","sha512":"5158d9fda9d8c70eb8eedd8f75163df63e261a505f5c2e3b2f6627c24944f8c2bd3664d110d0d7fc10507a85672598fd87973f933544cf83edd9d22110b605e0","ssdeep":"","tlshash":"28c080c570c26e405b016510107f27f49038445771c91756ccd4dc453e220f08233f9c","size":159,"data":"","first_seen":"2025-07-19T00:50:04.724885Z","last_seen":"2026-06-08T05:16:21.790265Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e22d8bd688d257f7ea5c92b205e9d7fd","sha1":"f5df3e5272f05fcb05dac2a225541ac319109bd6","sha256":"f5d478f44ac485fb4eee6e4a365fa3e080288dfc331165b54110dae255b895aa","sha512":"76cfe7d07e02a113298a5d6222e71a301001912a52801ec9b16d3d088a9d94bf74cc2f4a0e92e3763c92b7729897b6d44d5e4234b2da54bfd872d5b07c6ced89","ssdeep":"","tlshash":"ebc080c870c32d141511641019bf64d55034541771499b528dd4dc542e120f44137edc","size":164,"data":"","first_seen":"2025-07-19T00:50:04.709856Z","last_seen":"2026-06-08T05:16:21.780383Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T11:27:23.68344Z","times_seen":5628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5883e608660ca3e9576fc295eff4aff0","sha1":"1614af2d0325e090f0ba79e0caa09f013aa0c41f","sha256":"c8886c784225fa2ff20fe665f47cb590bbf87f847b5786055bc0dbcc39431eae","sha512":"e5ad9d2fdc63bbf65cd98c3cb2b15c2fed966b097a555418a75a55d2a7578a68e577d42f21c0526f349e4938dab26bde0b670615ca9f6d823fb5e80a02a7cef0","ssdeep":"","tlshash":"44c08cc5a0c3ae005602a81110af24e89024802ab0ca1f038cd8d84c2e220b08233e98","size":144,"data":"","first_seen":"2024-05-11T18:07:41Z","last_seen":"2026-06-08T01:43:54.970048Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-08T05:16:21.744552Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-08T05:16:21.760327Z","times_seen":3523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2b58db56244ebcfd6a85dcf916fffc69","sha1":"1c6fc921903930b2c592d55173139d7ac0b74f72","sha256":"cca7e23feff36a15e04cb272e18dab9759c807fd3f19e77b34f8b882b8943012","sha512":"c9eeeb6ea699d2bf16040ae078ba87aa5da85bcaf137cebda5f8969780b3031f707b5207f3b9f6568fbb43494bd39fc1d5bbac0352f513f570e40621e2bc82c5","ssdeep":"","tlshash":"ffc08cc4a0d36d101622681010bf24e490248027b25c2b028cd4d8892e630b08237e98","size":144,"data":"","first_seen":"2023-11-16T03:00:18Z","last_seen":"2026-06-08T05:16:21.794226Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"64f2e3849b087e9673f4b45d5cd8eb84","sha1":"8800abc4045a71eee4b56ee83b315fee00f86c0e","sha256":"c4d98a40e5ab2373588a69ab39b105c4d3d6d85764e2e175b510fccc3eb2593c","sha512":"21685f613d84a093a68acb9de21f67a765d9be79916c0d839e5951cc965f176447dae3359c90eae275abd9e2577d80207fb7b84e290b6294e4c4fe402fbe4209","ssdeep":"","tlshash":"88a002914a0610503474140cdf5733006563803b844cd0013a0c91823f34737c30a1f5","size":72,"data":"","first_seen":"2025-07-19T00:50:04.711122Z","last_seen":"2026-06-01T14:33:52.193981Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e18503cc965f5cacb2f944e681422199","sha1":"e5c5c1d6e670e6126d578b06ceba270330a76095","sha256":"8037f722f9ceaae2e99df478aa531fb130753f6a5103b87e2bfb314b9079948d","sha512":"63253698754f87d781a34ddff94d661cfe02acf79f4ee5dcc771691eed20576e1d20e09506a2758e6cdc5053e7766d99f3977028fef2eebe458d67c52fb0e7b9","ssdeep":"","tlshash":"e1c08cc8a0c26e00160a641421af24e890244026b0482b128dd4d8882e220b48233e98","size":140,"data":"","first_seen":"2024-12-26T23:29:40.157725Z","last_seen":"2026-06-08T05:16:21.782514Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c4aca76fbb55660da06477dfb1213f16","sha1":"895f854d00dfb9255cfb0a63ed928240d4a0f405","sha256":"40f66a542a86eb29ef8fd2b55753fde24b809b1d7482e44db4d93c5a1c49aebc","sha512":"6323f61d40bff5d535e39cd7a021d17ab63311566098ffc9e1220a3625e73e1175ef7e6e14beabe17415ec5c43d69e51f10602e1ec231ac14f0834357e123beb","ssdeep":"","tlshash":"aac08cc8b0c3ad001602a4101aaf25e4a0644026b0882b128d94e8483e630b08233eac","size":147,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-06-08T06:37:49.849697Z","times_seen":1832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad5d63c4f600679e0cdf14f7a15e9e51","sha1":"5794bb07fc89c9f3d0f290285949880d9823c986","sha256":"0aee5b78242ca1a6c056722e3936c438adce345b75a607dbab3f8c8d5053521d","sha512":"5d29325b67459a069e1e34ae7f6cd6bad228a75f5a260436d08665f8526d15201c3c5fb890b3f60fd7bf899518e5628f651b1ada50a4cadec011926fa3d21877","ssdeep":"","tlshash":"fdc08cc8b0e62d102622652166af25e890288426708c6b16add4d8483e720b08373ea8","size":151,"data":"","first_seen":"2024-04-05T15:11:11Z","last_seen":"2026-06-08T05:16:21.761047Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7eac0ed17a41f6d3eb1e9e37f81d1e58","sha1":"2a940f5438b80e4f4e24f1d9d5faf65b9c436b79","sha256":"a1484e4f765eb72144c20920e693a14b9dd355378fb9d0310eab0b2d8b1bd2e7","sha512":"342365bca1287f0ec76d01cf96a3fab44b594f191b474a0697d8ba6d62f946acd9c7295b352bca633910de87f6946f0900de6761f4e60afe9a7a515ec5185c99","ssdeep":"","tlshash":"15c08cc4a0c32d042b26655815af25e590284026b04c1b129ce8e8882e230b48333ea8","size":151,"data":"","first_seen":"2024-12-26T23:29:40.186257Z","last_seen":"2026-06-08T05:16:21.748715Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"80ebf24ffed33f82fa8f17c20de3c780","sha1":"46f063cfd46c723a874ae47f9db7bd88772331b1","sha256":"da5a2bc707f6c34ec090ff2172fbee95686256510f83f124b651a1ae9c438ddb","sha512":"588329cf40d05e0bbdee917e76f7f3159858be2a0604d84e98b0b1db5cac8242dded1aa9150d7128496757ef9b0a5303cc2b617962226a8b332abd4aea82b3db","ssdeep":"","tlshash":"ccc08cc9b0c22e241a1a686054af65e49038802b708c6b428dd8dc5a2e230b08237ed8","size":150,"data":"","first_seen":"2025-02-12T08:38:06.934018Z","last_seen":"2026-06-08T05:16:21.799377Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94a8a0aafb9251852f4b5b9a62c8a990","sha1":"020af04f3ce6c017efae4efa1be13ed45ceb97d1","sha256":"b94645c98d1e5bd2aeec0b254793bf494cda8d4bd43ec7219b78a0b0ad29fda8","sha512":"453e9805e21e26347226630f2fbebba62eab7a8e498fbecf004135ceca9a5b3632df5fa26137c47231c93bf3487eef3e4ecb4d93f8e5a8b6a1c3cda722e50a42","ssdeep":"","tlshash":"5ac08cc4a0cb2e001602646010af25e4a028402670481b429c94dc592e620b08233ed8","size":139,"data":"","first_seen":"2024-12-26T23:29:40.145852Z","last_seen":"2026-06-08T05:16:21.783805Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T09:25:51.141686Z","times_seen":6505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-9c121ed5.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1d44409a0382a92b692977c80090ba69","sha1":"fd20639f59d5008755bd9550aecc4cbcec867230","sha256":"8361c2aa2c1154f3903a2779053113067fda3db0fb47f7b27990bb226a98737b","sha512":"4d9e1ffc0f3049103ac67b173098cdb72944373af2ee6b3e14a54bc23ada9ccdbed3622b9b1eb805d031dfb7fcd112c6433e357fe34b47d5d5fd9c4e7da1352f","ssdeep":"","tlshash":"f901cef6b90cce7f0ea2455412902a0220090f9cf9111896bc9f7a692bfa800c69e70c","size":836,"data":"","first_seen":"2026-03-26T13:09:32.668752Z","last_seen":"2026-03-26T14:42:32.252673Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"14de5bc5c0448e26749ac836c8b95e3d","sha1":"5dd499d81ca5227371ce787af044508451ebbb0b","sha256":"37fd774ea432838186ed26abf4b80cf5c3833550e7636e03f0d410bdb6711e30","sha512":"1dc6fef9de7238a9adc505ef6e618d28b704d2231c91a6d3ed282c33b61acf9270ce2f9af7f929390b46f97a562a915c1d03f207d4ca8cdbe55a4dcf308d37cb","ssdeep":"","tlshash":"c8c022c0a08a6e242e121850206f38d0502804a3b1081ac3cc88d80c2a620b4823bedc","size":176,"data":"","first_seen":"2024-12-26T23:29:40.149096Z","last_seen":"2026-06-08T05:16:21.795143Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2f10007f2371a0b5e0441b476377b959","sha1":"b8d3365dd0554b84bd9c28d233f1c0d6554d79e8","sha256":"5fcc6424818038cb977efbedac638cffaf1a6280506a2a79a1fa85f3bfffdf3f","sha512":"b6f68ebe712ed948804fc92d555518e1d636137582895e465419a2f699679fc79afb09fcab6e0140f3752e745538f72acc34adc8562eb5380d7e8041e5f447ff","ssdeep":"","tlshash":"40c08cc8a0c32d006612651164af24e89024402a74481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2024-12-26T23:29:40.173962Z","last_seen":"2026-06-08T05:16:21.73835Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cf22cdb5c495761f76ab9992ebf13ad3","sha1":"b57aef5b20e486cdeeaa8034cd187d3f3f9bceff","sha256":"3e05e030f3d66bfe7ae10e6b050b45cf7eb3aa94f0d51883b1a8b0110999ceb2","sha512":"f8ad839258b9999fb5f167f325e1e3f2b27e15c3a544ddc0683f28e13f0d0820b1f151de63e4a450505073c33d8b44ba009b18f2aa1b1eeee25f443f6c2e67dd","ssdeep":"","tlshash":"afc08cc4a0ca2d002a03781020af24e49024402670c81f03cc94dc982e220b48233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T05:16:21.781104Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"05fe8cef534a913e1b3a5810471f6fb0","sha1":"b0fc92aff7b1188760ab6488d819e092820d8b34","sha256":"edd7f57ffdcd9e9c2ce3a4a62143874f9b2edfd7e490001d502b57901401f1af","sha512":"64135d54692002624b82e9dc2f2eca6960bf31ebf516cab2a58f5b6bea62a183ffa50934883912d5fc4f860363fa2e2bd3589f759fe1c805168a3527e632088b","ssdeep":"","tlshash":"0ad0a789a0e72e0049129a91ba5f54f070248429a5884707ac62da5439520b4912bdd8","size":225,"data":"","first_seen":"2026-03-26T14:15:20.538878Z","last_seen":"2026-03-26T14:15:20.538878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b80f31fc52f8be5c347edbab4f9e15a0","sha1":"0552aea41dfcab393a9ebf9edc3f69262ca22477","sha256":"10ecf23ed4ab90ff714aa13bc13c976cd1cc440bced982a5c23c38bd91b57586","sha512":"c0d447b400ac1748996b58bf9b234aa4b9efcc4258a89365ddceccd4294ca9202cd267f042df772d15ed4e2dddb6e1aa151bd6a30688d9ea0da422fd924e25e9","ssdeep":"","tlshash":"5ac023c9d0c17f1016912001506f64d55020405974045676dde0d9161fd60b04133dc4","size":181,"data":"","first_seen":"2025-07-19T00:50:04.700499Z","last_seen":"2026-06-08T05:16:21.773546Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b6bf1cfede1e63bdee0b6975b795108a","sha1":"2bb68d688a44094dd322348e4e176bfe765e8ff7","sha256":"7af90459ae36e3c183ad72d1689cc4041001092c3015e0ed344ac0311b915934","sha512":"17971ffaea8b3fd2c8a04ba74027226d76a47c69c22bb8623d8490c1f48c155a221e6bd785ed924c7d2802806e497a589df58bb7cd2a1545b12e75a452511fde","ssdeep":"","tlshash":"15c080d460d22e002705655425af35d4502c501a71485b569de4d8483e630f4d333dfc","size":167,"data":"","first_seen":"2024-12-26T23:29:40.167833Z","last_seen":"2026-06-08T05:16:21.736532Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-06-08T12:17:39.56908Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/en-8dfabe6a.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"377a73f47630a87d68d41a8ba97f8510","sha1":"718936ecfc8778b2313351ed50fdd2efb7323b9e","sha256":"729cee2c98a26f17cb3c238bcc1c99dc2ff6edbb27b294a1a0f41c0460cda7f1","sha512":"1bdccaedf9703c9394fc5e9f7e0a2f83c847a8d7218c0d72d7ab9daed5aaf76b7f96dc76a0af23d2a530eb798d03908b969974b8a9e627fd1cac935b10d548e6","ssdeep":"1536:tHDZiw1118lUlTm3Dj6TupoT1LnXIrdKV2Py2FX3a:1Zii180mzOCWVHoa","tlshash":"66732a4e7e0a88a909f3032278ce2f6561f406c18356c85f4eecc5bc53e1b5ae7a7675","size":74362,"data":"","first_seen":"2026-03-26T13:09:32.753619Z","last_seen":"2026-03-26T14:42:32.312232Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-1629d80f.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59858eaf2ccb8496d54634ced13aa41d","sha1":"a6f5cce178af5e714d0d9116c08069982f4c7950","sha256":"a1afbd344cddbdb403524222b9235f4a302bb7aab1074a13d65408cc7c18f3bc","sha512":"0eb5e7bc9ce296942cfff8febad9f5fab55190de99b0c8f1492568b296d16c71db5ecc4789d7c952163f80b639c9a65e71f7560c7ce87bceb244ddf30db2ca93","ssdeep":"768:NkEK+PyvmAlIZbDVZ9sCI2EUtevI4LVfktksvxzS9gN7pzJkwbLChznXxYHzWUmJ:NkEwvmQgI2bevxskwxBOwbLChgzTrQXf","tlshash":"63231602fa46c53ddfb2a151148e1110e6182f8ed04898e7b4bd691e37f7ea07b6a37d","size":45997,"data":"","first_seen":"2026-03-26T13:09:32.664181Z","last_seen":"2026-03-26T14:42:32.272431Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d0e88b4359f0189f87f4e970cc1566c0","sha1":"c53bd6aba8a4c20f8a63e7dddd84de5cf4da3874","sha256":"5a98ac47317bb264d96e04f3376a4c39b8c6a5199377a17eea157585ac3a3f76","sha512":"14dffbbd1c5bd10f79d5593c73278105b0cfc7b3c9989a506402c642fb9ee5dd8546e6ec17bb4903802a961b7189e5c0c2e948b3bdeaeacd089ea9b200af1bb5","ssdeep":"","tlshash":"d0c08cc8b0c36e201a42641150bf35e8d034402ab84c2b168ce4e8582e228b08233f9c","size":156,"data":"","first_seen":"2024-12-26T23:29:40.147455Z","last_seen":"2026-06-08T05:16:21.756459Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3ccc9492d79dab168d313d5ca7666639","sha1":"1bb3ef888fdb7ff45bf21645d21c6146c30e792d","sha256":"45814699f5f5994f5204db47a9cae8f1bd2e11810843cabab88abbe0c0176d82","sha512":"95eb3514a0a67bfd015a9123ba942f4d6d37180e495c9d43c305a990d9f16c088a4e48a8f887df67ca2e019c3b922351764068893a59c6dc1f9279e6815abf1a","ssdeep":"","tlshash":"d9c08cc4b0c62d001606686014af34e49034402b70881b128ca4d84c2e224b48233ea8","size":142,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-06-08T05:16:21.757125Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//#/?from=mobile","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e5822d14017149879d725a801479398","sha1":"7a44d8452d23a04d4c33d456848a805b305fd28b","sha256":"c92649caa5e95db26501afe6738203e8423b192d2bde6acf705fb2b0f3c2fe83","sha512":"d44f83d3158255c575d0dbe4c0438cbe58fa523d6a2184c42949ad4029b62ae49f430e9f5574f6c87d0ea2d9eb9063dfa4a0c63601e7139da370645d020b256a","ssdeep":"","tlshash":"a741824a16ff75519123f079875ba304603299072d0aed94bf4d93403f6522b86f2bcd","size":2006,"data":"","first_seen":"2025-09-04T00:18:50.377384Z","last_seen":"2026-06-01T14:33:52.200324Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/index-ChAPw1KA.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf733d876d7a8dbfdbf6a7c4332396f4","sha1":"6442f326578fbec11730191d583bfd4c50d11c87","sha256":"01147df6f033ec9c3370e7d76a33ff31fe83b242c6f368513f8e064a40037197","sha512":"6fe02e67090984e34289d224d1adb5f8107ba4aa37cfce056a7a958d370894a7ec584b1b2e7a6d865a6d453a660df093fa86ce9261fd463a78c7b96e75582e36","ssdeep":"24576:pPyInRsAXroM7RVV94YOWXjl2lVrFpxIrbfjMHbOXrq8Kw:pPyInRsAXroM7RVktijEbOXe8Kw","tlshash":"75459facb986f46906f3c7a960e70104b2341e45f946c0e4f9bcc96a15e1e6de297f3c","size":1225598,"data":"","first_seen":"2026-03-16T14:21:50.172715Z","last_seen":"2026-03-26T14:42:32.325309Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/ArticleViewer-CsvMZDdJ.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cc25501ec3171e70f7d34b790c9b53aa","sha1":"7e357c8b6e8d0801cdafcfe459222c386edebf2f","sha256":"155214766254f84e6c935559d8a132b50e2eb9113db8cc6aaad46be47b91f10c","sha512":"0b9074f7364c64d359dfecc59f865510f8b6befd0259de830e88e4bc0e106ebaaa9526b0ae1299966d3b685c42fb2dcdd094ef7dc55d5f4a2dc84f01dfa93c7a","ssdeep":"","tlshash":"5f4164ad74b1cfb942b3933165cbe25491447bd7d7608a86716d18393bc5ef06a1c304","size":2435,"data":"","first_seen":"2026-03-16T14:21:50.078186Z","last_seen":"2026-03-26T14:42:32.2576Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/CookieConsent-DW-uDA49.