{"report_id":"ea518616-9fbe-44ff-837e-d2a713a773ad","version":6,"status":"done","tags":[],"date":"2025-06-25T14:51:07Z","url":{"schema":"http","addr":"kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":0,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"title":"Kometa Casino"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T14:51:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"files.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":133710,"first_seen":"2014-01-17T11:07:42Z","last_seen":"2025-06-18T10:31:46.797142Z","alert_count":0,"request_count":1,"received_data":32048,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-sber1-az3-20.jivosite.com","ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":0,"first_seen":"2023-08-15T13:44:02Z","last_seen":"2025-06-19T11:29:45.125009Z","alert_count":0,"request_count":2,"received_data":1444,"sent_data":998,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":44693,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2025-06-20T04:53:17.582785Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kometaloft.com","ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-06-17","domain_rank":0,"first_seen":"2025-06-25T14:51:10.81846Z","last_seen":"2025-06-25T14:51:10.81846Z","alert_count":87,"request_count":87,"received_data":9705523,"sent_data":44693,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":84195,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2025-06-21T16:48:54.408843Z","alert_count":0,"request_count":249,"received_data":431288,"sent_data":107568,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.kometaloft.com","ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-17","domain_rank":0,"first_seen":"2025-06-25T14:51:10.816913Z","last_seen":"2025-06-25T14:51:10.816913Z","alert_count":13,"request_count":13,"received_data":159956,"sent_data":7284,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vi-sber1-20.jivosite.com","ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":0,"first_seen":"2023-07-29T23:17:29Z","last_seen":"2025-06-22T12:56:33.225185Z","alert_count":0,"request_count":2,"received_data":400,"sent_data":1178,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jivo.ru","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-03-27","domain_rank":0,"first_seen":"2022-03-30T15:10:58Z","last_seen":"2025-06-20T01:34:44.776538Z","alert_count":0,"request_count":9,"received_data":1703494,"sent_data":4179,"comment":"","tags":null,"fingerprints":null},{"fqdn":"agstatic.com","ip":{"addr":"54.240.174.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-12-14","domain_rank":0,"first_seen":"2020-07-31T02:50:23Z","last_seen":"2025-06-22T12:56:33.307364Z","alert_count":0,"request_count":1,"received_data":1461,"sent_data":441,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jivo.ru/js/5498cec/chatcontainer.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c5cd555c87abb393c1050bd02b7bc6","sha1":"ab48d0411069f64fc1d07f355dee243c66bac9af","sha256":"5142a4a8611b5865203d98d34b01bfe6c56c1a3ded05b2f14f1fba0499be494c","sha512":"ffc01b5e2efd8bc762fddfe3e1f986607f85daab3b1e21c972b9ebe35ce4709fbd376b8183e58f475bf402f51ef8c391893c9cd633fdcf93618362e98ee645ea","ssdeep":"3072:xwnGzQHx+JY0fghjeaBESJLqg8MXDemBvCyP/AZQN:+nGzQHx+S04VHvduQN","tlshash":"5c542b9071e0ecb806d641daa83b1204f3291c3df419bd58f3f9ddcae75598a2265f3a","size":278898,"data":"","first_seen":"2025-06-19T14:21:53.787729Z","last_seen":"2025-06-30T14:38:02.234144Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"0448413eb22bf4901b27cf364ea01a83","sha1":"9d09826000b83bbddbe2a32c67dc7cdf77751bd3","sha256":"4abc7748aabbd4b8752f553178b7b70749371b8fcee34ec0ec169b3ec779b174","sha512":"d6fe6dde0126bc4b94c0130f97394b67f087fe2a52f713153369fa21b5d08a05a7e3b32f7e29e208422983c340845ac1036b67787cc8b286900b485a49a809b8","ssdeep":"","tlshash":"5590028710460926a1e9500257133300209304a90d419c0055060411362430f82155ca","size":43,"data":"","first_seen":"2024-12-23T01:16:29.472085Z","last_seen":"2026-06-07T02:17:55.832593Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/runtime.24dc93cdadebef5e.js","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"029a7c2b5277363d53df3c98fc3f8b52","sha1":"af0a30b8aa999d2af86b246add973961fe2d0ad3","sha256":"506995ca859af2e7c604d92b00d2d02e9d082dd4e7601a924f4ba5494a088fbb","sha512":"a3414b607df2886e40d7e88a7d5057066950deab20ddbd1c6fc04ba3e5ae4451b94dc3622065bb3ffcf30627930894858b533e67f7a6edad3ac4c9b298c9de63","ssdeep":"","tlshash":"b47109782368ed7626f144c4583dc281b72c642b152ba8f1bb5bdc746578ee10836ff1","size":3691,"data":"","first_seen":"2025-06-22T12:57:21.205123Z","last_seen":"2025-06-25T14:51:19.479036Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/main.379b11bd14c87887.js","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d32ff14840fcd275f59817f00c80f93","sha1":"00775246034fd3a484143e766c1ee3061b5344d7","sha256":"3b8be2bfe93df8f01ce11d16ed56d0babb86738f23e50b2b9caf4fe8203eaf97","sha512":"5a6b9dfa39e429efe3b98f5f58833cfc76c9033e1adb4e15adb5911fe7615ac1b6c29ef1ec81e47769779d5115767c0b908f80fad01302f9682a70e8e2a46e95","ssdeep":"49152:tZ4NRb9nFjkbZcClqsm6dLUytKAOGxyRSbP7nNYw3yYLL6WWboIVUkNnKs/TkI9P:WHl","tlshash":"e5a56ca57220f0365ac745a660764589b33ca44cea03a09cf3bc9cec96dedd9627773c","size":2122884,"data":"","first_seen":"2025-06-22T12:57:21.050468Z","last_seen":"2025-07-03T14:12:38.714112Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/polyfills.113be87ba1ebb95f.js","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"0edccaf19a2c2d9c2c10378bf6866983","sha1":"5d019d4642ecc28cf6bcdcafb87cfb8d59e50042","sha256":"cbf75914ba20aa58ba50846e0e80f257629c2cbb177cafcae1ae4e1c4bac8d4e","sha512":"149f26bfc6061800190925297282eb4f5bc2b59d9d8e84ceab3179a9cbe9130f06e4b63fdc62692df12e8e663e9a56a2efcc0cea20151e8f7d2a8b3211789eff","ssdeep":"768:rciJfaBqkSOKy9oHIe3qKO8ZHp5rgLaQNruNVswANChBYMcNzzxt2FSNdh5z9smk:QTvtpQtaTa","tlshash":"3ff2e7da3391a0b6cbfa58f5d17b8007f63665a4784c48d8b10c98ea2c36049e567f3d","size":34800,"data":"","first_seen":"2025-06-22T12:57:21.145623Z","last_seen":"2025-07-03T14:12:38.731994Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-11T04:57:42.782086Z","times_seen":350146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/ziqY8DLV0e","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9fd17e47ed6da35a9b8f890ff272bdc","sha1":"70b179bffdb5addaa8ad0dc92628df03a0ebb02d","sha256":"96721df9726d3c98ac90535fcb377bc750a76aefd428fdd149dd0c755c10a78c","sha512":"aed1f123be9d54dc0e20240784bcdbc713aa87a92452996f3c847baa03ced7627bc5c7b8e568be58047265c009e819fd09d7cf76df3523b7e132d010f28784f1","ssdeep":"384:boUJJ1QY4mmPY0nrAN3JyMiqwIlEeJMz8P08wIbqWcPWv6:f3yfAb/9DPpWWcPA6","tlshash":"64822a6e7959b93743b208b9606f6209723545ebd404c920a405e98c7db8edf827fef8","size":17761,"data":"","first_seen":"2025-06-19T14:21:53.842172Z","last_seen":"2025-08-29T20:48:52.453752Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"6bda2026191ebb286d416cfb6145094e","sha1":"01452118e1f975e9aede910c473e23ff45bf53c4","sha256":"f799e794c0fb2b6e746c1cfb08d8791ba0f7960655513e2a448cdb8d20fcd7f3","sha512":"8c35a21e4d1b006cb3450832cc38bc2ef7c52e1ae7f68caaa3b2648bc27cc0d8e51755f434a143691ba4ee3929c70d7a305194216dc29ac9114ed7907fb652f8","ssdeep":"24576:lJ6sL/PCBxJNef9m7QxfZ0lEf4gzoCpvwmGoGc0tqe/I4YsGJ5s:l4s2x7ef9m7QxfqlEf4gzoicBc0tqe/J","tlshash":"a2354ac571d1f8a507e315e9947b2005f23a2c1eb409f064f6bcccd6aa6698e6267f3c","size":1145641,"data":"","first_seen":"2025-06-19T14:21:53.877002Z","last_seen":"2025-06-30T10:14:01.016073Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"kometaloft.com/mulish-latin-400-normal.163c0baceaf56d2a.woff2","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:25.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /mulish-latin-400-normal.163c0baceaf56d2a.woff2 HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:26 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13508\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-34c4\"\r\nExpires: Thu, 26 Jun 2025 14:50:26 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13508,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 13508, version 1.0","md5":"dde2379a58b73aa459e27d560b35ee4f","sha1":"8eff2352acb3b2de206c0444f4f704ed46cfb134","sha256":"9e7fe0edbc32bbda00bdef6dc0241bc78277a37d4ceeab5991c64d11915746b9","sha512":"83ed52c35a95b663e71452a250675a71e1f4efed85d732cdc6781dd13afab1bfe852aaaeea765165f615bd2d153bec4ef167934d31c20d9632e18c87d89b1778","ssdeep":"384:qNfWn6GyNb3qnZTRAaSqnoNxnMKoaUzQwwcNlc:kWpRRDPo/MKUfXlc","tlshash":"7052e00e6eeb6923639f12f4c117254fc24bae01e78dc26e84450693aff38a3521910b","first_seen":"2023-09-17T10:33:05Z","last_seen":"2026-08-10T16:41:59.268718Z","times_seen":459,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/loyalty.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/loyalty.