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e5869161a3116cde6b2f3ffbb8cca4b0","sha1":"dd84787c73d4ef67e611a798c8ab6e5fb19b874d","sha256":"6a9ab4b2fc8f4185823863360159117a9624c5ea575c45546248078b0ebd702e","sha512":"a6892ebce344fa3b865b6bebb3d5fd74b7deebaddf98b816c1071055d681178b689ae39dcfe9d5174f08ea33dafd9fe95b4fdc903baff21ef4c36450a3de6678","ssdeep":"1536:pjxMkbZcbyEyNNBlxvHCfG6f6XbvSA6EkZLSCnYtgK+4g1YCF6FsLb+u:RxZNvSAfkpBigkSb+u","tlshash":"38a33b88a120b57a46e356e652a88211b3b45d45f449c4f4b1fccc5b0daed9813feff8","size":101721,"data":"","first_seen":"2026-03-16T14:21:50.044024Z","last_seen":"2026-03-26T14:42:32.256695Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T11:27:23.669627Z","times_seen":4107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2b56bd9ed17b7064960dfe1847e10c20","sha1":"4d4cc7e6ffe5518ab647c3644c441af701cfa69c","sha256":"a4b4cd1e6ee3d68f6fb5aa0e1b6d74cda904f6873e523e247e6aab44c45babac","sha512":"d861c4018a63e41545de7968638179721bde3cd6a5a294f3159923e72712fdaad1403764f21ca445a4e41cfc566f2f7e92e0122462324ab4bd72ee1eb4390bb7","ssdeep":"","tlshash":"bbc08cc4a0c32e001a02641020af28e49024402670481b02cc94d8882e230b08233e98","size":136,"data":"","first_seen":"2024-08-19T16:28:43.287038Z","last_seen":"2026-06-08T05:16:21.787316Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a39b5ff589ae67a49f0f4bbea75fa0ea","sha1":"0f45ec9451ac9f73f27f52e89128f3b2b374db12","sha256":"46a0fa78a104a1c19b1d3e1c4f6235ad61d83af59abffece54765565ca01e6f8","sha512":"d71db39910f77555c1ff7a0e7daf2feafe3c62ca6b648f37f11563e3fff8eff43736e952c083854d7287b4c91803344f5e3cedbdb039c2d44ef40142bd5c3b6d","ssdeep":"","tlshash":"03c08cc4a0c26d102612a41010af34e4a024402a70481b128c98e8492e230b08233ea8","size":136,"data":"","first_seen":"2023-07-14T08:52:04Z","last_seen":"2026-06-08T05:16:21.750921Z","times_seen":5007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-08T05:16:21.803317Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//#/?from=mobile","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2280e4c8d80331a3c8cfb34cebb9dfb6","sha1":"6fa995e582adb9ca2f532b3edc05d51a4cf5550d","sha256":"6c873236a54f05b715c25e97be29657a3dd3612141623e48d37cb4987cd3bc1b","sha512":"46724c34fbf4d4c6a162639aa389a93284ac02a9ce6cac2e06f544bb06ab08576284ef1918810090fb7f7670b597355ad65790d760b334e551500854e3cdc27b","ssdeep":"","tlshash":"0b11abfe191a602d6303404e976b7811643260a9001a184177cc9e9dbb9ab7de0cfb8c","size":1048,"data":"","first_seen":"2026-03-16T14:21:50.215368Z","last_seen":"2026-03-26T14:42:32.302245Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c902959c0dcc2dc19fd0514450604f1d","sha1":"d91f4b90edcbb316ada2ee101c33051f54b14df8","sha256":"ee4eed1084dd0deeb3af02b5eb977fa38bc27e5a0cc2715b3e4619908a9cf984","sha512":"df85b46a332ebd09e34eb800318dd951ae93ddd0a47ef8ce5e272b9d90988994ba501bbcaea01238fdee21c1aef4cefaee75147dbafbc178d53d4de9b3cd9552","ssdeep":"","tlshash":"56c08cc5a0c26e201606682014af25e49028402a704c2b028de4e84a3ea30b48233eac","size":147,"data":"","first_seen":"2024-12-26T23:29:40.110896Z","last_seen":"2026-06-08T05:16:21.740098Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"eeb56726cbf34d810994da710c825370","sha1":"5a8e98e25e5b551cb61c3514cad0082ab5df1e6c","sha256":"0f2c28dff2af647dcad6a3e78da83440015d8ea76c2a50401e534e2443b7d6ba","sha512":"2c0ace2e68f12a2cbf192565693fe887a23405c1e2cb3438d30712a744d9a8b89b060d993630b9e93dfbf66a7d1c8951d0d19562cfcccaa063473dfb716355f4","ssdeep":"","tlshash":"79d02bd890e73c0012095272f05e1ed0b0254026a445041aadd9f4883953074d37ff48","size":256,"data":"","first_seen":"2025-02-12T08:38:06.922046Z","last_seen":"2026-06-08T05:16:21.793153Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/index-NoK2zeti.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7399f150d754e4a377069dcf14382571","sha1":"9dd7ca35b8a6b408138ce420d5d95cdcdbe1718b","sha256":"c12b74f11e71ecd0940e189482f467c1c9c053fbdd86d2343d36fce750112ce9","sha512":"c8ca019cd175c06a2138593a6238352fc480154fe208eaf2684efe23955766c0d6384514caca5fda2aae503c577d4c9e93ccc5eec294a26b5dbc41979d2f242c","ssdeep":"384:KgZ6N0xH53LDWliKYawIM3/mU2brERTyFB/GNJ9UF9JiAywGK7rvhp:KgQuxz+rgTynmLoO/yvhp","tlshash":"ffa2f83461168b7f1bb3a625f48aa2149f985f9fc2258db9b2fcf8157ac0d740707324","size":23181,"data":"","first_seen":"2026-03-16T14:21:50.098113Z","last_seen":"2026-03-26T14:42:32.28808Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-827a055a.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dbac5ac76af426fc9c3e913c3903cd0b","sha1":"97b076bfda18388b24e61cd9e71d0066c116d414","sha256":"922d8c3c09c3ffd521185a58b00727913cc4b467417d75b8f9c4608e04acdf55","sha512":"f0df52966f136364149c3b83076156c63f3dac02bc3cac51a300d9f8a3d28472a5b1505a2ce5ba2be8198cbc8c19221d9b38ba45ec40169f63e98f14fd0a32c2","ssdeep":"192:T+geBY5wk5TdOw2Mc9y/GwRh50Ue0BLVVmXhvDRCS9:TouV5pH2jcRh50Ue0BLVkpVZ","tlshash":"39220b05b80ac93ecef6569ce0d90030718d2fc56016946af1ff692e27b9db4a395729","size":9919,"data":"","first_seen":"2026-03-26T13:09:32.651534Z","last_seen":"2026-03-26T14:42:32.266579Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4258e14f9cef4db12cc722aab1da892c","sha1":"17e64549a586f1a87d0ad879f186d951ea5e67d9","sha256":"7ccdb567936df32382dea42f3a2a77e118864d8e4ee02d177d262126c528add4","sha512":"5b3ab295d3dde1a6bc72fcdf36376806bbbb0eb5bc166815e9533a3b702b90a8a1faa3b4631f388817e5c69e07b21b4ed24ede1d0a0a076a4deb0cf4abade81d","ssdeep":"","tlshash":"82c08cc4a0c22d101606641010bf25e89028402670485b428c94ec482e220b08233e98","size":137,"data":"","first_seen":"2023-05-25T00:15:57Z","last_seen":"2026-06-01T14:33:52.226838Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-06-08T05:16:21.757738Z","times_seen":963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-08T11:52:17.849047Z","times_seen":36463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-18dbcf75.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a3ce7aa81ba9474b265404dfed43dfe","sha1":"6e249249c641a3e00ef195fe20defc801163e404","sha256":"2af62f122a00b8235f54eadc7347e1427a7aeed9d9d95ae12de5772e3f00bd79","sha512":"a9745b956c06462f7fb262e4d2d2e9c1a261b666908b6bff6309e372c5bfa6ffc28236886a1ed6414cf79d5335b2c29e66bd0992da6e228a76a5b98b5061eec8","ssdeep":"3072:5f3ePukRnjyBRy9kLhpISiozZWo4MiNJ53rGStf7F2BegUQzP8jJ:5f3eH4tLhpISiozZvJ2J53rGStf7FZy2","tlshash":"8f048e5e6a050fbf9ffe084c695e050020593f85a64cc853b3ad5a1a37fbcd1a3ba719","size":179431,"data":"","first_seen":"2026-03-26T13:09:32.633778Z","last_seen":"2026-03-26T14:42:32.283345Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/vendor-a0ade6ff.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d65905f67ebd1007ec3024a8c7111378","sha1":"657fc7c8515e3e816452b2b19470a0d895f79ecc","sha256":"c2f12aff26f23c96b0ba15921a4b872bb6f29be859b6f977b07a3200db6a6d24","sha512":"c33ea88cf967ba4225a0e49e1b57ca9eb519307628c507edd3417ecc61ddd057ff74846b91cb435a5cc7bb056ee80832e4e24fbd766ce334eb71c095b4c584dc","ssdeep":"24576:TyaCT6VDT1AOtBoLTKZtdjZtdmODWa29KbwA0RnW0QR2:TyaCT6VDTNoLTKZtdjZtdmODAYboRnWi","tlshash":"b02529c57292f06147ab24e240bb0006f3396e59744d84a8f16dd8eb7d79d89a2b7f3c","size":984202,"data":"","first_seen":"2026-03-26T13:09:32.674005Z","last_seen":"2026-03-26T14:42:32.254464Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"84129e3e4c343b83986a3cdb1b047934","sha1":"1745827caa65dd7999d907cf6ed13703650299b1","sha256":"51ea04345450dcb2a5528153ee0cc51b52bd130fd509d78de22e86c3e740f989","sha512":"dbb1e22cdb4915dfc3a998d19eca085f33d19d1031d7732fe559b747956edc927afed2bef04e1245ba86898257b90255821800efd39e8e3b594e78b743f4a49c","ssdeep":"","tlshash":"c9c08cd4a0d36e001a02695114bf39e89024442674482b02ec94d8483e220b08237e98","size":143,"data":"","first_seen":"2024-04-05T15:11:07Z","last_seen":"2026-06-08T05:16:21.7451Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"65b1eee05b03c762c85b0117b8c0b28f","sha1":"f07a5f6529dc94fd3768fa20011d0094d4667b9e","sha256":"e650356de3b5375b158a788269cb35895f67fd509d417c1d48108ea8cbdf4a9d","sha512":"e438b7e142d947961523882b8102b1501cf4b707a39e25269647d972be79470163d2264d3d9bd1e604bf463b6ae2982d8a884644df6306f87d25bafea5d9be4a","ssdeep":"","tlshash":"a5c08cc4a0c22d005602641052af24e4a038402670481b028c94d8982e620b08233e98","size":138,"data":"","first_seen":"2024-12-26T23:29:40.142823Z","last_seen":"2026-06-08T05:16:21.777105Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"469b83f5443366670697e1de9c4e71bd","sha1":"2c41e85de84677e1c5c4fc55d7442e9d0fe4f8e1","sha256":"069dacf97027274f1b1765f516db119348cb36862bbc049128edfe933c287f71","sha512":"d1733b811c4aa1ef3be58f71b693848830e0d4c5f7cc99b0ce63dbef23f592a471950ae11fe8b930944ebf110a1580afa2e1cdf7677f94afcd322c26ce6a8835","ssdeep":"","tlshash":"80c08cc9b1d22d102a0a6414a4af35e4a02840a670481b138c94d8482e630b0923bea8","size":148,"data":"","first_seen":"2023-11-21T13:50:07Z","last_seen":"2026-06-08T05:16:21.763608Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c02f76b8d173e1d0afc93a75753a8a9a","sha1":"5a3ff21341053a0ce6dec4cab0e4a8739bc8ef19","sha256":"e6dbb4df2b7605ab60ad69cc08ce5e7acbb99970e89f3e34e52bc5df7a19b3bf","sha512":"f1be22dcd1d064fc9038900bc3a7555b233735cdcda79b27c8cb0ccafbc58d4402ed5ac8189dba463b6b589aac7e4fe5324246c7d94b127d7dd8bd39f8773b3d","ssdeep":"","tlshash":"74c08cc5a0c22e101a02641419bf79e4903881a774481b138ca4e9692e220b09233e98","size":149,"data":"","first_seen":"2024-12-26T23:29:40.15335Z","last_seen":"2026-06-08T05:16:21.738924Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7452cad6cd380a3feda6d7e3e0e7973a","sha1":"4e99e6b44a4132261c9a7b4c48f16ee983b7579a","sha256":"70b6c337aa9dd4949793ee338156d7f1dbea7a24d964b5a9e5566ac4c03c51a9","sha512":"ceab61fdd51aaf7a71ed5dede53940e8a9e3854d600a23e3ed6c38ef250a6209482842c207743e3f6bb4127b8cad653071015e302e311f734029b50350b9b230","ssdeep":"","tlshash":"b5c08cc8a0c7ae442a02751111ff34e8a024482774486f829ed4dc482e220f88337eac","size":156,"data":"","first_seen":"2025-07-19T00:50:04.712334Z","last_seen":"2026-06-08T05:16:21.758347Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d9b3e58c505cf8892432c31e8c6fa2ba","sha1":"be733b876fbbe88a80c372801ad5776d084f264a","sha256":"f1523f55ea2a38827e2aa0ca675f9f2cf4e71d232921d49628e4406e4761bc00","sha512":"2090d99bfd846dd0e66da78f8cdf44bbc025108adf6d5887931143638a65f210839f2504d620ce4ca0fa70b4785c723de4846650a758936e6029f5a9a17669ee","ssdeep":"","tlshash":"86c08cc8b0c32d003606681454af35e490398437708c1b028c94ec492e230f08233ea8","size":147,"data":"","first_seen":"2023-07-08T10:23:07Z","last_seen":"2026-06-08T05:16:21.771676Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-06-08T05:16:21.785301Z","times_seen":1012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2536da268f3c128d7ee6860bd195d512","sha1":"bcc868c792e42e681e75879988c6e56b36e99def","sha256":"90eb31728a4349075a33df3e2b016942bd79bae5e82b2419ed2bfe96deaf7af6","sha512":"38a919e3da2b35abe1ac73407451f364ad4b82b15e27b3cd74c1ab16243bde02fa11f5ca1399bb80d7bd8d1ed5a9a0ef56e830d0e6ae7cebee6e9113a6ac43fd","ssdeep":"","tlshash":"a4c08cc9a0e23e001606641010af29e490284026708c1b028c94d8482e220b48233e9c","size":139,"data":"","first_seen":"2024-08-29T17:49:52.053963Z","last_seen":"2026-06-08T05:16:21.797238Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-08T11:52:17.849561Z","times_seen":38751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-08T05:16:21.759055Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-06-08T05:16:21.759691Z","times_seen":524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/#/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d07ac8293a895d5cd36ac4a1bb6ebe89","sha1":"ca073c02e761f0687cd428bbd5a5a4a739b3e809","sha256":"c632f36da8c1b069e2dfb84a059900f7587fbded33002ea457cb8a9982e8a21f","sha512":"fe08a6e9309462264fbb0b9b3cd5c0f7cd26ec73a2e11b52a3bb6cd40fbcfa083884e9e1bfb31837c39ee4c0e0ff76274ecf3def1a415ecb56af7b32d68d43ed","ssdeep":"","tlshash":"78c08cc5a0c23d101602642010bf24e8a024802770481b128d94d8483e220b48237e98","size":139,"data":"","first_seen":"2025-07-19T00:50:04.706874Z","last_seen":"2026-06-08T05:16:21.743185Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/ArticleViewer-CsvMZDdJ.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/ArticleViewer-CsvMZDdJ.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a685-983\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2eKhtWe8jDHGPzjcnM3aid0xQqBIODSkRBRTgaA0LWgc35qLnFfRmU1iQ0r7H3E2PBsIKeWQuTW3tCxAU%2Fq4WiEJJ3p7IYJJqNR%2BCjFb2upiJg69FsUaOcAsWYu%2BxugBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39aaf4db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2435,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2434)","md5":"cc25501ec3171e70f7d34b790c9b53aa","sha1":"7e357c8b6e8d0801cdafcfe459222c386edebf2f","sha256":"155214766254f84e6c935559d8a132b50e2eb9113db8cc6aaad46be47b91f10c","sha512":"0b9074f7364c64d359dfecc59f865510f8b6befd0259de830e88e4bc0e106ebaaa9526b0ae1299966d3b685c42fb2dcdd094ef7dc55d5f4a2dc84f01dfa93c7a","ssdeep":"","tlshash":"5f4164ad74b1cfb942b3933165cbe25491447bd7d7608a86716d18393bc5ef06a1c304","first_seen":"2026-03-16T14:21:50.078186Z","last_seen":"2026-03-26T14:42:32.2576Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/PdfViewer-Bywmxs84.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/PdfViewer-Bywmxs84.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-219ca4\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hi0hEJObc93Obv1O4K51o%2FG%2BQnTJuhIcPv7CsDUxbjyWK6fpPXMZsTHYPYFfMGjzv7ASc3K5h1crHh4VL6d%2B7XR912NRWXmgVySmYDHQajc30ep40aD%2Fj86qHo7iszj6dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39aaf47b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2202788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"4acc7448b174ceb938f0ea4d39d94965","sha1":"8776f477544928b1246b9b81480c89efcf9344b7","sha256":"45d6ccc5afde3260d231b269a1439729b2a605f4c18b13b17477fbeed298bc76","sha512":"e8f944131c3500e4758072a813fa0aaa2616c764049986173755feb64838e04e96fdd9ef8734d7cf71b05b7f4e41cab6bc940c9fd63f6b243679ed8b3e974c0d","ssdeep":"12288:rZapMcCJkxNP/XN8hXpqsbzAar4Y7hdKvWHbzYE/EqkMsxP706zL9bHIOdBEtHbj:rkpMcCJkPXXqhIqbOt7aFMzS","tlshash":"75258d24731a769d0aa900c370bd1589d3fe1609e062e1dcb78f7a9f6a6ec09673d734","first_seen":"2026-03-16T14:21:50.046894Z","last_seen":"2026-03-26T14:42:32.250981Z","times_seen":10,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/test-banner-BQxVGhys.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/test-banner-BQxVGhys.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-189055\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvErDOC8Ou3dXqyzvJGCTS6Pijy160ygKSDViutiPEmUjv66FIp7KbQw%2FGDvzwGadp3654Ff4M0B7AcVG6D9LFqlwS%2BgIz8M5tBCgWamS5HPaCymCUyV8BXooKChVCBw4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c0b6bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1609813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5760 x 1410, 8-bit/color RGBA, non-interlaced","md5":"068ffefed26b5a72168f158658b9a2f4","sha1":"2ce2db9abcb1feedddd98d5b53ad607a5b0df748","sha256":"9bbbecbbbdaa2afa4d2412b9208bc080d3c13597cb38dc80069dfea2317a14e9","sha512":"c741fff5018559eab2f1e2a738ede90b3ee6c15fefedbcf6d3126190fee129e61bf8a03eab11bd44aa1f904fa0bc0d99d152a1cfcc08b0cd811c295fd5cf3b2c","ssdeep":"24576:DcSET7hb2PQJj5R158yzygpkVNYCtmD8zm95p9pi:QDlb2PQJj5R15rXtb8zm95Zi","tlshash":"5b2523ee5475dd14fcbb09b867a33f37a287109184f8c265d62ab09e748bed818c54cb","first_seen":"2025-09-04T00:18:50.351314Z","last_seen":"2026-06-01T14:33:52.131255Z","times_seen":56,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Frame%201-CUL4cChQ.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Frame%201-CUL4cChQ.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-129c\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0NktF2onvawQzh9WRacADQlWCXoKtTu4kNc0AHMbLkv%2B1SF0TA%2BleKy8xSmmNsLgLJ6BsiR%2B%2FCH%2FVR2OCgcl%2FJ014id6ybB5r80cgczl9aJO2bCeSzq0fkwfwVFsZAaRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c9d3cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"8d212c8ea1591dfa2ba2794f71335ad5","sha1":"d4a46b85989a0fc68543d47374d7fb23b9533649","sha256":"db3891a7c41e37fcb3a5e36143a9c032486bdb2fa3baf924407a47b6a302e276","sha512":"ff704746c4dfe41083ec85ae9f9b807d3dc784b4055bd2ec149c4f8846966b55ee358218746f767e28c7778cdeadab955f976f4bc3c1e022320c7b0df88e34af","ssdeep":"96:Zj/zFb6cLBHNRnCWjwKWsEUW18YYbAcUsFXk8ZpRw:N4cLBtVCr9kAcpFDvy","tlshash":"74a18d25b470107e48e2d366dfae5cc200c4401e4c662fabd28a81bce28cb996473037","first_seen":"2024-12-26T23:29:40.085743Z","last_seen":"2026-06-08T05:16:21.723838Z","times_seen":107,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Frame%207-DhyADEO1.