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-5bf\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1471,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"feea3f7813e11d5fd87cdc8bac446209","sha1":"9843ab57d9f28245935f0bd4475f8b48c1676ac9","sha256":"f3b8bffc350cd6719de1f022738429f7f98a5c0909521c20ba4323497d354b60","sha512":"5bcb0bdbae9a175becb87fcf4994efedc5b9c6922c76e839b38e04ef93adfae5d31cceb08e53f712568dec3c585eb130a570d11cdaddacf80953b12c835ff98c","ssdeep":"","tlshash":"2731e5ea225da2c0d187d7746d375d55f55d80f2fbe23382c6549eb0bda11ee480ec00","first_seen":"2025-06-22T12:57:21.245119Z","last_seen":"2026-08-10T16:41:59.336568Z","times_seen":68,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 734\r\ncf-ray: 9555471bcde95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797771\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=enV8%2FLq1HgojGnk%2B9lWJ3qNpkWz1J%2FwTWP7gmoj2CXiAdKuaP7x8Jn6zWJSV0bsXjjVdBsjPBgEkGSUyFqVykmhVHW%2B90F2iwHQZyBiG9ldzU%2BUbgUqrt%2FjksrKmYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1365\u0026min_rtt=364\u0026rtt_var=486\u0026sent=411\u0026recv=278\u0026lost=0\u0026retrans=3\u0026sent_bytes=155089\u0026recv_bytes=11312\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2072\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8a256fddcedd178d1112d47b9eb3ed3f","sha1":"b0063763a85131a554390418e5ae04afd0c56f63","sha256":"cf5750e87b19e0584c45db12f949b7348f470eac218249be245eed055d6ddbe7","sha512":"89f8f9c5cc71dd30af984dea81a5edf83e36c658a5be20d296b8a0e2a51b25df33aa101819efb18c0c7ded0114efeb80503ec65b5cae4d83d9c65581c18aa96b","ssdeep":"","tlshash":"2f0199a42f01fc76743f7130cc3764b29d263e6775aa040428de45f09ed9369a026823","first_seen":"2025-03-08T14:29:59.884759Z","last_seen":"2026-05-24T00:49:22.601963Z","times_seen":114,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 528\r\ncf-ray: 9555471bee125690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-210\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 28446\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f1F0EX8fVVTshSflj1Hc1qL6laYTdJtqiBziUtdOBoEz0Sbfyvkda0oWOprZ8YsLNl2v6LxP59aeZD2pJ6cJjirSA5JLDd0OO9FrrbPnnSGaFVdw%2Br1XuowYngxN%2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1706\u0026min_rtt=364\u0026rtt_var=1182\u0026sent=437\u0026recv=286\u0026lost=0\u0026retrans=3\u0026sent_bytes=165868\u0026recv_bytes=11540\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2084\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8e7134378461feedec638d321e31f4b8","sha1":"31b31624e863e9dd1fb0397150bf6d80782f026d","sha256":"710a00e4cc66badf120705bc40ad5939911df7be9339d071d88dffcec8e2c99b","sha512":"c8dc02ced43d398e34525d443e80f6fbaca8a489ab59659adfd4da74cef88a55e1258b765e411cf0c1b76febf6c4d98223a214c9dd4bfcaa5f475c24336f5b4e","ssdeep":"","tlshash":"22f075c0e1b0ac1aeb0f44a301771cc2bc17033a41241f434b21f46a673809156fcc2f","first_seen":"2025-03-08T14:29:59.855013Z","last_seen":"2025-06-25T14:51:19.332694Z","times_seen":5,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/vc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 637\r\ncf-ray: 9555471cbf5d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-27d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 925931\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O4kqLi%2FUXrKKs2UenQJr8uM82SjKj0zmVyEp11UszsC2C4tnCq1c%2FaKA1iDKMfqWtXsoylhDy%2FwRHhNFrrODC%2FzcXuco1Qs1Lv8Qg0vEnBwvcrNvLOi1IHQgY23Czw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1334\u0026min_rtt=364\u0026rtt_var=715\u0026sent=626\u0026recv=378\u0026lost=0\u0026retrans=3\u0026sent_bytes=237333\u0026recv_bytes=16024\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2220\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b5a85e4c57aec831e72d16b20038c802","sha1":"57692917c8742b031a8c1f23e328bcb29839c864","sha256":"eccc8a4618f9d878c66996954443e839c9b86328979d695cb04ef7df06bc1a67","sha512":"6f941246397525f574b283c60ae60341af045f983e8471fa9d599b00d64ae347f491e66bad225a4f736874ed4c79266177e8c420e52c7bc97f39792ed064a53a","ssdeep":"","tlshash":"6bf02381db88ec2ede8d29635121cf8d66614349d8357086199b597099aa28cd2e4741","first_seen":"2025-03-08T14:30:00.044202Z","last_seen":"2026-05-24T00:49:22.806578Z","times_seen":115,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/bundle_en_US.js?rand=1750330687","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/bundle_en_US.js?rand=1750330687 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 276743\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6852b46d-43907\"\r\nlast-modified: Wed, 18 Jun 2025 12:43:25 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-25T10:59:18+00:00\r\nx-node: m9p-up-gc71\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1174756,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"12219311f8ef3b4e3bf37d652cb2ae12","sha1":"24216176c9c19f84c9513515bd446287ac47425f","sha256":"e19317bb96baa4e5e41cfeb75dd2a3cf85df2314b1d2d37234da7f3bc89b7098","sha512":"8f380922d373fcf86bf121f8c27c812a33018305e7b8bc888e16dd964dc729bdfb6d4f1510dde6c7360502eebce8a30f58742ea05b5cfaa21b6c292ac4671a4c","ssdeep":"24576:rP26BXnmNz/jniRNEh6k4a1i14CFssvdOXgCwVCecLJurkufNFg0J54:rO6sz/jiRNEh6kH1i14CFs8snUCecLJz","tlshash":"bb454bc9b1d4f46503d355e6603b2009f23a285d7809b064f7bccddbea665ae2263f39","first_seen":"2025-06-19T14:21:53.810466Z","last_seen":"2025-06-30T14:38:02.24441Z","times_seen":149,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/dm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 783\r\ncf-ray: 9555471929eb5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-30f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J0ZmohHbgsehzbLLe6GTvIg4OTiLqkyNZM51OYRVfJZB1tlEvngPyaqsB9wonz8r7L1uiy714G0gVfl%2FRBlBxvoeRF1T4TH5m08A0GUJc29TPLFE4NjstLyiT5hSgw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1436\u0026min_rtt=431\u0026rtt_var=1746\u0026sent=200\u0026recv=141\u0026lost=0\u0026retrans=3\u0026sent_bytes=74451\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1647\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"abddc86d0f1ebadf14a928e083e6a635","sha1":"3521f3d3b1fc5cd924aa29f654c73b7f2b8c6526","sha256":"95f36e04b3e6278e53e502006819a889b8a23e02a0cff863cc302f908f929d08","sha512":"3c8049098c1e5a7fb8d7763308bb666e229092d8d062858b300e4fd59a3307a48bc04821a87193fef8ff4605534a38cbe7ca34a8798352c97674c03a87752ba3","ssdeep":"","tlshash":"3501c528eb94dbd2d8b60ab4826fa86d7e74050e023c239abff2293801072482489053","first_seen":"2025-03-08T14:29:59.93855Z","last_seen":"2026-05-24T00:49:23.030781Z","times_seen":115,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 592\r\ncf-ray: 9555471bddf95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-250\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d5d4mxXUvBeFg%2BkEBmxZK6t44lmpcfvMJfmherYeFP2QyEOOzz6aZrLP%2Fo2JxtgnPI%2FOyR2kSDlEl%2BZT3jwknYDsEmPBWSt8hf8MDnNDE%2Fyab0rceFyLw63YBa6bLA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1365\u0026min_rtt=364\u0026rtt_var=486\u0026sent=414\u0026recv=278\u0026lost=0\u0026retrans=3\u0026sent_bytes=156342\u0026recv_bytes=11312\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2073\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"36a8d400fceb32aa499a780653c56210","sha1":"98fe28a09c2faf5eed8c839510d98a74064e37f2","sha256":"cb856f54a3c495fa7060c7b5d13c62e714d0f5be505e0567eb181a3103ba06b0","sha512":"3790c89a02cbdcc9db662e1efdda5fe36f8572a4dbdebed0331e2e06e8bcd3c0642f82453fe9071d465cd13b4ba6bb4b244e58c49f3ac139ba00f0d69530edfa","ssdeep":"","tlshash":"95f041ca3e62cce9ca7e112a2c52a080f608361b2a5366230529aed04e21908035de93","first_seen":"2025-03-08T14:30:00.024937Z","last_seen":"2026-08-02T10:38:22.385877Z","times_seen":125,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 583\r\ncf-ray: 9555471bee095690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-247\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 925931\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wsV%2Bk6JBpm0Gvzk7fNP4rD8FAxenAAGe8xFtpQQNTVvitg%2FFDunXiMBJFBEOWv6yiHGR2ORXUNISv5Se9yn5cDB4Mh1r27XtDbWdm9BZCzBvCXvlOazZ%2BnPv9wbY6Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1971\u0026min_rtt=364\u0026rtt_var=1711\u0026sent=447\u0026recv=290\u0026lost=0\u0026retrans=3\u0026sent_bytes=169296\u0026recv_bytes=11768\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2092\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d483804cf775c595a39b53340748cfad","sha1":"635140c41b49633acb7b7515bf12cc2c6912f02a","sha256":"594ad29e0d04b19ca73b2455a822e63c5da10cf413d443ee395e537f303d677b","sha512":"5ddfa4e58373b2723275a2bfeb99dfbf36c2f06d1a22783089b7c8f9645048a63fbf297007cdd8c36b99a42702c1439036925f2e9783c3bbd6a3e6f1dce25f29","ssdeep":"","tlshash":"5af0418deda7cc9fcd080aa191d91adf8278c616450ed2187e2083b2bce00a904d0702","first_seen":"2025-03-08T14:30:00.056443Z","last_seen":"2026-05-24T00:49:23.108204Z","times_seen":114,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/nr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 558\r\ncf-ray: 9555471c3e865690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-22e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 