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Frame%207-DhyADEO1.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-11df\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FZ1q0ZETbooEYcNMnSZcbtdF1dTEqCnkxybVDTYi%2BQS3WlhPM05DwMkQ0aUm3XJGHOg6erfzgvu9HXgkRfBnTy2reOIywwakZGpZQVs8vim9AiTGEHYWUFiLdPo3g24Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cbd76b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c32c604441f656c4eda637db0ce64fc3","sha1":"a936a84c35f34bec6296ccea1ca277ed492b3f37","sha256":"c1011c258b378ecd5b229f60bb4de768c1c1644d5e2acdca24076192b771d0f5","sha512":"552ee2eaef75d4aa9bc1cd49166d4aa8253dbe56488a325c4d670cc41f4dc88f424a2bc6ef42e190dbe651c90a9e0cdcc463fd6b6e778f17ec8a077ceeac0c75","ssdeep":"96:fSZLP23oemB7OTWDyKhsF40UKFEcHp4u9uXBIu++6at42k09B:fSJhxYEXsFLUKicKNR9++R4LE","tlshash":"09916c15efb1b3227f10ce36866a5811a71609fba54d20ae958d586c66143b37caf04b","first_seen":"2024-12-26T23:29:40.059828Z","last_seen":"2026-06-08T05:16:21.634604Z","times_seen":74,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/vendor-a0ade6ff.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/vendor-a0ade6ff.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-f048a\"\r\nexpires: Fri, 27 Mar 2026 01:08:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3954\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7zDkRI%2BuuJT9a11nneOLgSA2RPP84X1FiaeoE2x%2FqkoZJYotBqiLb8%2FzzVpW5RvcKplATDkFnAuBxEwNumq%2F%2FYyvM9YuIN2YnbNdFOnwyBDEplzjXQMrjvcG5fPwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37fca34b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":984202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d65905f67ebd1007ec3024a8c7111378","sha1":"657fc7c8515e3e816452b2b19470a0d895f79ecc","sha256":"c2f12aff26f23c96b0ba15921a4b872bb6f29be859b6f977b07a3200db6a6d24","sha512":"c33ea88cf967ba4225a0e49e1b57ca9eb519307628c507edd3417ecc61ddd057ff74846b91cb435a5cc7bb056ee80832e4e24fbd766ce334eb71c095b4c584dc","ssdeep":"24576:TyaCT6VDT1AOtBoLTKZtdjZtdmODWa29KbwA0RnW0QR2:TyaCT6VDTNoLTKZtdjZtdmODAYboRnWi","tlshash":"b02529c57292f06147ab24e240bb0006f3396e59744d84a8f16dd8eb7d79d89a2b7f3c","first_seen":"2026-03-26T13:09:32.674005Z","last_seen":"2026-03-26T14:42:32.254464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.keeta.bz/ws/11cc81f7-39cb-490b-bc0d-ccd40092393a","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"GET /ws/11cc81f7-39cb-490b-bc0d-ccd40092393a HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://keeta.us.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: cyLMlzgwGQd0WfsI1AWP9Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Thu, 26 Mar 2026 14:14:47 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://keeta.us.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: WKIOLYtWM+xrT49b6ZBK+BOnr0o=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kmGqsTBG%2BH7Xed%2F5sAdUWdWOUAhXDeyMz%2Fva%2FeZDljJliPeQWRsJXoM0lLmx4srBHnT0Q8DC%2Bm8DDKdPieScFlXh9KfANEighW3BDlLyXTcZuU0l2yNB0tGucZDv7yW45zI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e26c3807c4fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=550\u0026min_rtt=492\u0026rtt_var=191\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3105\u0026recv_bytes=1192\u0026delivery_rate=6473919\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=94e128b6ca1dae89\u0026ts=672\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":24,"connect":24,"send":0,"wait":656,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-2ee7b3a8.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-2ee7b3a8.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-553\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doYkrRYP36iRnNthasjb%2BBw49%2F1EzsX%2FZBsiP9Zuoeha4GGsrY4Bn%2Fg9rWtuRpriTHf5TIpZ39FcwFsPaouxXoUjmsYrjOl5sX%2BiUXNiLgn4oiX62%2Fh7WoLjpwaVYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3811e30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1362)","md5":"0f5f6fda477235a06349008a000d81c8","sha1":"2431f7ff7dfeac6f2ec44afeb4cd3480abb25990","sha256":"2ee7b3a8a0e1b31b163b33129d9d82b368716adfaadc9f632b97c05fe1937a26","sha512":"e962a30cc904c107b5800bbac6606585b6d74c1d7f0d61eb032bae0a30a77c60d11f232e231bf943f53ee88fa5d971a540ea18881cf1f4855ad5a2e2b7c52f02","ssdeep":"","tlshash":"aa21c478da5090397e12fde5d7d705daf23ca5614c1beb997a18e16083c37f41a13382","first_seen":"2025-07-06T21:44:04.062809Z","last_seen":"2026-06-08T05:16:21.666511Z","times_seen":282,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_2-DlfMR8Iv.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_2-DlfMR8Iv.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-1c70\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vrDE6F4STn%2BCYUu9%2FS5dZZryBfSmTyQlHCO3BteYZwzb33v5mggGW7TD33sLmtohoOpTRG7N4d9S80kAfC%2FoNxA7a60q5ERXIJRRPy6PMm5%2BENA5tTs4hdLW5nahHirs7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cbd81b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"3bba6d7047f93b8079b6574966141522","sha1":"6315fa7577ca55f1ea3f1cbdbf1d8c92b88646ce","sha256":"45b87f2619cb785de2ea69042fbad87abecc7d73e6838f6e7e21bb7a4fc24dd9","sha512":"2460ada343603c0555e7015a28f8d72417166827be8e300a741f6557adc9e5aded4ef7d6294f234e777851afa3d39586a8bb61fe461727efda1a975b070b22f8","ssdeep":"96:fSo4ltvV8m5Zcw/IPgUW0Vc0BpNZJfqa6hnliuUxWNBgPe0pSipGDhreyCiK:fSo4rvqAZjiBzZJyaslNzNuPddkDhrV8","tlshash":"8ae1affd77d102087854606a154710309ad06f1beae4ffc689915b839a0b1fcad2e6a8","first_seen":"2025-02-12T08:38:06.871461Z","last_seen":"2026-06-08T05:16:21.722165Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.008e51f1b5701476aac409df8d8bc0483.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.008e51f1b5701476aac409df8d8bc0483.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 207901\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D7CD23C383268BE2E\r\nAccept-Ranges: bytes\r\nETag: \"19FC68BA1CDA660E4BBD36A6BF854944\"\r\nLast-Modified: Tue, 15 Apr 2025 17:57:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2461070667445855759\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GfxouhzaZg5LvTamv4VJRA==\r\nx-oss-server-time: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":207901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1400x1866, components 3","md5":"19fc68ba1cda660e4bbd36a6bf854944","sha1":"5ba7086187ca0b8160e4f3b9f104e66c2fc08ce2","sha256":"e37e2990c4620ce594f239321f8dcdb5c04746365d26b8ee3e5c643465e62e1f","sha512":"c82813bb4428460fd29964c864109bb1dc9c37578b73ffc0c1a3077461f20c27e315fb9c5104f2c0db738e2fa3d7718f5b5b692fb442293c0e10ec3639a1d946","ssdeep":"3072:iBmsu6A5ZUf8TVD2h5GlPFayeMv7W34BoANdPSDPnqYxKRR:iB9NE6fqSh5CPqMjYANd6LqYYP","tlshash":"781412d9790a01e7caf643b1e0fb30945a6329cbcb45da0a0351de246c6a27d3fdf098","first_seen":"2026-03-16T14:21:50.122054Z","last_seen":"2026-06-01T14:33:52.128575Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2002,"timings":{"blocked":1043,"dns":0,"connect":0,"send":0,"wait":304,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b3670fc00bef475293fe0a26faf1af3b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b3670fc00bef475293fe0a26faf1af3b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9485\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5DEE24003531ACAB90\r\nAccept-Ranges: bytes\r\nETag: \"D143069824ACBE37EECCBD88F815F7D3\"\r\nLast-Modified: Wed, 09 Apr 2025 12:01:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4371194900719359147\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0UMGmCSsvjfuzL2I+BX30w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 232, 8-bit/color RGBA, non-interlaced","md5":"d143069824acbe37eeccbd88f815f7d3","sha1":"01578ca91debd1fc6e93eed6b801d480d6f8d3ca","sha256":"eeb85cddb7caa1a0edd46ec513beac3096383a0f72204770dc0f5c21f1dd20a7","sha512":"c0c53c4964b33660fc484430507a32b1a3cc67356766e85ddbf67dd2f920ed843b4fe7b13c361a34751540aecaf694e3c40c3671b2d4baacd90d59dc687f8f86","ssdeep":"192:BSi3wY4uC8KtQadptGikhhG1GLvMjI0/cbX/LioBh2iv16V+:o2wY4iKLvM/amvaSP5BhxvwV+","tlshash":"0812af9cd1a964665c84ee1f7148c5087f2217c78465175a91e8f077ac9bc3d1328eff","first_seen":"2026-03-16T14:21:50.116822Z","last_seen":"2026-06-01T14:33:52.149982Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2266,"timings":{"blocked":987,"dns":1,"connect":282,"send":0,"wait":286,"receive":1,"ssl":706},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/index-tn0RQdqM.css","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/index-tn0RQdqM.css HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\netag: \"6884a687-0\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAS5qtiJK3njacAag%2FfBwaugcxeHv7M14a2gfGgFzR0IWqQOZnjvwb37Ec%2FaxnhWY8KhlNLQcYx1uWTBb1md3SL2Cp0C0QPDAujmHZatP5cSlh%2F8h%2FnvmLM8W4Ac0b60nA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399dce9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Frame%208-QBBarmw8.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Frame%208-QBBarmw8.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-117e\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5PUngL4sq2oGF7VJR2ZAbLI%2BsVuBSFxsgA06Wq7%2BpOD1Dt1Bbge1XbSBq%2BaDzXrkEaPqvQ2lT636chLYDij2M8%2BchSfCmSnYSkVjg0swOw18pG6zFdTtlrwff%2FzUAPRTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cbd78b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"e7cfd72af14d344bb50ac6a368b99779","sha1":"6d04bc54730a8609351237bafbb0bfc98a07e131","sha256":"180400a26cb69fe17d05af323409d39541eaa734be725363518ebdfb431b8164","sha512":"f981285edc92363ec2c515204f81363c61eb8c8b8bee5cae16b48d9a90866f64e7313813ba306a5d0a9d93b45dd9d7f62341667922f5a4b6d52202ed3573a4e4","ssdeep":"96:fSpM9j52pIOAY8e34ByvkJ8Z0LasASip3bJBK44pv6mb2:fSm94pIOAYgE9S744pO","tlshash":"27917d9dc1239d25cde6caeeafa46ccd7c8d7f009d25726880a5247526040ec4b3e68b","first_seen":"2024-12-26T23:29:40.08069Z","last_seen":"2026-06-08T05:16:21.673094Z","times_seen":74,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_3-CZAdRCrv.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_3-CZAdRCrv.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-1476\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxf79J%2B0X7Ku2l7XqNpEApI%2BG5uQAaICIU4%2B8nFHgU9Jf6leVcTBNpXar070qrVKLsKilwkSOGpR74M%2Fuxh%2F%2B1jYVvJPwK0hAjq7CjG89Tk4IDzFKipMPDYtvl%2BRgtJ9EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39ccdb5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"44e1a5b762465a0eb365f3f6fcc1d60d","sha1":"0acc5c63c3660a7c702ae6957c4b827574ea07f5","sha256":"186abff8e623d5232e4d46a8719269905148ee6b8dbeb47ee45878568fe6bf36","sha512":"f61cde643eb6a175d0e0e4435503a05d0d982e475ef31704096a9767e1bd2bd91e830e056f702626a919e06f6277119f4cbb4f282e9b0b014958ef79eaac93ae","ssdeep":"96:NknS2ia5BOmDq6Q0bXWl/dLdt/mTzv+zIkPJcFciGB:NknJBOmG+w9dt/2VEJicP","tlshash":"bdb18e6a8641ed4039cb8fc274e58847c371e048a3f0972b19ddda5e47378a8dd694ea","first_seen":"2024-12-26T23:29:40.099933Z","last_seen":"2026-06-08T05:16:21.717989Z","times_seen":74,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_8-8hE399Ma.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_8-8hE399Ma.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-1463\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JccIObX2V3PGDHXS7v3B2Hfhkn8VVp%2BOO73i%2F0Wu%2BrEERkZr2E5es1sW5swKSOWTU2%2FG0sciYDdsMjK7%2BFTalJ1Kw9zubOOr0bPHINv0aheAOWltPxV9J9L62zZj4T7%2B6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cedfdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"6211d145652aa5683717095a2b8f3cb9","sha1":"e723a1eb0b976b950c7918554ca3e03b82517b2a","sha256":"4ffbb5844e062f2f9fc2a8d92fbb4e20eefda839538163f19cad9127a9882b5a","sha512":"c586421b8bab3f03423e22a99e4733fc6de0e8947fe5544cadd46d6f8cee89d2906504e34ed9a133a4e349be47d931ad936609fa19daa7e00b910b5d28d9a835","ssdeep":"96:rknmWq2iSs+x1Nfa9cNG0KGY+xqHZTHOHU+xLYTiuL+R83xrIN1KEVXDFQLsFnu8:rknK+3Xq+g5Tu0+ZuybZVXDFFtfQke9Q","tlshash":"b3b12a0abf406c114a9d66c067ee610767775bc086a4a560fce6cd175c306fdcd8e9c6","first_seen":"2024-12-26T23:29:40.093755Z","last_seen":"2026-06-08T05:16:21.684567Z","times_seen":74,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/option/rules/getTeam","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"GET /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FO%2FPxc3X0951QzKMdAbcWT4%2BBY69gumznJmgkmpYGAbUZ8OSVNjpePZdvmpc00NNbz63T4dJ%2Bhnk6yBrIlblTjIa2avIR5Bl%2BaMcE%2BwXOaBBLuS3nfb4TnytU5WL%2FxjYnjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39f5a9a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5028,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"020ead43700c19509eae6dcdddf63d42","sha1":"e3aa76bb5c5e0c96826a84574e6d9fcab40b9ebf","sha256":"4d61c44737ae1a32a5d6c8530989e08158dce41b75e7ce0d667acdb5813b7b1d","sha512":"218f0f2caa28d1183a6db9420c75f93502cb2225b364bc6d0cfdb2f89d3faa17d3cda703441785cc23cdda509f01007a9c134a1d4b958a7d194773753c288857","ssdeep":"96:uYWMp9UIAfhbM0ZU/PJNbrbOjubrbNjubrbtjubrbMj5:uYXaa1xZnOj6nNj6ntj6nMj5","tlshash":"05a14512a2b8dd3d5ea9988321f67ec4b26cb60ba3108c3c41558f0c99e197d4b7f74a","first_seen":"2026-03-16T14:21:50.126008Z","last_seen":"2026-06-01T14:33:52.127114Z","times_seen":12,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.05917b0d5d55a47a7ac278cb58509e8c9.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.05917b0d5d55a47a7ac278cb58509e8c9.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 81979\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5E93A7E93834127232\r\nAccept-Ranges: bytes\r\nETag: \"8FB2ABE6BDAB7035349FD7DAD64F04F8\"\r\nLast-Modified: Wed, 16 Apr 2025 10:05:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13880447912329519715\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: j7Kr5r2rcDU0n9fa1k8E+A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":81979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x547, components 3","md5":"8fb2abe6bdab7035349fd7dad64f04f8","sha1":"87b792e41cf9495b1b5329d80e5f294cfa636088","sha256":"52ffe321b6f635630c21729da2ef3db982b8814f9df9c28e74e29b8d731e636f","sha512":"2121d2a8e57c6fc3f65d3439deb270f9b8fe2a45a5fb694019a30c4b3b65c59f7933b7d689c1ea87c2b6b8d9a89324b2121239d06e327b1f3854cb7bd88e6b0c","ssdeep":"1536:gnS23oGf7+xbFdNGD+rA7cFX5qax4NidyyRRHjJlt48ze6yjTJFXmkgL6uomE:8S23RWbFL6pji3XfL6JLJuS","tlshash":"c383121ff6b43f87c582a92c50d77b3181bf7d25685b0555261efe0a336ce48ac883a5","first_seen":"2026-03-16T14:21:50.120696Z","last_seen":"2026-06-01T14:33:52.153742Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2057,"timings":{"blocked":1715,"dns":0,"connect":0,"send":0,"wait":309,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.06f70e855e507453db74709d8f3fc8451.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:55.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.06f70e855e507453db74709d8f3fc8451.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 437898\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5FACF6C534350FF210\r\nAccept-Ranges: bytes\r\nETag: \"61A1EB6B91FEF987F87A82431A97F32A\"\r\nLast-Modified: Tue, 11 Mar 2025 14:24:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7433871154220718262\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: YaHra5H++Yf4eoJDGpfzKg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":437898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1980x1318, components 3","md5":"61a1eb6b91fef987f87a82431a97f32a","sha1":"250606929f84d1920041751c30d14e850b726984","sha256":"576931b330dda52610362489dd790baa72fa15cee647e3c91f11f8a2c6ac70c0","sha512":"1a5617a2a496c60927e92dc1702ca93c375ff6bb74ef9ac49422854bc56ba0eb4b5c1196774f6900f0132ea2079c82c51618f386a4cb6cec92ae5ceb89e0e441","ssdeep":"6144:86/BLL9ck/rc22A31IfRf886D0+wfrn4ildqVtLaF1SoiKEPBt+74sC8hOZW3bH7://3cU31IfRU86D0lrFvhnEP/sp9HQY","tlshash":"79942324fdc1a597d1275ff7a85a39e94c3643d85a8002db78ccdf022b971ec66af211","first_seen":"2025-09-04T00:18:50.346046Z","last_seen":"2026-06-01T14:33:52.160935Z","times_seen":46,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_10-oM9rJNnh.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_10-oM9rJNnh.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-1e85\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEKXFCnv0WyDukaowZmfKFG3EDalonz4vkRDbK0BNvLJAGUZSV9y56oGfp45ARl6u20K0OMghp%2BTUTlCckQtZX7hmCME0wmMjG4%2FrmZK6xM2usnCTe7LA0HWHcQf9R80rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cee03b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"ee91dd1f10c738a951cdd6d6f56c6d2a","sha1":"0f18b1339f62b322f0ca87bba04d7274d9cd6327","sha256":"66bca87cc8e292cc6a136f92fc1cf68f613195bc9b393aa90de3688565521bc7","sha512":"f6c643c252ea556ee6eeea30c1fec6bcb34682601d0dc99435acfd70ef1e48987c5b01a83d327343ba59a0f4ebcd5a49d3cd3b61db9a0c54faaaddc8c9a493e1","ssdeep":"192:fStX5dARBEEYxJg1L4f5aZzsPhY9706OTHEL:K5LEEEYxi1Uf6IPhko8L","tlshash":"7ef1bf40648a2e63661e7d48c2e0c5b557b655cf5338c35bad3210fd15e6281ee39ca7","first_seen":"2025-02-12T08:38:06.881528Z","last_seen":"2026-06-08T05:16:21.692793Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/assets-756b88fd.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/assets-756b88fd.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-8c5\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBzp3LE0U874oBiFQb9PzRinY1Xgj4lYmcJcuHx57iJUnVCMBfFfXH1Xk9dM3JbuO%2BtKOwxrGVKmYSn4A3Hr46tAeaEJNzpNX%2F7IrDnvykJcozJM54ERwsfFQBrPPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3812e74b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2245,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2244)","md5":"ae12174f6149b7fbecb0df6d32955994","sha1":"3db185ce2ad823e143e0bbda1e3ff74664f6c8ce","sha256":"7886a5957c26ad1c7747b1539cd9cf72336a9b38218a0ce329cba5d8df79a0de","sha512":"f7b5acced7dc8c949cca7a114ab0d6e759d05cea68e523e81d322bdbe75aba158d04e300dfbce9dc2fb9aa275c51166e30fc016bec662f7e1eb612ee1c9d984e","ssdeep":"","tlshash":"6241b6342242313bc6f6408646405b51b70dab5a4f18edb0bcee47b55f38cc9d17e2e4","first_seen":"2026-03-26T13:09:32.675791Z","last_seen":"2026-03-26T14:42:32.279139Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-def9fec0.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-def9fec0.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-112d\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQoRmDYuuM2vFsqVdKOljkdfmqvM3s39%2Fd9IiLm%2BRCelClc3WnE56JsFO3XVk2wfwREZwZtYcQ5BJciifdXGDyJuewzMDez8N9%2BzWbT3Rv1yR%2F2lVGLqmqEV4fC4Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3811e33b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4396)","md5":"3a3292f2ff9d3870e22a9a5661e73c30","sha1":"d0917ffd0a8e4461f37dce364525b92fd77ed4d0","sha256":"def9fec0098d5f715a2ca98d517ae777ef66384848bc983674a164600a169052","sha512":"8f0adf3135934d606579c0567fb7acbf51dbb6bdbb56e60322a3592a3e90cfac14a166e65268787508d7fd39c73b3fa88eb076afd8116655bba51b6490d6338d","ssdeep":"96:UZMxRZ0ZxZLZSZgZPZYfHgmzKxaCCXtld82:UgSzFEudufAmzCCXtld82","tlshash":"5f91242df38c2039297bc2897d4c9ecdc011be61d182abd1f947aba50acf6d3255455e","first_seen":"2025-09-04T00:18:50.349072Z","last_seen":"2026-06-08T05:16:21.619468Z","times_seen":47,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/index-ChAPw1KA.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:50.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/index-ChAPw1KA.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-12b37e\"\r\nexpires: Fri, 27 Mar 2026 01:08:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJtEwi45eVqKxTu1Y%2BIzJlIzA2TfuIzd%2FCzBsJx5P9SP8M8%2BtVuHIFYfMK3q7RoHFA1vrK2W6MLt51aa%2FsRsCYx8T%2Fun%2FUnl6jq32B4KqpmJnvM8WLp1eehjuYKJxHZu3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3982843b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1225598,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32971)","md5":"996ec3cca9400907ca2985833afa69bd","sha1":"1e3e37d3044da08bb4df5bb29b0ffe0c927e07d0","sha256":"dacd0c0639d1c1e8061ffc5c7d17a4f28580b8e61dc3323cb28c98045aeb28d5","sha512":"9bb037dc66a09f6bd889ed2440cb0b9cf68ea89feb70f3f87642c5bc5c9c9023a61a32b7183e02061da11f4e1dad7a39f7e78c8c23ef4fe890e98739bfad5743","ssdeep":"24576:pPyInRsAXroM7RVV94YOWXjl2lVrFpxIrbfjMHbOXT:pPyInRsAXroM7RVktijEbOXT","tlshash":"f2358eacbd86b46806f3c7a9a0e71104b2341e45f956c0e4f9ecc56a11e1e6de297f3c","first_seen":"2026-03-16T14:42:02.564152Z","last_seen":"2026-03-26T14:42:32.242707Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/index-NoK2zeti.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/index-NoK2zeti.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-5a8d\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUqOS4664vKvDGRBX6wOEbgZEvKkohpxM%2FX79ZBb7uCH8c747yafvrkMyqmYYW6q0jKaVJN0JlpiL2pSQrvVAMZJTHxVi%2FkCab8%2BXpw%2B8Pu%2FGKOUoq07aydj38ljBgxh3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399dd0db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23181,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23180)","md5":"7399f150d754e4a377069dcf14382571","sha1":"9dd7ca35b8a6b408138ce420d5d95cdcdbe1718b","sha256":"c12b74f11e71ecd0940e189482f467c1c9c053fbdd86d2343d36fce750112ce9","sha512":"c8ca019cd175c06a2138593a6238352fc480154fe208eaf2684efe23955766c0d6384514caca5fda2aae503c577d4c9e93ccc5eec294a26b5dbc41979d2f242c","ssdeep":"384:KgZ6N0xH53LDWliKYawIM3/mU2brERTyFB/GNJ9UF9JiAywGK7rvhp:KgQuxz+rgTynmLoO/yvhp","tlshash":"ffa2f83461168b7f1bb3a625f48aa2149f985f9fc2258db9b2fcf8157ac0d740707324","first_seen":"2026-03-16T14:21:50.098113Z","last_seen":"2026-03-26T14:42:32.28808Z","times_seen":10,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/PdfViewer-Bywmxs84.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/PdfViewer-Bywmxs84.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-219ca4\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfvFOoC8bQvOxIE%2B4hc8Eghm1YlsTIKEiI%2F5ivwFj5Pxs0zGFU6vJG0HmAV2pRvKyRn55SdH7ByjCqlCxbQRGQn%2F9PGW8OkUfTY9kA5PGC7fYddn1j3hQ9k%2Bz%2F4ecMVcig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399ed44b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2202788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"4acc7448b174ceb938f0ea4d39d94965","sha1":"8776f477544928b1246b9b81480c89efcf9344b7","sha256":"45d6ccc5afde3260d231b269a1439729b2a605f4c18b13b17477fbeed298bc76","sha512":"e8f944131c3500e4758072a813fa0aaa2616c764049986173755feb64838e04e96fdd9ef8734d7cf71b05b7f4e41cab6bc940c9fd63f6b243679ed8b3e974c0d","ssdeep":"12288:rZapMcCJkxNP/XN8hXpqsbzAar4Y7hdKvWHbzYE/EqkMsxP706zL9bHIOdBEtHbj:rkpMcCJkPXXqhIqbOt7aFMzS","tlshash":"75258d24731a769d0aa900c370bd1589d3fe1609e062e1dcb78f7a9f6a6ec09673d734","first_seen":"2026-03-16T14:21:50.046894Z","last_seen":"2026-03-26T14:42:32.250981Z","times_seen":10,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/option/rules/getVideo","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"GET /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBB6fbbyKfjfmFJfxZLMDjJj5vWBrMNWI6fTLUuLXXdg17gXCIv0SZBMhKyTLDIhDW9MRHwBIH7pp0dbk93w95C7XxeK9Rfpn15BEZieGSczrFS163PkrH0BefyD%2F0Z6Oq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39f5a9e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2570,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"808f69af15008c4ec44c29ec32134fc3","sha1":"5313a06504ae7c419f0e3a83f6a95eeeda8a8b46","sha256":"34db2f114b6746adc885a7f58be274dedb1c033f45916dddc43d984ad6807919","sha512":"ce112f581cd147a80b877a964e3038b14ce8f62e5a39c8c6d74e5d27377d888f9de4314e123819b31b5a4118e50b45e9062877c8d5a5ce8cf7c30e2723226e8e","ssdeep":"","tlshash":"05519e125678cc2d5a6c8cc395ea3c88f59c771f9250cd385846cf4c99f8db91a1f10a","first_seen":"2026-03-16T14:21:50.086187Z","last_seen":"2026-06-01T14:33:52.163989Z","times_seen":12,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-e61add70.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:46.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-e61add70.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-7107a\"\r\nexpires: Fri, 27 Mar 2026 01:08:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3955\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKwlsFeytsUvVZsKw20d%2Fq8DMx5q2ZF09gWqW1EofZlcZs5uDS61z9p1KCfcSUM7QMl%2BcHfLiFu2KfFjUGoWlCf5EgeBAnZF76s%2FZySf8qUemVcfCLbkOCwXr2uM5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37e4e5cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462970,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"ff3c31b71bb2e00aded7e14d31de49ad","sha1":"89a5df15174afc9d4b2a9e7c4b31d4e04e25e717","sha256":"e61add704e1d7327cbd10611f81f37cd7e6cf0235101ef8a937f3f54a4cb6a6d","sha512":"1c5d8f9934f7727dbe29a99b585c437886cec95ff875af4561e90a7266943a0f0a7173303ff456cc785cce3241cd324419f7e2f382e27ba861db2a5c8a237df0","ssdeep":"12288:Rnj/12cjZ8w71ZACkFDS3vyf58rBeV05TN9Is:B/12cjZ8w71ZACkFDS3vyf58rBeV05TT","tlshash":"25a41eade68401f86b23dd66d7e967cca13cf671c8819d95f10b500d8fc3bf51292a2a","first_seen":"2026-03-26T14:15:20.462724Z","last_seen":"2026-05-15T17:15:27.134983Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/test-banner-3-jU8dGHsT.jpg","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/test-banner-3-jU8dGHsT.jpg HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-6ae8a\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUmFca83HjPZhd5guxqHoLD8TMPyAjJT3zyUKI7ctH%2BeHZXDINpqCqsm8%2B6RX0FlXL3ueGoyVCQupD68Q8rku557vbLdBNQvBStXXPxtK74AOL5UVicdJYuf4G8vE%2BRpNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c0b81b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":437898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1980x1318, components 3","md5":"61a1eb6b91fef987f87a82431a97f32a","sha1":"250606929f84d1920041751c30d14e850b726984","sha256":"576931b330dda52610362489dd790baa72fa15cee647e3c91f11f8a2c6ac70c0","sha512":"1a5617a2a496c60927e92dc1702ca93c375ff6bb74ef9ac49422854bc56ba0eb4b5c1196774f6900f0132ea2079c82c51618f386a4cb6cec92ae5ceb89e0e441","ssdeep":"6144:86/BLL9ck/rc22A31IfRf886D0+wfrn4ildqVtLaF1SoiKEPBt+74sC8hOZW3bH7://3cU31IfRU86D0lrFvhnEP/sp9HQY","tlshash":"79942324fdc1a597d1275ff7a85a39e94c3643d85a8002db78ccdf022b971ec66af211","first_seen":"2025-09-04T00:18:50.346046Z","last_seen":"2026-06-01T14:33:52.160935Z","times_seen":46,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getWhitePaperSetting","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYGUxEppdtAHprN48mqJSidXpcnDYMmOj6b4xEvZ9wJZqYHNxyXEwVYfDs7vSAl6ZaudD%2FUu7TqKf1%2BFUuFzU6L9pcTLm0pVlFaWxR1ZY9UQmip2xmO8EBYaehTHM%2BJ0oBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39dd9410afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getAllSetting","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3QwD0fhAKGXY7LJ%2BKteO3IVAPbrg6uujYy97f%2FTSM0Z8n52v%2FyFqDqIQJtBnGX16x6np%2BgLZ2Hf7q7uixDorZGzZYiN8tE2%2Bpd6%2FIRaY%2F1PnIYePb3aZ%2FvC3tZUTWf91HY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399cd8e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-2c48c360.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-2c48c360.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeHhI4oW3LhxCkyLK%2FZfmS%2BFx7XhX0OOAoBHCAbst%2BSaUDOpXt7wDf5oAhKizqqSEIm9iE9DhHY1lRVS4ZNj5kuruI4FIyc561%2Fo%2Bx73hldPSPyjtt6t7kxEaoUPfg%3D%3D\"}]}\r\netag: W/\"69c3ceaf-239\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c3812e73b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (568)","md5":"54706ed2fbff5c698576521e14d86022","sha1":"eb5f9a259fbc039ad2f0f1300c345a851e87e6fc","sha256":"edd91ebfa6bcdcce33363cd4efd1101e65c8739d386f4983c5083fe8aa171764","sha512":"330a3d114d6ae6a0b1c8717c47cc1d58d9f47f412b001c8d48587985ea01e83dd9b9018d3caf773060fc2026fa83356dd2c9112650bdde656f0fe8494774e40a","ssdeep":"","tlshash":"b7f0053f747dc1b25fe2c45c61630420991d1b453720c8d4ba0d072157385a6f37e515","first_seen":"2026-03-26T13:09:32.689141Z","last_seen":"2026-03-26T14:42:32.266102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/Sparkline-fc5ba93c.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/Sparkline-fc5ba93c.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oy4pSD%2BnWmiIzVUz1CdbQ6Poiz257vlzilD4jZTnTvOzwh826GNeZhE0nUrcGl2TT0FSWTPK7HNzbGtX9G6R4cDbL9dT4TdZNaDh6QSnzJ5ju3iKXhTYY2lssEw5Rg%3D%3D\"}]}\r\netag: W/\"69c3ceaf-6b\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c3811e42b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bf7c86c59f3e438384c2ad4be8dd0f09","sha1":"d0fb9993fb0afb3f88c3b7ed08541e2f42ea7836","sha256":"fc5ba93c24759a9e83f92a25a748d6122056df61faf0bf5d6fbe0b779aa9ae60","sha512":"04569a8a29762dc8038b8f0d16d8a9ca9c161d86e5ecb1b9e175a598b204f211b979a9045411d618a45a37fe9df2a50ceb2277a250276a3e0eab69b086a55844","ssdeep":"","tlshash":"d1b0122802003558d3224310b2f3178d9738cf8127934c4f950a7e2368513af1822dcc","first_seen":"2024-12-26T23:29:40.001098Z","last_seen":"2026-06-08T05:16:21.691279Z","times_seen":45,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/CookieConsent-mwnHoYgs.css","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/CookieConsent-mwnHoYgs.css HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-3681\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYr0PQLYNQFRovhUSs%2B302erTIrn4wo1SNR%2BhFu3e1V3O7Ndi268r5RGVGP8m2Z3VHMRZzj2OkpIOORJTOn%2BOhxg2L6zw%2FZmgztB%2B3mkytCPW6JuXiKqbKingeEp%2B7DZqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399dcedb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13952)","md5":"3702485beec79f01f5f40890bd41e6de","sha1":"153030a199138cff59c04ba70fc52b646b919bdc","sha256":"21423bf4e67f430fb7adbcfa9379a628946101f291efc8785ada95ad96e25ebe","sha512":"1bf877b10ba0d9dedcf85dfb24118d6b1e36fce99a98e68711580e85d34504fc85a7b2b2ebb92d96c109fbf2482c90939dfd8a2d62d163dbef0822c8f34f7ca3","ssdeep":"384:+UbehJFdKW+SVZpbZfOZmvajSaZGaZ9JUZeCdq9PNIT/:3b8JFLDVZpbZGZmvajSaZGaZ9qZeCdqa","tlshash":"625212a86310282352134f3656b59bb4deb4588287d38d7fa1c0ad44c6f6df9272f7b8","first_seen":"2026-03-16T14:21:50.056276Z","last_seen":"2026-03-26T14:42:32.267155Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getAllSetting","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rA8ee9HoT3412ndy9vV1wzfqERJJgrJ1fiddZCfOj5AaEFCl%2FZqPWVwDZPgXESTHu9iC5fY9sXRbHqigEITxSDiela7SEnAw0rixM%2B2vC%2Bf0rLyttXOdSYDW7mMywn4CzhA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39b2ec40afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39809,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d90c97f28e3a53f68df7198ce084a0c3","sha1":"66e1d94a36bca98ff83fff721078286b3736539b","sha256":"44ce455e35119358cd03822616441b9af7870678b3c940daa786781758886f43","sha512":"9cc8590619e856021bf4cf97d504998d83c281effd66e095d48fe510ac107120356044f0c1cb1a32cbbb2be060477bfb89b5be9ab6585055f8c6580fbeeefdaa","ssdeep":"384:DhuN+abVlZozqDOJlDYN3HMK8A2dnCEDU07q:DhNahlZozPjZ52","tlshash":"a903941ab0a8fcbdc7da98c600773a6b35ac387beed55d54e0cd4e4c47e9471860b60a","first_seen":"2026-03-26T13:09:32.679054Z","last_seen":"2026-03-26T14:42:32.270024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_4-CZsCHZTt.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_4-CZsCHZTt.