925931\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SiLDlI0W4xkPaTLy0KWrCRpRHq%2BtmkUd0sK280FvIUKgs0BB9iA0JU48WMeq%2BpQRJP2QMofNMHctx1tqLigr9pWOuQHLESTeQeDNkiStzk%2FflSBMUXWvzbTj6uL21A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1443\u0026min_rtt=364\u0026rtt_var=729\u0026sent=509\u0026recv=325\u0026lost=0\u0026retrans=3\u0026sent_bytes=191089\u0026recv_bytes=13744\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2134\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"45122de0bc8cfba6ad87fcea72c7c287","sha1":"c1b04f344e9412fd1d39137ce7885eab69609cbd","sha256":"e1ed8d0b5abe7c4dc36f18bb73b90452a594ae21a22d0012724ecd2cf0620c4c","sha512":"b33f03abba0e94a3c21b9f978521a9c2665fd24c75acf0af2df044c11488c61daa27ccb35bdd90930ab0200d4821042154af2b648d0f7f9c23abc3aa585f35f9","ssdeep":"","tlshash":"5df096e0c9216d40daacd16729350d46b8135f29b141cdc7f480dbdb8c60201737f242","first_seen":"2025-03-08T14:29:59.83931Z","last_seen":"2026-05-24T00:49:22.634026Z","times_seen":114,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 737\r\ncf-ray: 9555471c4eae5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 687071\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N%2Bf17PdgOuGAQsvRFmIEvlBmcMON9vKGKUq6nVWhuRka7T%2FItfpi1CX0XSXhNLuClna49TdZV2zOvl4qTUp4%2Fqw6CaaEAu6IQSK9PI1K%2BKATmcqqPuJhzr6m8zpKkQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1369\u0026min_rtt=364\u0026rtt_var=373\u0026sent=546\u0026recv=337\u0026lost=0\u0026retrans=3\u0026sent_bytes=207604\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2148\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"9243f0012054254843fe8810607b8a84","sha1":"a65151b7857a69e26401105ba7357619be443a96","sha256":"0cc096148dec145219b037f28eec10ef4388310dca28c185694a7ce34299af05","sha512":"360086bdb11716f59cbef8827304c7a0365eccbfb07f3f547250fc047d1e7b4ecff9f9fb53f19d887bd66bdf906d4f744dfd3a230d9e1ec697cf282eed71c665","ssdeep":"","tlshash":"b101650f5183b8aeaedd4b39f00b5246fa561a85b306e86d1b87663701f0c183a58e45","first_seen":"2025-03-08T14:29:59.919311Z","last_seen":"2026-05-24T00:49:22.722204Z","times_seen":112,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/BeheadedNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/BeheadedNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55731\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-d9b3\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"91712e4e821c5438156227eaa64ed773","sha1":"b135b73c390951365de1c56dfd70eb46ad6ed2c0","sha256":"bb33897f047c21e80474f8addead1c44b99ebb5025adafb95fe06261e3d91c2f","sha512":"a6348708479abfa304bc85008f7eec58070467eb056784a72c87cbc5a40246010b21dfe16e91de60aa785536a6bc2a49b9e295372c58372442a646e12495da22","ssdeep":"1536:Ft6R9d+NAg5BSAOsKT8LEgiUrxl+iWmy00:Ft6RmAgZOsKTIEqrxl+R","tlshash":"da43021830cc4194f67d66b7dd28feaa00ed54dc27d8bba3058d4e114aa1fd59ef8e82","first_seen":"2025-03-08T14:29:59.992218Z","last_seen":"2026-08-10T16:41:59.263815Z","times_seen":221,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/hr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 658\r\ncf-ray: 95554717e8345690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-292\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152714\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8qX8rkmVXmkejL7Rp%2FJESh6%2BjWqbD53nZOZPHzhya2Q1D2ZAjNkL3vzFNePSuoDheut9zCvjrLrLcEyEiEiKhRY57XlAM7wcB9dOVfScU66dbKsuRvZB2sI%2F2M7kDg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1819\u0026min_rtt=431\u0026rtt_var=2516\u0026sent=187\u0026recv=114\u0026lost=0\u0026retrans=2\u0026sent_bytes=70706\u0026recv_bytes=5384\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1441\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9abfe38cccfd68e4bfbd495f78eca15","sha1":"854e9cb26f467b3922dc030d6f749744b337c618","sha256":"18695760a173dd7bce391c7bf2a82c838c2a9dc509df82c1952a0cfdeaa95028","sha512":"314bfd66beb1651cff72e7bf9f68b236b520f02570a761d3682925a8bb115b1245ba5521e36c5bd18c763db6c0f323ee8a21f5de68e21e689dec8e266c0885f1","ssdeep":"","tlshash":"3b01839cb269ecbaa436161248fa2301cc427c843909873092c9ba16ec03b0bf188a84","first_seen":"2025-03-08T14:29:59.779945Z","last_seen":"2026-08-02T10:38:22.382937Z","times_seen":135,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/je.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/je.