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-22f4\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EP8HPeM%2BuU1ipv4JaAr%2Fjle93lqWoFKGa2447cfd56SNuz%2B5Ps8jobktsX9XQLZ8f45nHrEV%2BpIxOFBbOsWzdH9zEJgFioOi6clKLNJac3IllHn18wl%2FG7WYUcAGgja6qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39ccdb8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"5b3ee8976381978db00a5d83a5e8bb1d","sha1":"e4c03afd678536b2659f6115ce67e49bc6127f95","sha256":"d16314aa812455f4867fc9124af62e75ac962d48bebf068fb343e5b49c1f87c5","sha512":"2c4884ab65d9d3c62bd64ff25bd2ee709b6405f07e941e3c68ab28e82ff8fd91ba7a1c5a0b189599eda448e0a2f39b8b43a80878628b4afd95f9428e0e8e977c","ssdeep":"192:rknSAq+3Xq+g5TelZa+hXbDROtAir4cIPgi1QghQPkGadurVxKq:AnSAf3XfgBelZPN+DIYEQghOvrKq","tlshash":"40028f4599486e4165d6b294aceda00353a28fc0c782d8747cedcc291cf0bbfce86ad3","first_seen":"2024-12-26T23:29:40.048598Z","last_seen":"2026-06-08T05:16:21.667478Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0902c0b8bdf5048b381941e2d93c443f1.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0902c0b8bdf5048b381941e2d93c443f1.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 332615\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5DB1E823373918A5A5\r\nAccept-Ranges: bytes\r\nETag: \"7ABADE8F0044AA819E40DDCAB808E34D\"\r\nLast-Modified: Tue, 15 Apr 2025 17:58:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10178048346791373546\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: errejwBEqoGeQN3KuAjjTQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":332615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2060x2308, components 3","md5":"7abade8f0044aa819e40ddcab808e34d","sha1":"c9dac9f002183a18948e76e3c20599b21181ff59","sha256":"f7f14d170f5e9937b5688184fd4637c78628c9f09bdf665fb20b9b22b8ee421b","sha512":"58664412e84703804b769aa356a424e515036e4a2679e98bd80e6d1027680d2100913e54d8ca7f2e460bde33d3276797922b4a79d46f5377e3d09577da5619cc","ssdeep":"6144:euxir/BoparD62yybp5vVj4k/rNofbDt2ljAxasuGaibRE9prNdt:bko6PnvVcIstijkapGazlN","tlshash":"6864235db71912a7ef9a813774bf8210ae31c92f4902c3e25ba4156f256a3f0f59c782","first_seen":"2026-03-16T14:21:50.142719Z","last_seen":"2026-06-01T14:33:52.168832Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":1053,"dns":0,"connect":0,"send":0,"wait":279,"receive":717,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/vendor-a26129ae.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:46.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/vendor-a26129ae.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-19f3f\"\r\nexpires: Fri, 27 Mar 2026 01:08:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3955\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syxvPktK%2BGJe14dyVV1yuteyneu3%2FNVMHSsT0CPUcxWy8CNQaGhdzm3EQ4kGdyu%2FtMh8Woe5Bb5hrsHjWU4hANJKV5ADeaalemwdf4tR%2Bw%2BPA7J4sTUGFbZgZ%2FdGrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37e4e58b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106303,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"d98957f7dc66ebe08e7989195c922966","sha1":"5e64a3972f92b2399cc46ea9aa14f2fc56269d7b","sha256":"a26129ae541645a0121f9f6863d513bc1a8813dbc5ac9eb13b167ed4c7a8300f","sha512":"be20926b774b052879f74ac1af8a80c68f33c4a456fa8553b28945b00efcc27a606b2934b3c05594c447914d82597cc28289b1536bb90153958759072aaf7488","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/z/VX:BnNIClDsIxuVS8nR","tlshash":"f2a3f7a5a9c091fc6f2af265ab8b65dcf13cf671cd40daa4f105515c0ec7bf50223a2a","first_seen":"2026-01-02T01:29:05.251314Z","last_seen":"2026-06-08T05:16:21.704021Z","times_seen":46,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-1024feff.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-1024feff.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-817d\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBH3tQI1s5HdVV5aZz6CXRG32FfbAAq%2Fxd5acysYYkRTurOqHMZI4oHFJAjwR%2F6%2BG%2BSkv%2Fmhz8f7%2BiYmsL09aLYRPEvUZfAD9fwo8cy7H2%2F%2FI%2BF57fPfPvPeFiCt%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3811e44b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33149,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33148)","md5":"f8caf2458f1961471b085d8893e95ca1","sha1":"b526eee5dac8ec5331f04268425da1900239705e","sha256":"1024feff3a714942340c236388eef99bd81eae00b13f59febcead3945b6a6b96","sha512":"7d830b71aa106686433657bc07817b39e7f5a324cc55693794e7b308db913bfa55fca7a9683f0411e5703b7cbe1d4e6354e29d65412b694ca9e0bd1ffe037c9b","ssdeep":"192:hF64YWePf+EYmO+AjPzegl1lVKJDJXSLEUwm2a7KLrO/C3Ke5YjBY/b8oe4:364YWXRlzlVKNiCeYKe5YjBYD8ot","tlshash":"00e2a425b6891038fc37d5557ec88acca21cfb22f583ce95e69378714cdb2e72932649","first_seen":"2026-01-02T01:29:05.214111Z","last_seen":"2026-05-15T17:15:24.712086Z","times_seen":40,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/ArticleViewer-CsvMZDdJ.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/ArticleViewer-CsvMZDdJ.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a685-983\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dcqkqjAfU7BIahctyqcH9g6mFbQQmTdfqvwPgqBh8QNVilPFKaaluP8Q20oQMDEQuc0wgF4BFFIT%2BY4L4a8c6A2dNiTlA8ZmWJMFQFrSZyS3W7JMzph25bsexiT4Luklg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399ed46b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2435,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2434)","md5":"cc25501ec3171e70f7d34b790c9b53aa","sha1":"7e357c8b6e8d0801cdafcfe459222c386edebf2f","sha256":"155214766254f84e6c935559d8a132b50e2eb9113db8cc6aaad46be47b91f10c","sha512":"0b9074f7364c64d359dfecc59f865510f8b6befd0259de830e88e4bc0e106ebaaa9526b0ae1299966d3b685c42fb2dcdd094ef7dc55d5f4a2dc84f01dfa93c7a","ssdeep":"","tlshash":"5f4164ad74b1cfb942b3933165cbe25491447bd7d7608a86716d18393bc5ef06a1c304","first_seen":"2026-03-16T14:21:50.078186Z","last_seen":"2026-03-26T14:42:32.2576Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getAllSetting","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://keeta.us.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPEgw%2FtRvxhyQlJlrd%2FaNavZ8myPWEExUJ4RUqWt0kdmDUInUn5UipipyO7X9oMSwrhGXuZfbyNDccLKu3cN4jX9Atuw%2FC4Vgn1JfetYVGs%2BW5drSsCVBSSAOH%2BAJjoPYr0%3D\"}]}\r\ncf-ray: 9e26c3811c5e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":42,"dns":1,"connect":1,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_13-Dtre4Edb.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_13-Dtre4Edb.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-35c4\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3951\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfndeA%2BrsKjd%2BkDgWIXWEN7d1%2BeNTzpZOmEMzfuIrX35M7IImRpBIhVf1qNbMXV45pPne%2B5h%2FjhCgPxPiRnzJ99RotYYLDgubroPmRIgh%2Bg3l8wFOszAqwkpcvULse5b6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cee0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit/color RGBA, non-interlaced","md5":"2c6e67fc2e060d5be1cbe4adeee0101a","sha1":"47a256417b8b8c8f501e46f45201e4de3002f4f4","sha256":"1623e3d17213444597dfd17cf82b953938427487c41cebf5f8d24bcab6ff1045","sha512":"5926dca7f68517e2e11fb30da9538daaa83dd4f2c732443c077ea15717fc8a6dc1a5b86fd1d56f456eab45d9892f6c8a038d1f4f68e72128a08a3643eb27efff","ssdeep":"384:4RDnt7dGap/Krho5yWTenohUtYQZ+o96BJ:yDt7Hp1enMUtY29c","tlshash":"a252af2f7d000d622e049ba51dbf80d683b188d1c8d6b474e759dc12ba7e7bb15cee84","first_seen":"2025-09-04T00:18:50.331142Z","last_seen":"2026-06-01T14:33:52.144025Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.081cb6f05fd9541cc91971233ed4a0f7b.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.081cb6f05fd9541cc91971233ed4a0f7b.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 85901\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D93A7E938344B7132\r\nAccept-Ranges: bytes\r\nETag: \"A6C2AD33EEF6A1D2ADD368C7D2C1E0C0\"\r\nLast-Modified: Tue, 15 Apr 2025 17:58:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4452291654472597505\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: psKtM+72odKt02jH0sHgwA==\r\nx-oss-server-time: 63\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":85901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"a6c2ad33eef6a1d2add368c7d2c1e0c0","sha1":"592d2bc5ea3c96bd5e6e35a91da91c630a50e63c","sha256":"bd5ce34c72f08275243c323800b047573559fe20ec5c9f843d9c45bb91575df1","sha512":"44fc3ac6b7a846bdceaeb1eda899c5cf54870042cd8bacc553c15fb5e6478dce7e51cf7bacb4bc80353866b53b0a427b7cfbb74c39e9007bbff0e1915d5bced2","ssdeep":"1536:I4Iwx/ZKv+dLIzaF4cNmhgt1Ao+GBilaUeMLCUjqST7QRceyk6u9iGKyBERR:zIwxkmGaF4cNUgt17seUjqUkVDBe","tlshash":"578312a80697c2e9cfed953f9e009b5d0d15e663de40a2c572abcb3f514a80ee191b4c","first_seen":"2026-03-16T14:21:50.133022Z","last_seen":"2026-06-01T14:33:52.17434Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2862,"timings":{"blocked":1117,"dns":1,"connect":273,"send":0,"wait":341,"receive":282,"ssl":550},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-08da20c1.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-08da20c1.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GukvGqWi2UgokO169wKWGInJTjHxoffruQIDR6sscG2KGcZFvBaAqFLxYTD9S%2F%2BfmrKsr%2BsYQlBJlx2H85YOw2Ll%2BQ1nX1wrKr7xUIlF7g64xW5g7dwKfXulPmTL8A%3D%3D\"}]}\r\netag: W/\"69c3ceaf-3d\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c3811e37b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"609f485085d6f3ef92dce77c2e34548c","sha1":"2dd32919b0aee69cbfd5cb4e62dfbdbb17e59194","sha256":"08da20c120666038eac1018e3293cfefd2376d01dab020ff5cdbf984b8364be8","sha512":"5c27a86cb38553461b4d36bd68878582c364a1f0ad1e04f18523757bda1597b47c931877f15ef1151426c4e90bd5c4a37f025dab2263c00b0fdb7853fc3a8ed9","ssdeep":"","tlshash":"c2a0023d61296404b2224341ff0ae98dce287913ead1a20453021cd536cbe0e276821b","first_seen":"2026-01-02T01:29:05.267325Z","last_seen":"2026-05-15T17:15:27.13659Z","times_seen":43,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/index-C8qwKBKV.css","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:50.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/index-C8qwKBKV.css HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-2ec04\"\r\nexpires: Fri, 27 Mar 2026 01:08:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBkBTcbdlk%2FiDVIy7lIyf20Iy6iejhKtQrW%2F06fBfmyBUS4zAlO40Ohb9HbFnY9KhHpgZkXFN7pMINylvBkBqIryuulj0miX0Td7QcrUeeHWX4TJY%2FntDbV2gDW%2BXa0RHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3982845b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191492,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a9f67e90bebe16b7d170f8579b7baea0","sha1":"79dd36aa36dc6c7f5f43d6b4dc41215a6b27f313","sha256":"a8e8fe7f8782f909c7640b00f2834291b8735c53716894969352a602fdcf4394","sha512":"90215a7a20395f9e66aca38d56ca4c5e96a3f2b0ad675d071982c69db848ff682ee672bd48cb8088d72bfb6285aa85ff1250a0f47e22796602d370605aa568b9","ssdeep":"3072:BC1AAVyDcqBrsExgAtraQe7RdCh2CfvkauNgxtrgiyYam4okKv7b46VZ36:rgExgAtraQe7RdCh2CfvkauNgH+Qkq7A","tlshash":"00140cbde28804e53b32cc96c374778e6039f6b2c9955d95f91b801dafc37a106d1a78","first_seen":"2026-03-16T14:21:50.432996Z","last_seen":"2026-03-26T14:42:32.264592Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/index-NoK2zeti.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/index-NoK2zeti.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-5a8d\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EKCrk5qYcxtQcASGbJ0lZLe4UolDCH0jPhRzfeYpvU7MDk9eXvM4nQvHV9JwWbZDREUjoFfobRxUUG1okwv7Nuka4UG4QsO0A1lOdcaO5JJ%2BtahXV1t%2FcBvmEv2%2F%2Ff2Vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39a6e6cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23181,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23180)","md5":"7399f150d754e4a377069dcf14382571","sha1":"9dd7ca35b8a6b408138ce420d5d95cdcdbe1718b","sha256":"c12b74f11e71ecd0940e189482f467c1c9c053fbdd86d2343d36fce750112ce9","sha512":"c8ca019cd175c06a2138593a6238352fc480154fe208eaf2684efe23955766c0d6384514caca5fda2aae503c577d4c9e93ccc5eec294a26b5dbc41979d2f242c","ssdeep":"384:KgZ6N0xH53LDWliKYawIM3/mU2brERTyFB/GNJ9UF9JiAywGK7rvhp:KgQuxz+rgTynmLoO/yvhp","tlshash":"ffa2f83461168b7f1bb3a625f48aa2149f985f9fc2258db9b2fcf8157ac0d740707324","first_seen":"2026-03-16T14:21:50.098113Z","last_seen":"2026-03-26T14:42:32.28808Z","times_seen":10,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/option/rules/getTeam","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imPnxO8zGyRtOoP1C6x8K0MtOvgieWBEgoAZnr1x3xKOErs5%2BJMOHueKxEPQL%2FoXkWjBtUNZIvmiUTjj2QbRHwdeKWkjC14Gv5Rlno5VjXgBaem1oqIz6VWN7Yqiw8wRtOA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39dc9370afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0b3670fc00bef475293fe0a26faf1af3b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b3670fc00bef475293fe0a26faf1af3b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9485\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5DBC6A5B303933F429\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Max-Age: 0\r\nAccept-Ranges: bytes\r\nETag: \"D143069824ACBE37EECCBD88F815F7D3\"\r\nLast-Modified: Wed, 09 Apr 2025 12:01:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4371194900719359147\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0UMGmCSsvjfuzL2I+BX30w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9485,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 229 x 232, 8-bit/color RGBA, non-interlaced","md5":"d143069824acbe37eeccbd88f815f7d3","sha1":"01578ca91debd1fc6e93eed6b801d480d6f8d3ca","sha256":"eeb85cddb7caa1a0edd46ec513beac3096383a0f72204770dc0f5c21f1dd20a7","sha512":"c0c53c4964b33660fc484430507a32b1a3cc67356766e85ddbf67dd2f920ed843b4fe7b13c361a34751540aecaf694e3c40c3671b2d4baacd90d59dc687f8f86","ssdeep":"192:BSi3wY4uC8KtQadptGikhhG1GLvMjI0/cbX/LioBh2iv16V+:o2wY4iKLvM/amvaSP5BhxvwV+","tlshash":"0812af9cd1a964665c84ee1f7148c5087f2217c78465175a91e8f077ac9bc3d1328eff","first_seen":"2026-03-16T14:21:50.116822Z","last_seen":"2026-06-01T14:33:52.149982Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":987,"dns":0,"connect":289,"send":0,"wait":291,"receive":7,"ssl":700},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//#/?from=mobile","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T14:14:49.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET // HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWCyhtRlcN70bJnCOuo3iX96yTHSypJrHMwiq5zkugUzugYKaH4nXbQL1vkv98ymCAreBqCy1N%2BsrH0EsyqL1p4vU%2FmMBp9EYGEz%2BuQZrifXxuhZMxYsx8M71L82LLFGeA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e26c393bcc7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1097), with CRLF, CR, LF line terminators","md5":"398086eb09b47c0296093d6a6b2be407","sha1":"0dba3e0bbec83155c86c2fdba6fb0348ff2fa23e","sha256":"3815c8e3a21f26ba1a4f84463fe55d711b17426995f1497609cfc6ed50e44478","sha512":"0bf540481b89c4a8e5d8f2cb2da199eafd121368cbd9b7b3804fa255c9b5784b75d2a947d7be1cd5a1811f8ac81528fedef0efa2bea438fb66e1ee2944e700af","ssdeep":"48:0WlJofqcOCRrXLazU53Ol+OCRAtfq1o3R9ZNF9IOYkdJ3eu8XPXS4e+zvd2mKlsc:lcpOXN3euW/fesl2mUsGKAiowGb","tlshash":"f891645a15be7c049322a02e9bebb20ca2315003190aed847bcc42592fa171689e7fdd","first_seen":"2026-03-16T14:21:50.067576Z","last_seen":"2026-03-26T14:42:32.24516Z","times_seen":10,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":321,"connect":1,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Frame%204-qWkfDJjf.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Frame%204-qWkfDJjf.