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 840\r\ncf-ray: 9555471bbda95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-348\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1613041\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qui6w2UTGfP6ZZCg7eov1wFCPfku1E1u0fURrYGF9EBSsIhdIz0PnUjosEhAiJFvvv9clDLIVS%2BBXot%2BLqY1XtA0PRfMpiTW%2Fa8JqEo7dk1Sy9j1yypI%2Fs9mTJ7YIQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1729\u0026min_rtt=364\u0026rtt_var=790\u0026sent=387\u0026recv=266\u0026lost=0\u0026retrans=3\u0026sent_bytes=145217\u0026recv_bytes=10780\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2061\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bc3d57ff1fbdffc0d1046583c1387f54","sha1":"8bfb782b4c6ea5fea78eb02df988185aa6520652","sha256":"a619a95e7cf8b2e1c7b9e715428269bf1c656057c3a6ea34f94f0865612bfa34","sha512":"bfd7dc10d322c1fcd52a53e243528d9dfe07ed27f49a13b686605724e4ad893ef011948e23962f68adf92d767a010aefdb28aef6da6f0b3d76261299de3cf5c1","ssdeep":"","tlshash":"1301865af2cac93c8ddcc050a1e5e0c7d098e3ca86059d935db8de71951c3cf364e069","first_seen":"2025-03-08T14:29:59.892365Z","last_seen":"2026-05-24T00:49:22.831074Z","times_seen":113,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1444\r\ncf-ray: 9555471cbf5a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-5a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z%2BMJQxbldtv7vrVERf1XLbA3e2Jh9iCJboweHMP5mXYC7KJyg7qa54lRDqO4cPNwShvO9qdui1R34gBhqEVrKkcV3s2XJCvcUjBISVEmTxmELTLY23GmuhsSIoRsAw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1455\u0026min_rtt=364\u0026rtt_var=707\u0026sent=616\u0026recv=377\u0026lost=0\u0026retrans=3\u0026sent_bytes=233206\u0026recv_bytes=16024\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2218\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"5ee3c24356c6b4dda0c6b33536acee87","sha1":"2a7dd038c9a10e34b48b27c7e6d21c5937cbeb33","sha256":"3d092ed1e5cfef82b24e74b7bc67c7a1c4cdcbe20d2ccf8b60f3c3742c49a21f","sha512":"6bd3615d2933e11c9d6228caf8bf54fdead99a90ec4775179e480b5fc06f9acfe1fd4661c7ecfd0dd27e7b335ddf40386721c417aa10165eaeb7f9387752ded1","ssdeep":"","tlshash":"5c3119b4dd94fc20d3bac23b6d7794367d663b7e198394500e7bbc1a36ac9581105139","first_seen":"2025-03-08T14:29:59.778534Z","last_seen":"2026-05-24T00:49:23.414182Z","times_seen":114,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 590\r\ncf-ray: 9555471d08025690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-24e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X3mjoFmAledqzQU2f%2BZUsXVjhua8AzHyr9omC7UxvV64aYRduP%2BMJNw2AesKNG0iAwxkfFifawb2VtGFCzz6ChBbns5tTUxHu2hHXFA3aPHs2WX0I8Zrl6Ki5gL1ng%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1411\u0026min_rtt=364\u0026rtt_var=594\u0026sent=721\u0026recv=427\u0026lost=0\u0026retrans=3\u0026sent_bytes=273649\u0026recv_bytes=18228\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2267\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1a115fde9950b1ded2bdfd5b5a800e3f","sha1":"f4cf814fb37b8803ef636d003415ba3269c44fb0","sha256":"a852a6a3f3d1d57cb13efa11a6a4ad2cffa3983fca1328afc5c549e107727b31","sha512":"971b1fe429065cd2becb796031d362a16c10442d2b49318e7ff1fdf1fa4b8077149eaf8837f0f5a42109ca29b7b88948a7f0e7433c9d81bfedaffe31bffe4c35","ssdeep":"","tlshash":"29f0b7b1236034354e558f9442134270bc4443e59dc8cd48ce8f29db8f217cecac4bc0","first_seen":"2025-03-08T14:30:00.041023Z","last_seen":"2026-05-24T00:49:23.576411Z","times_seen":116,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 843\r\ncf-ray: 9555471d28495690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-34b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yZ5rADuEnxcoATkEiFjr2om5dAPjFSh5H90QDdPtEk2yEAP5wm2AwhME1x9MuuHnHT%2FOpFCddHw9tMtMVox5AL6UH%2BJMXiWcxlEo6xd8ucfu2q%2BDEncbFkRhHwKnUQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1453\u0026min_rtt=364\u0026rtt_var=707\u0026sent=746\u0026recv=438\u0026lost=0\u0026retrans=3\u0026sent_bytes=283432\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2290\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"04387b1524ec9a1625504ef3d2f5fd2d","sha1":"9fbd36e33af28636c723ffa65f206199ff1fae10","sha256":"6c1238310e730334b9da458932bd2cd1a03db9050e7b0bbcb989344a757d7d9a","sha512":"3a790a499dd2787bb9362b41e39a2f6b481ea4c1210f5f571876bbc14b14e3e8250882bf85ebfe84a4dd59543c80ffa6d6aefcaf8c576c1582579393a74c8c4f","ssdeep":"","tlshash":"5d01d6ed4fe4ef40a782c2cf234080b0ce69148f8ae4900a73f8c5301e1d180a74e879","first_seen":"2025-03-08T14:30:00.053343Z","last_seen":"2026-05-24T00:49:23.451134Z","times_seen":114,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/css/5498cec/chatcontainer.widget.css","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:45.