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-20dd\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9HTjcJ%2B9C24pbhkKGOUBMMjQGYGPAAl2S3K5LMztWEt2be97GJOvOC70%2BJBwTS4ZH1ssUXE5qTxY3EEixw%2B9IsscNgVPGOzKcPiU%2BT%2FLIbk0n2CU4Pl964Ipz80tZCsGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cbd6fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"264df1bab5915017aa44a0e0b8743667","sha1":"bd97c7bd5c839e29446cded395805af0a08f9b8e","sha256":"841a45a62324a18518fb30f38f1c097827d6b9585c35dbd9856f94755bb15e0e","sha512":"483aa21467a4ae27ed9f2ac5a7b705e8483c6926a2c43ce8d116943faab02f1ed9943fbbb72926edd5d1a32ecca8ef00acee2e7b4c37714730ef88ebbe53af2d","ssdeep":"192:caJgBbRcbRgI/EZ+ZsoUSRZnVHdtda+gv6ah2:xgBbwxcKVdNdtb66I2","tlshash":"7802af77d5c6848c122ce2a7eb287950f21448011175d26cf6d81ed7e1bb93be937b0b","first_seen":"2024-12-26T23:29:40.054476Z","last_seen":"2026-06-08T05:16:21.665178Z","times_seen":74,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_5-C71n8onc.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_5-C71n8onc.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-4fb4\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWv%2FRiyVcE%2FRCApR2RChqU%2BSYhPSwnR7pWID4i9okv59lo5FRMbmvsLPCcFI%2B1r%2FkAtRXrOb%2B6XWUMiMXzgcwHFuBHRIkkcEiEHEVsD2UEnC3KcT%2FuMO4tNbIdi5X761uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39ccdc6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"92aebd9e0e41071377fcaa664328e73b","sha1":"bca41b209ccb35004a1d926c4f5219e4529331c2","sha256":"df48430fe13782354a476bfa43769b893312990feec6ca44148f705d637d31ee","sha512":"28572d96317587904072f3ba65dc957fe5193e88121c213557038150b43fe06ebfd14eae7c33a5725ce1b05466de57b85eadef136f5d6b146ebe1cdbccd48694","ssdeep":"384:Anr3XfgBsR36w0j9hFNbDNe34iPtNPtshDwG4EMpUxgbRafnDCtDJbeDfibINeuX:Ar/v3oTJCDPzuRDDqCff+nATvqc","tlshash":"6e92d01db90bb4215e1f6150a0e9d23bb69356d024a0d571efcbcab1a8614fecb0f4d7","first_seen":"2024-12-26T23:29:40.10144Z","last_seen":"2026-06-08T05:16:21.721567Z","times_seen":72,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/CookieConsent-DW-uDA49.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/CookieConsent-DW-uDA49.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-18d59\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGiq%2Fsx7oB1M7eYxV2XHCdlxOXJjJPbbdG4YsyctWioJ97psg4PeuiGUciAVLIGUDxd%2F6Q3oUhvpS%2BdKX979%2Fa10LHA2MuAsK246kx1TShWoTSXBYj70QLUnUpFJkKwn9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39aaf36b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5869161a3116cde6b2f3ffbb8cca4b0","sha1":"dd84787c73d4ef67e611a798c8ab6e5fb19b874d","sha256":"6a9ab4b2fc8f4185823863360159117a9624c5ea575c45546248078b0ebd702e","sha512":"a6892ebce344fa3b865b6bebb3d5fd74b7deebaddf98b816c1071055d681178b689ae39dcfe9d5174f08ea33dafd9fe95b4fdc903baff21ef4c36450a3de6678","ssdeep":"1536:pjxMkbZcbyEyNNBlxvHCfG6f6XbvSA6EkZLSCnYtgK+4g1YCF6FsLb+u:RxZNvSAfkpBigkSb+u","tlshash":"38a33b88a120b57a46e356e652a88211b3b45d45f449c4f4b1fccc5b0daed9813feff8","first_seen":"2026-03-16T14:21:50.044024Z","last_seen":"2026-03-26T14:42:32.256695Z","times_seen":10,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/test-banner-2-BOzsBh0j.jpg","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/test-banner-2-BOzsBh0j.jpg HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-e17ca\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEy7AocxsPlX79HsbT4BYoALTUscht6Df4Wl8Di3rhRcgHsNFK%2BhSAyolqqQrdeiOblMsII4tu%2ByrhhPBN1TFnubrM0xcHYXVMCN3aqebXCDTS3CPYF%2Fw3TbvuYxvvrYlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c0b7bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":923594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1238, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2200], baseline, precision 8, 2200x1238, components 3","md5":"65854a160ce21592b039f4f62751f730","sha1":"2a51b71b65a211dc93795a275e9827b48df7f088","sha256":"a4d9da7a3496c0dc89eb4f6799f84ed485fb81c74b85ee5ee798c329ff28d40d","sha512":"fbec9b5be0bf7430e64bc00c6a2ad74ed9734373cf3a6c165c9fce016eb2e2f47181bfae33c376e3c7b5290442bdfd2261d7582d3530c01a9bf70ffbba66f8ed","ssdeep":"12288:07IA3Y7wolBJn0eww8evl8Z9EUJCC9CNw+5WbhXzGYHmIu390/tdIg5coJPrdH0m:sBob8m8P0C9Cyr/sg5ccrSFHJQOsMgS8","tlshash":"281533eb1108dfa5cbf41eb151d5d78d4a22c4bb5beb088af58ef05b53bdbab8064140","first_seen":"2025-09-04T00:18:50.344416Z","last_seen":"2026-06-01T14:33:52.176905Z","times_seen":46,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_7-CXcIvExM.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_7-CXcIvExM.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-44f6\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67uz0FgUEca2j3V%2BkUEVIR6yqkAc97P6loDeDbk8y6J1CrlB39FDeycqMew%2B5XaN6h23XGJZwjmSIXTIA6AvhD%2FLjhIao1G8wZGyPter1nppy607FNZHf0USR%2FaMz1KCZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cdde8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fb38101b080f0069632af23879f5d08","sha1":"2264f6840d544cc320b59f9861361125ecbca8e3","sha256":"2894d936fe42d3f8357e682c477c6d515f04b78e5b6efced7eba1c03b68f2d68","sha512":"5c45290fa25cd3cc00b06a44a1e11802bcc17b3a39395ab1ca17eb1fef7451abbc47343736a36b4359a3801c1e32a4d872285f9c1bcf76bd8dea8a009a61c17c","ssdeep":"384:Anh3XfgBbzg7igsb8vd81SJE6W/TvVqF9wj2iLFRQeNj8t8:Ah/sgoUq1SJEzTVk9uLItq","tlshash":"8f82be80621318a0ae6c964452be75bba9bf098447e8b0b4ccef8537b4747f9cd245db","first_seen":"2025-02-12T08:38:06.875638Z","last_seen":"2026-06-08T05:16:21.715889Z","times_seen":73,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/assets-756b88fd.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/assets-756b88fd.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-8c5\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeCcMNz3OeQD2MO5gXAVNc7lb4IwbT%2FviUAMug5HgHNbbg7oQlidqGq2A5QDg3ZE24reBA2CbDqBEet6h9T0Dlbt%2F6Ssk%2BBvIwzF1P0Cdv6b3dAb4NEGSW4%2FCuBrNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c381c87db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2245,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2244)","md5":"ae12174f6149b7fbecb0df6d32955994","sha1":"3db185ce2ad823e143e0bbda1e3ff74664f6c8ce","sha256":"7886a5957c26ad1c7747b1539cd9cf72336a9b38218a0ce329cba5d8df79a0de","sha512":"f7b5acced7dc8c949cca7a114ab0d6e759d05cea68e523e81d322bdbe75aba158d04e300dfbce9dc2fb9aa275c51166e30fc016bec662f7e1eb612ee1c9d984e","ssdeep":"","tlshash":"6241b6342242313bc6f6408646405b51b70dab5a4f18edb0bcee47b55f38cc9d17e2e4","first_seen":"2026-03-26T13:09:32.675791Z","last_seen":"2026-03-26T14:42:32.279139Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-1629d80f.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-1629d80f.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-b3ad\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5SlhJBK%2B8pTYTSEaGb9Xbg3AbvgYnZcAzrkcAqO4HLqx69jui8%2BgiVArv6RzRSDF%2FB4rThr3xYwws59bfqvpcoSwpxsVawpfbY1x3s%2FNcBEP%2F5y4y4PiIMQ2h8fcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c381a813b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45997,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (45992)","md5":"59858eaf2ccb8496d54634ced13aa41d","sha1":"a6f5cce178af5e714d0d9116c08069982f4c7950","sha256":"a1afbd344cddbdb403524222b9235f4a302bb7aab1074a13d65408cc7c18f3bc","sha512":"0eb5e7bc9ce296942cfff8febad9f5fab55190de99b0c8f1492568b296d16c71db5ecc4789d7c952163f80b639c9a65e71f7560c7ce87bceb244ddf30db2ca93","ssdeep":"768:NkEK+PyvmAlIZbDVZ9sCI2EUtevI4LVfktksvxzS9gN7pzJkwbLChznXxYHzWUmJ:NkEwvmQgI2bevxskwxBOwbLChgzTrQXf","tlshash":"63231602fa46c53ddfb2a151148e1110e6182f8ed04898e7b4bd691e37f7ea07b6a37d","first_seen":"2026-03-26T13:09:32.664181Z","last_seen":"2026-03-26T14:42:32.272431Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-1629d80f.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-1629d80f.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-b3ad\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKn6FDBEstGfbxksQApDhoO2%2FFYMGIz%2F7UNXv4VzNhFcQaIpWKd%2BPzBrhCj57IHZP6L41MY44IDsaqN%2F%2B1Ej%2BkMBFmY%2FEctb9lO1QOBADo8vNndnhoAFhxwGcxL9EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3812e56b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45997,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (45992)","md5":"59858eaf2ccb8496d54634ced13aa41d","sha1":"a6f5cce178af5e714d0d9116c08069982f4c7950","sha256":"a1afbd344cddbdb403524222b9235f4a302bb7aab1074a13d65408cc7c18f3bc","sha512":"0eb5e7bc9ce296942cfff8febad9f5fab55190de99b0c8f1492568b296d16c71db5ecc4789d7c952163f80b639c9a65e71f7560c7ce87bceb244ddf30db2ca93","ssdeep":"768:NkEK+PyvmAlIZbDVZ9sCI2EUtevI4LVfktksvxzS9gN7pzJkwbLChznXxYHzWUmJ:NkEwvmQgI2bevxskwxBOwbLChgzTrQXf","tlshash":"63231602fa46c53ddfb2a151148e1110e6182f8ed04898e7b4bd691e37f7ea07b6a37d","first_seen":"2026-03-26T13:09:32.664181Z","last_seen":"2026-03-26T14:42:32.272431Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/user/LoginLog","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/user/LoginLog HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://keeta.us.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QsW4pIK7ZbLLcdpaVvvAj2vuvWJ8Bj5aWz6KfpdFLYs1AfxJdjcAXiHvBeFTjgKDPAmSwScVv6VqwwwbB%2BF%2FPovACIM4E40%2BIR43eQIeoGLdqIn2OjRxy8uBKnc3jGsmKSs%3D\"}]}\r\ncf-ray: 9e26c3812c840883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":694,"timings":{"blocked":37,"dns":3,"connect":8,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.keeta.bz/ws/ee38b80c-a170-4cd2-92ec-c7627ffcb437","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"GET /ws/ee38b80c-a170-4cd2-92ec-c7627ffcb437 HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pc.keeta.us.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0avxVRYQH8WjwvaN7od69A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://pc.keeta.us.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: RVzZJG3X0AkwWCf36EHLR3UcJPk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0xBYFmdVlT02gfQ2b%2BYbkjQ%2FJlZdTFK8SxWYM%2FFxiG69e1baGgWYNOwCdLX4WIbhrELra6LT%2BeNRQct80hRAbl188WT5GpTOx%2FtWaC%2FHwZyTIChYuv25A%2BEeJ08goqrSueQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e26c3994ce356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=559\u0026min_rtt=494\u0026rtt_var=206\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3180\u0026recv_bytes=1320\u0026delivery_rate=6067039\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=6a86d34dd2bf8650\u0026ts=648\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":636,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_1-BoZ0M6iR.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_1-BoZ0M6iR.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-167a\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCfY8FFRNQ2UBwSZQADXrQtYju8043sowBQPOzX6drRXrrH1yQPIwZsXAFJY6PjeUuSNeaB56HXYQvQCkFF%2B6tjDRFhWv8%2F3zZMYVUou2EvLbjawu87CHVSAXCh3ok9NLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cbd7ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"827be7c066c1c0ff48d4edcae9c08ae8","sha1":"cf2c4d66c3c1fd50d4762ce77179180a0d73758b","sha256":"f95c44c7f06279aa1c42f597e330381a88e2e3f456f32063787f9be45fc1bf8e","sha512":"41fd6284da1928cc22d595968a0f795dbb2681aa389469190010c429d35e8a4e423871b6c6db56c3129cb05d0c0d4cba7a7a5b1b8e73e96f618f35ebb910ea11","ssdeep":"96:LknmWq2imH2+x1NG0KGY+xqHZTHc+xLYTm8KUZjjrwrX98Ph9CTMP6L6CS9WU1bh:LknQ+3q+g5T8+SmS4N8PXCTM66CtUBxf","tlshash":"84c15d5ae6524d980b1eba88bdebe8075f7346c0d9e0a871fdd5c84328303bdcc498d6","first_seen":"2024-12-26T23:29:40.08734Z","last_seen":"2026-06-08T05:16:21.646263Z","times_seen":32,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/notice/GetBanner/2","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/notice/GetBanner/2 HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1M%2FFmNf0fVwy4jYGtDtZYnMuvQe1m8GurwmksQTEQbDN7eiZK3tjZF6Mhb8s41kY0DAe0boFQbNt60sl5cUKWoimGQw26FqVKKknQlBf3Dd2K2TN8e9wA8u1oS1OXAZqSQ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39dc92e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-18dbcf75.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:46.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-18dbcf75.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-2bce7\"\r\nexpires: Fri, 27 Mar 2026 01:08:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3955\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysM7xV9nAZCw6VBtA9w6W8TTISG6pEd9H9W9Kd%2FBNswkyqzFkwyZgUfLWaS7CrcUMTXhtfsd1L6NjU7bkZXssHFKco6wY%2FAGmLteJ5gsQ2THsdwOM99tgt3T9FsIGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37e4e55b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"9a3ce7aa81ba9474b265404dfed43dfe","sha1":"6e249249c641a3e00ef195fe20defc801163e404","sha256":"2af62f122a00b8235f54eadc7347e1427a7aeed9d9d95ae12de5772e3f00bd79","sha512":"a9745b956c06462f7fb262e4d2d2e9c1a261b666908b6bff6309e372c5bfa6ffc28236886a1ed6414cf79d5335b2c29e66bd0992da6e228a76a5b98b5061eec8","ssdeep":"3072:5f3ePukRnjyBRy9kLhpISiozZWo4MiNJ53rGStf7F2BegUQzP8jJ:5f3eH4tLhpISiozZvJ2J53rGStf7FZy2","tlshash":"8f048e5e6a050fbf9ffe084c695e050020593f85a64cc853b3ad5a1a37fbcd1a3ba719","first_seen":"2026-03-26T13:09:32.633778Z","last_seen":"2026-03-26T14:42:32.283345Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-9c121ed5.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-9c121ed5.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UTn4mdsJaiBaS7sTC2JRf190dNFZTwpJbur0KhJI4e6VZKkCWAHRnou5cTJmRfBuOHilujJ0Oo4krVOtfeq2NmxNQnPsgW%2FbQBft2dT9aEY5zAAydgFC4pkanjX6A%3D%3D\"}]}\r\netag: W/\"69c3ceaf-344\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c381c888b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (835)","md5":"1d44409a0382a92b692977c80090ba69","sha1":"fd20639f59d5008755bd9550aecc4cbcec867230","sha256":"8361c2aa2c1154f3903a2779053113067fda3db0fb47f7b27990bb226a98737b","sha512":"4d9e1ffc0f3049103ac67b173098cdb72944373af2ee6b3e14a54bc23ada9ccdbed3622b9b1eb805d031dfb7fcd112c6433e357fe34b47d5d5fd9c4e7da1352f","ssdeep":"","tlshash":"f901cef6b90cce7f0ea2455412902a0220090f9cf9111896bc9f7a692bfa800c69e70c","first_seen":"2026-03-26T13:09:32.668752Z","last_seen":"2026-03-26T14:42:32.252673Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/notice/GetBanner/2","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"GET /api/notice/GetBanner/2 HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNkjbgixVMZKFqny73znVJdUepyzm54T5tut67byL80kD%2Bgrw4HF4YtLTeIkA3Ryo04pv0kv6xgaWPMcTx3wqfWIFPxEoxR4Oy13kSuJkLSaGq5He8pWLV%2FpxBhg8yij9Tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39f4a930afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6882daa178c1dc15640d4290e1f71368","sha1":"077e91cddb437af52cef6e1ce14067d08def40fb","sha256":"aa535dbab8dcfd3879b3479e76d7a942ae000993efd220611700f141b9405aae","sha512":"4c4c77158a1c3b8094321db719b5f9300901abb47227a8f4012685f9dec139b0faa0f49fc4af556bdc73ed9707b3d10a037deb4f9746689c793a57b2d64e4692","ssdeep":"","tlshash":"3ce02663ab0890b088b14ecce97b225df0fd3c7f569042c2ac218884ba89ff794019cd","first_seen":"2025-09-04T00:18:50.299963Z","last_seen":"2026-06-01T14:33:52.183292Z","times_seen":27,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:54.