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /css/5498cec/chatcontainer.widget.css HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:45 GMT\r\ncontent-type: text/css\r\ncontent-length: 13880\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"6852b46c-3638\"\r\nexpires: Sun, 29 Jun 2025 10:59:46 GMT\r\nlast-modified: Wed, 18 Jun 2025 12:43:24 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-19T10:59:46+00:00\r\nx-node: m9p-up-gc54\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2990d6201142f8a2e7670983b94bccdc","sha1":"eced6a327484d154043e1d6afbdcbd9eace734a9","sha256":"159cf33d130babb77e9cd1665186857aba5a4ade067368e5717cc447b88992ff","sha512":"649909ea60703ab071ad18e50ac0e740cbc9f6d09ad825e7c88f2af3d9270ade9ab23a78f9ddc68207ed06ec1dee5e36766408e7efe922ff5a4a326f608cc938","ssdeep":"768:gO31jPJycWLSTFjp9HtXY/HL3K1DsFqTE+t8A5IvQjGUmiH0dFX:gO31jP4STFV9Ht35LW46f","tlshash":"a2639463b6c0652df06bc535ede2bbbc743d9012ab231faae644b774c7861d71722608","first_seen":"2025-06-19T14:21:53.765401Z","last_seen":"2025-06-30T14:38:02.195724Z","times_seen":79,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/games?lang=en\u0026pr=kometa\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=48","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=kometa\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=48 HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80658305b722745477c71c40ead3a72d","sha1":"6261b0a05893658a0e274e9a265de5c83ade7d5d","sha256":"f4430a00bdd27212cd3b4bbe2b80aa7f3ac129f76af602098daa201434540706","sha512":"4c01920bc976a20be131ba46daa536be47a601420ebf48dcd6e1f9979bae8c424ea465a25a8b9efbdcc243888ea2cbadd17e193b49b7ba3872de353db1d3a5b3","ssdeep":"48:YVM/LAlvEE/gQT4pTkiM/84CTUY8Roc6pftCXEDTNouw7f8VVBxA23/f:NGafME4yt8RocAfmEXN27fmBzX","tlshash":"e012296b4b282cbe8b0b14f41fb33e4a919e0186d7d5ff640589ce9c85edaf2541b436","first_seen":"2025-06-22T12:57:20.944037Z","last_seen":"2025-09-08T02:19:05.833081Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/visa.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/visa.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-4d5\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb44a62c392a656466cc4292c9b01c85","sha1":"da5416404e086527d249121a0e02b121b6282d23","sha256":"f596ff685b00268e18c8a108f8775fbb10d4cc568fa8fbbd162e944df9300ac9","sha512":"75f411e468604379c0959ff8108d22ac3cb94597e6a82cead9e87396d53e8318e036156502513522451ea464b3d3b6bb51c0060e87d2c4c72455ee414577dd4c","ssdeep":"","tlshash":"e521e0c9b5b846bc889d479ae72a714428eb60bd78118e44f34cdcf09a72a9da448450","first_seen":"2025-06-22T12:57:21.080048Z","last_seen":"2026-08-10T16:41:59.299985Z","times_seen":227,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/co.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/co.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\ncf-ray: 955547154ce55690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-239\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 144081\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DfcGqs3%2F0dPCObp4qrFgbGQySHQUbqg%2Bdo0qqMzUHFiCQwTuiWJeZyDeTr04QjZwQUREutssdwvdJr7UsCIkMAE7hcv9tu%2FkVqEXX6K6o%2BX88P5KemHG5XZZygIe1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1414\u0026min_rtt=431\u0026rtt_var=978\u0026sent=164\u0026recv=91\u0026lost=0\u0026retrans=2\u0026sent_bytes=62167\u0026recv_bytes=4852\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1037\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f5202998c4fb9fe4ab7663789c973f1a","sha1":"ac151cc898c0446fa68b337d7df6fd7ee262a451","sha256":"165c7e4d5e8fd56cd2952a464a03f6f12cfc6df6bee980ba989ebacd6af3343b","sha512":"6c7e47c195c6f6124628a9a169338fa87a055c11250e4f48df275a9a1ef03a8977c20b85ce85309bca9df719db625a2cf15ea40f91eb5e77c931050c7e6aebf8","ssdeep":"","tlshash":"e3f026ceca060c3aac35250f15df4550cdf4485ebc277107a5709935092e77980fdf14","first_seen":"2025-03-08T14:29:59.937626Z","last_seen":"2026-05-24T00:49:22.606541Z","times_seen":128,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/si.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/si.