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4 HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6766304\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5E794D1033362BFCF1\r\nContent-Range: bytes 32768-6799071/6799072\r\nAccept-Ranges: bytes\r\nETag: \"BA426146606C1037C96FAD76A9B0112C\"\r\nLast-Modified: Sun, 13 Apr 2025 14:52:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15547162464997827607\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15787,"size_decoded":0,"mime_type":"image/jpeg","magic":"data","md5":"c880307913955b28a430505d0aa5450b","sha1":"a2b7a077a083f88e2eaaa0d12925a52a4b684a6b","sha256":"4e94ae42dacb268af0cfdca2b036800fd4677f1ea0b7527b9bb28c41ec9fb67b","sha512":"0650cde868bbf90ce4ea8ffe064af84cb1b4aa8108132468bb7e0cbb865dd8cd40aafc18a3bb09cae61756615584b630c15337069c61a2f43b829c1cf258284e","ssdeep":"384:8qmUMHvpgoJlb9apwfa70Dx9elhgehlsGNYabuU+:TmpxJlJ8wfa49WgGsGY","tlshash":"ee62c0c2656c404463f9120a24a78de6ec6fef62d14b54a81b6fe744780e8eee5c11fc","first_seen":"2026-03-16T14:21:50.452046Z","last_seen":"2026-06-01T14:33:26.298354Z","times_seen":7,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-827a055a.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-827a055a.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-26bf\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9peCV%2BM43hxCcZpQm6zDuh7nMUtUi16mqm%2ByPzjAS6l2KkF8Cs9iFx9XSsy9N6KUbALywX%2B0sV5PDDxbmIzk6Hr7V42qo2Nzyt4fr3klXbFZr1W4iKTfU%2B1HaRXrRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3812e61b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9919,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9916)","md5":"dbac5ac76af426fc9c3e913c3903cd0b","sha1":"97b076bfda18388b24e61cd9e71d0066c116d414","sha256":"922d8c3c09c3ffd521185a58b00727913cc4b467417d75b8f9c4608e04acdf55","sha512":"f0df52966f136364149c3b83076156c63f3dac02bc3cac51a300d9f8a3d28472a5b1505a2ce5ba2be8198cbc8c19221d9b38ba45ec40169f63e98f14fd0a32c2","ssdeep":"192:T+geBY5wk5TdOw2Mc9y/GwRh50Ue0BLVVmXhvDRCS9:TouV5pH2jcRh50Ue0BLVkpVZ","tlshash":"39220b05b80ac93ecef6569ce0d90030718d2fc56016946af1ff692e27b9db4a395729","first_seen":"2026-03-26T13:09:32.651534Z","last_seen":"2026-03-26T14:42:32.266579Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0a561ba465fde4856bb30a1a0bc0e009c.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a561ba465fde4856bb30a1a0bc0e009c.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 113562\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D68F5793236B9EB96\r\nAccept-Ranges: bytes\r\nETag: \"BE6B51B09ACD0044D9587FDD9A2E42BE\"\r\nLast-Modified: Tue, 15 Apr 2025 17:58:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13764507527797607285\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vmtRsJrNAETZWH/dmi5Cvg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":113562,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1042x1350, components 3","md5":"be6b51b09acd0044d9587fdd9a2e42be","sha1":"aca0b9897f5913b7786e265f3ccc5d5c456e47fa","sha256":"2c152e0b1c41114633965c19d28f28ebb9bd1d4a54fdfd3f4f7e52f7f79c749d","sha512":"0ceefbae085cc08479ec0811e11fbbde7c2f77df3dad009356c39087a7f978a23766076122cb668771ff4ca83158695ec5cc251aa055464452507824962906e4","ssdeep":"3072:o4dvCjmfR9Rr6q7cZL5Z/dOpefYd37gPaV2b12:/1Jp6q7cZVIYw","tlshash":"1cb31263159e00e7e468a5ff15abd26ecdbb5c01bf15a22a0fdc8ceded3258434164b2","first_seen":"2026-03-16T14:21:50.058642Z","last_seen":"2026-06-01T14:33:52.184131Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3069,"timings":{"blocked":1210,"dns":1,"connect":287,"send":0,"wait":300,"receive":340,"ssl":582},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T14:14:45.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLJr13DJvR3m%2BwGOP1%2BWiIHNNj5SltIDVg7y%2FfgeeEGPt7XwzYetFH%2BOeYLbQ4WzDtyc7fTwRXHLkQOzvoecyhCoGdkwGLpdKBNIaGdxhlvqA3uq5GXSQtGXyRq7uw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e26c3796c58c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3211,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435), with CRLF, LF line terminators","md5":"b5626db01703b95292031ad6ba82a8ed","sha1":"9b125dfbd1d8bc927709274751e673ca261de78a","sha256":"e0d489298b81efaeb51ff1751f6bda192d9f24baaf377ee1286d3426f815a14d","sha512":"41f6af4c227a9d2e9bd0553e80613fd1ba799ba7344156f04d3e511f09e1b4d91fc8746038a8515f3681a8037592ea397b05a98110214de8a5c51f04dd69fd5b","ssdeep":"","tlshash":"a76130a3a8a0896a1371492bb9d7f00cef905653851c9840b4dc50ff5fb2fd28cd7a76","first_seen":"2026-03-26T13:09:32.672333Z","last_seen":"2026-03-26T14:42:32.248228Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1253,"timings":{"blocked":303,"dns":290,"connect":1,"send":0,"wait":647,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-827a055a.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-827a055a.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-26bf\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0bbqHWWN4Bt0tkOS2vaPMlY%2Fd5IV3O8Sj60zuzEcxB%2BtY1YmSJtivb76S2nXRzuSfc4qxdJUVX0QfNH8AoG0pZXR7d%2BdnUzoDFuQ0vN8jztm%2FABSwx2Sc%2FQODwsmLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c381b86bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9919,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9916)","md5":"dbac5ac76af426fc9c3e913c3903cd0b","sha1":"97b076bfda18388b24e61cd9e71d0066c116d414","sha256":"922d8c3c09c3ffd521185a58b00727913cc4b467417d75b8f9c4608e04acdf55","sha512":"f0df52966f136364149c3b83076156c63f3dac02bc3cac51a300d9f8a3d28472a5b1505a2ce5ba2be8198cbc8c19221d9b38ba45ec40169f63e98f14fd0a32c2","ssdeep":"192:T+geBY5wk5TdOw2Mc9y/GwRh50Ue0BLVVmXhvDRCS9:TouV5pH2jcRh50Ue0BLVkpVZ","tlshash":"39220b05b80ac93ecef6569ce0d90030718d2fc56016946af1ff692e27b9db4a395729","first_seen":"2026-03-26T13:09:32.651534Z","last_seen":"2026-03-26T14:42:32.266579Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/index-dEhgiXTl.css","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/index-dEhgiXTl.css HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-5f6\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcYPzsYn6zmMczcMwHi%2BcKksBjyFBeVt3KpwkQN84dwnsafMXNRdWdjAR2yvgQIF9HbYTV7vavUpFBnnFZgbBGdcRRuvyMU0sGKzLAVgeO1NsPUtcMOeFGO%2Fx8KJRoCdaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399dd02b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1525)","md5":"654020c82e9cd7a253d91f9de770146c","sha1":"686c3b0ee5475de81b1291fb3a333d15b9f14384","sha256":"30d7bf5ed034fe61ecc434e867ad1ab52f1c00e4505fa8ca2fcdbff6b7c1b7c5","sha512":"c5a7b733d9d92ba0d865bd2ef65d8312ca7a08dc2f8dffb2f91f1463f7b796df06dcf34c47c4568dd372a1a388600b3b06b67542fd0c08ed594d1d359e575ecf","ssdeep":"","tlshash":"a331cb1172443a2990bbef58e4a0828d9360e673d77901de23d57a21da973a73320adb","first_seen":"2026-03-16T14:21:50.095919Z","last_seen":"2026-03-26T14:42:32.274122Z","times_seen":10,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.069d83fe03b7e4581b7cb7ccddae1b617.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.069d83fe03b7e4581b7cb7ccddae1b617.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1609813\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5DACF6C5343594EF10\r\nAccept-Ranges: bytes\r\nETag: \"BE0849BC722AD880BCBFBC2CF0E69801\"\r\nLast-Modified: Tue, 11 Mar 2025 14:24:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1605986791831193932\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vghJvHIq2IC8v7ws8OaYAQ==\r\nx-oss-server-time: 33\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1609813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5760 x 1410, 8-bit/color RGBA, non-interlaced","md5":"068ffefed26b5a72168f158658b9a2f4","sha1":"2ce2db9abcb1feedddd98d5b53ad607a5b0df748","sha256":"9bbbecbbbdaa2afa4d2412b9208bc080d3c13597cb38dc80069dfea2317a14e9","sha512":"c741fff5018559eab2f1e2a738ede90b3ee6c15fefedbcf6d3126190fee129e61bf8a03eab11bd44aa1f904fa0bc0d99d152a1cfcc08b0cd811c295fd5cf3b2c","ssdeep":"24576:DcSET7hb2PQJj5R158yzygpkVNYCtmD8zm95p9pi:QDlb2PQJj5R15rXtb8zm95Zi","tlshash":"5b2523ee5475dd14fcbb09b867a33f37a287109184f8c265d62ab09e748bed818c54cb","first_seen":"2025-09-04T00:18:50.351314Z","last_seen":"2026-06-01T14:33:52.131255Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2840,"timings":{"blocked":646,"dns":0,"connect":0,"send":0,"wait":293,"receive":1388,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//js/CookieConsent-DW-uDA49.js","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //js/CookieConsent-DW-uDA49.js HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a686-18d59\"\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45vo5SKM03Hq%2F%2FKfYjj4rqBvUR00O%2BBroNhy1FNPiWu45aAIbWukZtaPqxK%2FjzfhwRaJG7jKdRDCM4luOcA0ptQ88xcuMid40OQzWFU6TS6nlQs%2FGe3gNOkywMfuJLdqOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c399ed42b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5869161a3116cde6b2f3ffbb8cca4b0","sha1":"dd84787c73d4ef67e611a798c8ab6e5fb19b874d","sha256":"6a9ab4b2fc8f4185823863360159117a9624c5ea575c45546248078b0ebd702e","sha512":"a6892ebce344fa3b865b6bebb3d5fd74b7deebaddf98b816c1071055d681178b689ae39dcfe9d5174f08ea33dafd9fe95b4fdc903baff21ef4c36450a3de6678","ssdeep":"1536:pjxMkbZcbyEyNNBlxvHCfG6f6XbvSA6EkZLSCnYtgK+4g1YCF6FsLb+u:RxZNvSAfkpBigkSb+u","tlshash":"38a33b88a120b57a46e356e652a88211b3b45d45f449c4f4b1fccc5b0daed9813feff8","first_seen":"2026-03-16T14:21:50.044024Z","last_seen":"2026-03-26T14:42:32.256695Z","times_seen":10,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/resource/fonts/Arial.ttf","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:46.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keeta.us.cc/assets/index-e61add70.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:00:55 GMT\r\netag: \"69c3ce77-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3954\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHnTDQWiAzjvLuQDGf0AwjSyi%2BwhmN%2BNrizUG%2Fyptb8oQdEVFIv3eHkel549Dix33P5mCYEliCVvZOgWNWKXPYqzv2Zy%2FbeuNgto25l3Zj8XtZGb9Z63pWTNLgSWGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37eefbab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-08T05:16:21.720932Z","times_seen":1329,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/PdfViewer-5PEb3z-Q.css","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/PdfViewer-5PEb3z-Q.css HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3952\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5lFR3CYxogb7BL84%2F%2FXmUkAuaqfTMR1kOT8uCJH6HLPVYgucAq%2BxRfqps7e3SaFo3I71kqd4kzxUji1TAUtJWSLL1XMGent5BLs6bD4uW%2Bn12EVzqb%2F8HaRQp5fagibzA%3D%3D\"}]}\r\netag: W/\"6884a688-5f\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c399ccdeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a2be7a68174b2bc296bdb2949f053b27","sha1":"37e7f75bb0ee7306c105a4eff0e2408a35335d90","sha256":"7793a30de3fd91815db13fe0e7cabc5d9342278a86e5edb7256671fce7c6a5c0","sha512":"25f017b4c64d023af2976650eee823edb47637d8c3ae703dfc6fa44a8fbafed1f85983c1a378d74b3165bb01d529ce142995fc6f88a8e5703b8ad7d62c14135e","ssdeep":"","tlshash":"50b01233f2c4904d042110016105333c1d3c4004530208f14916f33143391871031021","first_seen":"2026-03-16T14:21:50.119181Z","last_seen":"2026-03-26T14:42:32.247157Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_6-BrdJwosH.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_6-BrdJwosH.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-26d4\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6ia25kDV60W%2FbM%2FWPydQxoWoI0ozBIHK5nT37RYWDVLC9EtiiVnikJveGr4TWkmAJ7x5DNsuJC83D8pL4AzdA%2BlYL%2FBsUZ8Mfc%2FgnemtJW5VOFY%2F9nOWGup%2BaEFUmQ%2BJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cdde6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4e6adb95ea32bce12b23d17e5c0bead","sha1":"00ced7819afc7267f587e68ad7dfe84c7eec7261","sha256":"b13acac1bd74d72c21facafcd3dbf6bb44dbb271b23a0df6a228eb28b7e337c9","sha512":"30f9dc0634ab618910888f5b34671d727e6e853facbee428b3e0177cc0dc3defe2f26dbaf96997e6bc351c241335da5f320d8f97f034269987cb2e99b4a1c838","ssdeep":"192:fS71Xz65HFwfkYKFafIGQA0GIQuuUa3b5hevzXLOU/8Ea4FM5OCZ:KNzUHFwlyafIGQAx7Ua3b5hevzX0EXaJ","tlshash":"2922a04ab28e49fdfc8a605c80b78d78764c2831f333e6110480f6a653941f756f3217","first_seen":"2024-12-26T23:29:40.06096Z","last_seen":"2026-06-08T05:16:21.626854Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-9c121ed5.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-9c121ed5.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AVQg%2BzQpKX4XUnb%2FAJBNKibRcZWYbPwITCIG5Yfc1bitCLGF30rTGKwrM1qaaZBSr3G09fW4kKMXe2rObxR%2BYfgsf5np%2BLg74j%2F1t01V3h%2FLAO33jt2dhmcc09sTA%3D%3D\"}]}\r\netag: W/\"69c3ceaf-344\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c3812e68b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (835)","md5":"1d44409a0382a92b692977c80090ba69","sha1":"fd20639f59d5008755bd9550aecc4cbcec867230","sha256":"8361c2aa2c1154f3903a2779053113067fda3db0fb47f7b27990bb226a98737b","sha512":"4d9e1ffc0f3049103ac67b173098cdb72944373af2ee6b3e14a54bc23ada9ccdbed3622b9b1eb805d031dfb7fcd112c6433e357fe34b47d5d5fd9c4e7da1352f","ssdeep":"","tlshash":"f901cef6b90cce7f0ea2455412902a0220090f9cf9111896bc9f7a692bfa800c69e70c","first_seen":"2026-03-26T13:09:32.668752Z","last_seen":"2026-03-26T14:42:32.252673Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/charting_library/charting_library.min.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:46.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:00:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ce77-2a6b\"\r\nexpires: Fri, 27 Mar 2026 01:08:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3955\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtZvN5WZi%2FeeRNE17F8BP93us1lhAULbz8FmPEFVvw9jlM%2B0rBYob6cMwTTXjBGRJbBNET2yjjPzWcZJUMwX2SuEwgRumspli9d4DmP7%2BMBVM1YKi0SLOrfHL8euGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37e4e50b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/vendor-a0ade6ff.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:46.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/vendor-a0ade6ff.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c3ceaf-f048a\"\r\nexpires: Fri, 27 Mar 2026 01:08:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3954\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7IOuNpCGQumCsD2CA%2BSmzpdsFBdn%2FE%2B%2F8tukpc8rNplT1qaJZgPSAreoVYkMjEX0LReB65nY%2BK61tPjjoO9KFuQtlbym6SoAxulVjrZmasMVBW7ghmlUGCF5ASq8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c37eaf27b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d65905f67ebd1007ec3024a8c7111378","sha1":"657fc7c8515e3e816452b2b19470a0d895f79ecc","sha256":"c2f12aff26f23c96b0ba15921a4b872bb6f29be859b6f977b07a3200db6a6d24","sha512":"c33ea88cf967ba4225a0e49e1b57ca9eb519307628c507edd3417ecc61ddd057ff74846b91cb435a5cc7bb056ee80832e4e24fbd766ce334eb71c095b4c584dc","ssdeep":"24576:TyaCT6VDT1AOtBoLTKZtdjZtdmODWa29KbwA0RnW0QR2:TyaCT6VDTNoLTKZtdjZtdmODAYboRnWi","tlshash":"b02529c57292f06147ab24e240bb0006f3396e59744d84a8f16dd8eb7d79d89a2b7f3c","first_seen":"2026-03-26T13:09:32.674005Z","last_seen":"2026-03-26T14:42:32.254464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getCoinSecondList","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://keeta.us.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZK6y8xUeb8Uya%2BiT3inl5RJOuwlFvUpcPT%2FJYWDZCS7%2BSktJAR8rYXXBTe0LnRk1FfYU72HzZgluv6FGR%2FVbOHn8NZ57pSE19PUzvODtIEYYcfzAyOzKZDT5HhjzhDCrdgU%3D\"}]}\r\ncf-ray: 9e26c3811c740883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":44,"dns":1,"connect":3,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.09cca26b322c34bc8806cd8d4a48e1141.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:54.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09cca26b322c34bc8806cd8d4a48e1141.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 923594\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5EACF6C534358AF110\r\nAccept-Ranges: bytes\r\nETag: \"65854A160CE21592B039F4F62751F730\"\r\nLast-Modified: Tue, 11 Mar 2025 14:24:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1983646765410002933\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZYVKFgziFZKwOfT2J1H3MA==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":923594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1238, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2200], baseline, precision 8, 2200x1238, components 3","md5":"65854a160ce21592b039f4f62751f730","sha1":"2a51b71b65a211dc93795a275e9827b48df7f088","sha256":"a4d9da7a3496c0dc89eb4f6799f84ed485fb81c74b85ee5ee798c329ff28d40d","sha512":"fbec9b5be0bf7430e64bc00c6a2ad74ed9734373cf3a6c165c9fce016eb2e2f47181bfae33c376e3c7b5290442bdfd2261d7582d3530c01a9bf70ffbba66f8ed","ssdeep":"12288:07IA3Y7wolBJn0eww8evl8Z9EUJCC9CNw+5WbhXzGYHmIu390/tdIg5coJPrdH0m:sBob8m8P0C9Cyr/sg5ccrSFHJQOsMgS8","tlshash":"281533eb1108dfa5cbf41eb151d5d78d4a22c4bb5beb088af58ef05b53bdbab8064140","first_seen":"2025-09-04T00:18:50.344416Z","last_seen":"2026-06-01T14:33:52.176905Z","times_seen":46,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4 HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6799072\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5DEE2400353153AC90\r\nContent-Range: bytes 0-6799071/6799072\r\nAccept-Ranges: bytes\r\nETag: \"BA426146606C1037C96FAD76A9B0112C\"\r\nLast-Modified: Sun, 13 Apr 2025 14:52:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15547162464997827607\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ukJhRmBsEDfJb612qbARLA==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48520,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"de2e6176a07ae3ed5ad3b199e677cd80","sha1":"627c3d445895b60a27fd200a4c0d9c70f7392ad3","sha256":"9b6ad75dc7af4f43196d6fc4e45daf54973300f14c9700685c650d3e36b6fc1c","sha512":"e26f1cc18853ebec2396ce5b340255d5503ecb26ea13adf1a299f508da1539586fad8c5d8bde979cd7953c17863eef9aceb1e69f0445f58b2c1754fe362a251d","ssdeep":"768:raZ6Ap+yAexvZvTFOCAIqFFgmByDa5VfJnlxHRB7eUR+WoA4mpxJlJ8wfa49WgGo:rlQ+cvtF7AIEKMf55JlfBpFNp4aKgG70","tlshash":"2123f192be28056e6795160c808f8dbc1bf6db56c189e82f261ae7193038ce544b35fc","first_seen":"2026-03-26T14:15:20.496068Z","last_seen":"2026-06-01T14:33:52.132888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":816,"dns":0,"connect":0,"send":0,"wait":305,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/capabilities-bg-Ilkx7z_t.svg","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/capabilities-bg-Ilkx7z_t.svg HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-70030\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HEPbfhjWmVgnEREDPeTBtrc%2FaHmXLuhM2j2NyUJZqnIepWHMgk%2Fbl3RBQwAxzWLwdd1xdvxnv9%2FwNfeMYZheNjCwVwbYXS5Qy7H9b%2BhqobTzWRD0IDaZ8vqNxAj4Ufdv6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c5c55b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458800,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b84210c756530a427952ce349e647d7","sha1":"674f2860453c0b798615dcbb79e2582cb8030dd9","sha256":"283751f121ca54052a80021dc8826639a7e5c80a776667ed0b2c2c9336a6b828","sha512":"3bea904ceb1991b2f1a11a243a1add29810da7609de40eec7ea866c28761bee94dfe8e6e89be9d093cddb76f2def5505589fd8ce3c5dde7564143712a7216938","ssdeep":"6144:C8y2HtFP8Opu+2JaO8bTLvXXLAo2XULHs22l1OkbGKA9UadGwLDrSOO2LyQpH/rv:A2HtFP8OILDMnv32kLsr1gTSOOkrBlj","tlshash":"67a422e1b1e87fdb69f4a65d449d4c936c2409c4a118d0c9df9a9fb603daa306c0fd3a","first_seen":"2026-03-16T14:21:50.069918Z","last_seen":"2026-03-26T14:42:32.255375Z","times_seen":10,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Frame%202-c2RTuPRh.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Frame%202-c2RTuPRh.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-1904\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGCoEVIhGvbJ%2Bzyyr%2Be7l1gcuUMd7WVxicEWgrRkYC8jqjRGf0D7WPV9%2FDfXt%2F7dcnVLnOlL6xe%2FSrYU%2BDxoDU%2B2otflHioUNwEplg1%2B7tf5vrMtSEyC2PQUCMvcfKUd1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c9d41b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5f6ce860b906f355bed0f55e2ae2a88","sha1":"044d4a88650ebbeb71b5ba01dae0993e64ea257d","sha256":"2e5a4148f2f24b69f934319ce6e397de373ccdb3744307d44a9ef747973b945b","sha512":"98b22901d2a1829c6d1953b0a3ff3306f939e2966c166f9971a3a29a95c27c844627c3edeabc4dc7148aeb0a47b8e685e7bcc9abf756f179e5dfe0f563a95fde","ssdeep":"192:MlfDJ/atKb4jNpdL9w9mjidVbFTC7E+XNS2:QM04jNXL9w9vdV6X02","tlshash":"8ed19ef7971026a7fa9855c615356cbacfd4a6034bc72608013a76053dd6728ff0ba86","first_seen":"2024-12-26T23:29:39.991003Z","last_seen":"2026-06-08T05:16:21.693368Z","times_seen":74,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:53.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c3c8b099ee334d22bd0570d31b8f3e25.mp4 HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=6750208-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 48864\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D794D103336CFFBF1\r\nContent-Range: bytes 6750208-6799071/6799072\r\nAccept-Ranges: bytes\r\nETag: \"BA426146606C1037C96FAD76A9B0112C\"\r\nLast-Modified: Sun, 13 Apr 2025 14:52:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15547162464997827607\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48864,"size_decoded":0,"mime_type":"image/jpeg","magic":"data","md5":"6883aa6cd86f79ffce787a8d14191659","sha1":"cea7b91155d1dd3321736306e661d0e2f2986bba","sha256":"d5b36311fc9060e9be1870a550323e9b50a74c0a1882357dd1f01d4bf1b77032","sha512":"f7c0fd59403897ac3dfe2abb83e07a6d55d344273e2c3e0195d1020de6998e616f69bd1e7ec51da7aecbf15f4733498c057172157d41a36ef57284e2b2cd77ba","ssdeep":"768:KKR/eRuTLmvm4U9WZhOBWHjESCuPhYlAhZ1nniypwnrY1KqxhmQzRSr:FR/aSU3hS8jESCuXvun8IEh4r","tlshash":"1923d6f1a375811bdb5217fe97d11b2435a0d464c2b6f3ab44b7922b9cb26a8cb035c3","first_seen":"2026-03-16T14:21:50.144271Z","last_seen":"2026-06-01T14:33:52.165847Z","times_seen":12,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-2c48c360.js","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-2c48c360.js HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7spzFKH%2BxZB4Lv5i0ZWzYGXoOrIKRB4eGI%2F9IpXvO3wDKq7X0FeVFpN2l8%2FalpHHz5h%2BLwaNG3x5u%2FH3x3xtB60lHzYS2qiQKwplMe3OSUzIFqfxJyy34WuQrrLHg%3D%3D\"}]}\r\netag: W/\"69c3ceaf-239\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c381b86eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (568)","md5":"54706ed2fbff5c698576521e14d86022","sha1":"eb5f9a259fbc039ad2f0f1300c345a851e87e6fc","sha256":"edd91ebfa6bcdcce33363cd4efd1101e65c8739d386f4983c5083fe8aa171764","sha512":"330a3d114d6ae6a0b1c8717c47cc1d58d9f47f412b001c8d48587985ea01e83dd9b9018d3caf773060fc2026fa83356dd2c9112650bdde656f0fe8494774e40a","ssdeep":"","tlshash":"b7f0053f747dc1b25fe2c45c61630420991d1b453720c8d4ba0d072157385a6f37e515","first_seen":"2026-03-26T13:09:32.689141Z","last_seen":"2026-03-26T14:42:32.266102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/investor-tools-mIchEutl.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/investor-tools-mIchEutl.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-44e75\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpYYbaHe1aBg3eiwspwbiET0ymhjgWgco4bgIiZe3nEIYKSYscLcLNSc%2B5E78TA5nNkeyPahgMgDSqvJ0rBAPOGglqsAlChFg4RmKMfyH2DUnm93Qu%2BNXl9WwUDem5A2fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c2bdab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1041 x 1012, 8-bit/color RGBA, non-interlaced","md5":"9aed9e0adadd8090ff9340a30b10f11d","sha1":"abef31e250c31e193639efe81a3009a6def4b1fa","sha256":"e53565aaa497f6df7348bd39e7f8dd7a0254901d61c3bbbf7c84a27db6bbac07","sha512":"9273d1c788485714d79d74578ba79f7e32c54f5901831209f8955db96707868980a8d931b956966302db7793d8a069748a38a4f4686abdb7d6a2af65de800879","ssdeep":"6144:1/qcM5MbnWGbV0InJOcl7NuVYi2VD3D5xoEvWQn3v0y8d:1CB5CzV0IJOcl7QVYi2VDb38yC","tlshash":"575412c2cdf6ebe54da9a03972f0db231afd69236691407c4ce1521fa91cbe98975303","first_seen":"2025-09-04T00:18:50.313726Z","last_seen":"2026-06-01T14:33:52.124493Z","times_seen":56,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/option/rules/getVideo","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=857p1VOQ%2FvniQm%2FpPp%2Fxr1kaHkJtEAJkk6yAug1pVxNy%2BNuBGq4JgUaExrKb9HYYXawRQxuyFNeuCwR5mbNn9tJNW3ctS8Hmestw19r4ms9UQJvNPBBRDyd278dc8ujtdwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39dc93b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getUserCoin","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"OPTIONS /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://keeta.us.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaT3cjQEdi8wlI1yDkK7AlAKp52ZIGON72uef1zJgDwaAa%2BEVnJvlEQz9RvXxcFdDurCS22KeT3iWPDnUTqjOF6GGA2roFJ10yZSp5J5nANfyP6cFUuHuaT6ep1rORWzXcM%3D\"}]}\r\ncf-ray: 9e26c3811c7a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":40,"dns":1,"connect":3,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/index-bc011be9.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BeQOIX3GiX74P%2BrhB%2F8ezN%2BE6owXo9k7KKl6CEtcsqaOO7KqVg0I9WNIHilH9WtjzBj0aYCO80gfkvKf%2BMRtgtWqDA2EaLLwtJqn%2B%2B3CN6h0QzmNxzY2i%2BR9%2FhEzw%3D%3D\"}]}\r\netag: W/\"69c3ceaf-18d\"\r\ncontent-encoding: br\r\ncf-ray: 9e26c3811e2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-08T05:16:21.625968Z","times_seen":707,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/low-fee-ByNYPW5l.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/low-fee-ByNYPW5l.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a687-64408\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3951\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmSIH1mgBDPa98ogp1lyA7OUepCAD5Y%2BW9t4S8DcMZLVBijY14p6TW3eX7aGl4O6sxKzr%2FwcsMYsWzkOevCgexQnWVSkjlJSKnQCQfGuvBxjXuIOGXAK1EyExc5Sjbl9sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39c2bd6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1560 x 1345, 8-bit/color RGBA, non-interlaced","md5":"4904db96fba13ac0e2a1c402c5b7b337","sha1":"a685f21e35a89536be7c6bb1b81925d761fc8749","sha256":"8bc07dbafbe213a3bebafb929b95a9c44aae9156abeb7392147779181bb509ce","sha512":"1c8f59b84b36d285ac7a9c2072d5cf757ca584b90343a92b00f5fd2f82e7bdc0db2a2cea3739c78a6e6389f0f0a0ab0ff22e330d8cbb8dd282e0c21e84047045","ssdeep":"6144:RLAC7dJu4FFzg5UgoJJ9dz6Te4FzRMX2kad6uhe0WrsT12f5WpgNFDk1d:RAC7d04FFk5LonP14I2kUw0WLBWKNZEd","tlshash":"5a941248c0582700fcfa75b9e2caae37d99477325987966833e3317103a638e5b917db","first_seen":"2025-09-04T00:18:50.3611Z","last_seen":"2026-06-01T14:33:52.167275Z","times_seen":44,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":45,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/remixicon-BVvFtaex.woff2?t=1734404658139","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/remixicon-BVvFtaex.woff2?t=1734404658139 HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.keeta.us.cc//assets/index-C8qwKBKV.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 176812\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\netag: \"6884a688-2b2ac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3951\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmHZvxhZcf8GffKy4S7OYujnUF%2B%2FGSy5R3ezW2vbbhGHcQM9tH2SGLAi%2BrF%2FePVZ5bbwp1ofH4YDIg%2FXInP5a0PRj1y9xAvrSJYhivfq0PnmaVxT4f5HylfCN19F4P0pcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39da883b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-06-08T04:55:18.229404Z","times_seen":1980,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeta.us.cc/assets/SparklineDataFetcher-e3b0c442.css","fqdn":"keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keeta.us.cc/","date":"2026-03-26T14:14:47.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET /assets/SparklineDataFetcher-e3b0c442.css HTTP/1.1\r\nHost: keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 12:01:51 GMT\r\netag: \"69c3ceaf-0\"\r\nexpires: Fri, 27 Mar 2026 01:08:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3953\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdcVRhU0YACzeP4i1agsjLziGEHfahmJpYoEaujJ7Zomwu6MwHsZ49QbGzmqtumh2eNmX5P6H8CeR0SNUUlZ0DoJvBtSoWj%2Fxf37%2BJPwKqABn%2BnTJLzNc6DFon6CLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c3812e50b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.keeta.us.cc//assets/Low_12-C1QilreQ.png","fqdn":"pc.keeta.us.cc","domain":"keeta.us.cc","tld":"us.cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:51.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.us.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 06:10:50 GMT","end":"Fri, 12 Jun 2026 06:10:49 GMT"},"fingerprint":{"sha1":"8E:A1:14:50:E0:0A:F7:77:8A:95:D1:99:49:67:25:B2:4F:25:46:4D","sha256":"62:CB:37:39:1D:8D:A7:5A:D3:29:BA:5F:DE:74:77:43:41:33:19:F9:C4:F7:4D:7B:90:8A:27:AB:76:C4:19:A2"}}},"request":{"raw":"GET //assets/Low_12-C1QilreQ.png HTTP/1.1\r\nHost: pc.keeta.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Jul 2025 09:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884a688-1298\"\r\nexpires: Sat, 25 Apr 2026 13:09:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3950\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=350vFlfFiYy%2FfWUlYH2M%2BKST7WGcuRbRr3E99E0ma236W3yoecQ%2Fq0%2Bg2JawVNPAkHeO1AgYBu4YZ2LX%2FAWFRTCNiXmlIdXX1Qmms9rBsLp%2F34FrDOVNmBRdEPH2YzL9vA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39cee07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 87, 8-bit colormap, non-interlaced","md5":"96005bed58ee3407bddafa6c12707734","sha1":"c3220fb9384f290f2487bcca0acf38cb9dd90964","sha256":"53a0ff4b5ede57448da0e58c94ade19ef52a993015f4d06c556e5e1731c7edb8","sha512":"94d4d49ffaff9847318b6bdf7661dcabc080eee8fa4a033cb9fe7bccc2fa2235992f8cd3f42cb80e1e9d3520623d698183277577a7148739dbd2a3fd864e3eba","ssdeep":"96:z+5+dVokXu1S0zHAtRB73Hne4QDCvx65yOvOBkYK1+iL:z+5m+EoKNHne36x4yOkkJPL","tlshash":"bea16d969d8e8028e8e238b872d5f4edcd340134609bf20ab375ecb60cb50925d2fe42","first_seen":"2025-09-04T00:18:50.316456Z","last_seen":"2026-06-01T14:33:52.132083Z","times_seen":56,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"pc.keeta.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.keeta.bz/api/common/getWhitePaperSetting","fqdn":"webapi.keeta.bz","domain":"keeta.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.keeta.us.cc//#/?from=mobile","date":"2026-03-26T14:14:52.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeta.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 22:03:43 GMT","end":"Tue, 26 May 2026 23:01:23 GMT"},"fingerprint":{"sha1":"4C:2C:89:33:3A:4D:6C:BE:E8:E0:E8:1E:DA:1E:3A:48:7D:AA:57:DB","sha256":"A6:1E:C0:B2:8D:09:16:FA:6A:CA:DB:A1:16:BD:23:92:AC:8B:7E:1D:11:A1:9C:98:8F:4B:6F:A9:4E:D8:D1:43"}}},"request":{"raw":"POST /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.keeta.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://pc.keeta.us.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 14:14:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.keeta.us.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2r9TUW4Im4BdrDfyV78SpmjOTf%2BWO8lspFmxHe33j3S%2F3ciDtHU4Hl5smE466dYTNhD1esD0UnZm50UvXb1LhlhogmIbhPnJRSTGIZ4lqSwg81bVxYa8HKhP8P7Vp5qpM8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e26c39f6aa30afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"807a3da1bef70baa577f595c8e96c5b2","sha1":"b160a29c5c130f8ff29d9af93a355b16d83cfbde","sha256":"ac1b31128629ff8270da660165d708c5466873281a26fabcdadfc9d66ee351f1","sha512":"1cc652dbdd0d6749aa432dedd46c0f881ac2f1b486b4937997c627907ecb709fed1155b8f309a1c3e8d9fe6370670454baee1c54a6f8d269fcbae3d622d36ed2","ssdeep":"","tlshash":"23d02b27750990a045e02bccd52a1a0df09834bf2620754064614988aa5cefad40e8cd","first_seen":"2026-03-16T14:21:50.072089Z","last_seen":"2026-06-01T14:33:52.134921Z","times_seen":12,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