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 720\r\ncf-ray: 9555471cdf8f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2d0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388601\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o28wJoVn0%2BUN%2BrcJfeuFhqQKAHL%2BxEXHDtoyzNy4eub0aP3AFdVQDbKEpdCjPStjzrzV%2FiNpagvCBLy4dRZbfdhDvNloTxQRWTOGgjmDuuLhCmZMNtPEyfAaeXXphA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1218\u0026min_rtt=364\u0026rtt_var=566\u0026sent=642\u0026recv=397\u0026lost=0\u0026retrans=3\u0026sent_bytes=242617\u0026recv_bytes=17088\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2233\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"08c23d129a6454bf4d76e72106c64329","sha1":"a44b446da81798f77e633e93b2916ef34c71f047","sha256":"8e70380b4005560a22b12c01028d488a2d5affa53e337101b3650d40b6f5321c","sha512":"644725791c22f43eb33c0433f6cfe945c54c7213a97d4ff815356efeebc27f4a18b6bfd1572c6ae8f966b5de887b40006980f0d7ec1026aff9fb951470581bfc","ssdeep":"","tlshash":"3e01657512ec455488c75565de1fe935583152ee5da4014873c255e90eb5c32454b318","first_seen":"2025-03-08T14:29:59.763656Z","last_seen":"2026-08-02T10:38:22.371364Z","times_seen":130,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/Mental2NL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/Mental2NL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67237\r\nLast-Modified: Wed, 30 Apr 2025 08:32:16 GMT\r\nConnection: keep-alive\r\nETag: \"6811e010-106a5\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"762242204a118df42bcffde9820c8a48","sha1":"8981d77e5db018497ed7d2431068a70f3cb8fcc7","sha256":"c9f5a1eb2423459514fcbc5983f328fbef538477f8478e6fd23d296c58f35508","sha512":"0763845245a7f71b737a8a9f7882ce739e1179b7721ec201bcd656fafdd7aa077c696f9e62bcd69f9f798ae0d33c7cca96e47214ce532c87b2f5b8dc6ff0bd6d","ssdeep":"1536:x5joJmyI2rDfKn8U1rqmHyEVUrwYEym9+ciJFFP7AIyN4zIL:x5j7iD6vS66CH9diJFdq4zw","tlshash":"4163f1400012529fed47d7ba7ebef875adcb11b876d785c9c6b05f6a32867e00a1c7a0","first_seen":"2025-06-22T12:57:21.110581Z","last_seen":"2026-06-12T00:18:49.553299Z","times_seen":13,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/notification.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:34.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6852b46d-16b0\"\r\nexpires: Thu, 24 Jul 2025 10:22:09 GMT\r\nlast-modified: Wed, 18 Jun 2025 12:43:25 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-24T10:22:09+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-10T20:59:18.897497Z","times_seen":16739,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-25T14:50:25.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:25 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25952,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22907)","md5":"cb015c20fd431512b152c68a43b08cc1","sha1":"baa70369f5d24e36726efce16ca18ff5454bbe3c","sha256":"43904a637369b1a93f769a78ebcd939cc9a557ec762ea60b0f191afb6896a199","sha512":"fdc70484d47f42adf566a58a21ef4494b451138b930a6fd679f264da3956fb613143fb9f26c7413abfa75ee66cf0fb28e030a52263ac7d1ba695195ab1e91712","ssdeep":"768:tdXEn6nT3mEOYVGky55CK/sGN+k8a6a8iLOj7jiiMrLZBZbs:gn6nT3mEOYVGky55CK/sGN+k8a6aFLO1","tlshash":"42c25007fda253aa2213e49b0840df67af737d32c53d015597132696767f48ef2aa3a0","first_seen":"2025-06-22T12:57:20.930636Z","last_seen":"2025-06-25T14:51:19.349658Z","times_seen":3,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":150,"dns":6,"connect":67,"send":0,"wait":66,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/everyday-bonus-20000.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/everyday-bonus-20000.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 111546\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-1b3ba\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x603, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46cb800364d8548d47ac8220bf3e91b0","sha1":"e1a2ae3234a57bdcfe7ccf4f595520c6af96584a","sha256":"f2e17060d4cd28c2a20857e8a1c4dc2b3a29c2ed320ccc75fb7f3645aeb9a92c","sha512":"3df45a08f47006462cf39944d4ab74dbdce969eb83c41a46655d371c2c4697253cddb451491f5e826b13b3e5e83cd9207fd8482f5d92ff26c06f1c15924a9733","ssdeep":"3072:qGR5eT8BSk5huZZdEy4t5N//XVyKfUUGVU7uD6IiU:bxS2huZZdE5NXUBUdKD6IR","tlshash":"19b312160fd68e52b253966dc1a0c994837fbb5cdbcbf4291bffc40661a91a2b409237","first_seen":"2025-06-22T12:57:20.988857Z","last_seen":"2026-08-10T16:41:59.371297Z","times_seen":85,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":86,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/tournaments/kometa?lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/tournaments/kometa?lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5752,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2dd8488685466691fad959bf1bd4b227","sha1":"e2030d19c0de28e1d70d9c60cc613f8ed7db3e3e","sha256":"5a7e2b1ad5012f4b118097535290646021084fdba69ccdd4cc6ad811c8d94802","sha512":"84f19cd6274fa7410c70486af947d18377abbb1e8c2478d37a2e151e8ad47dac873a321d47611ff09f162502518f9cfdbcecfbc71bfe48ace2c75bfc2039ab81","ssdeep":"96:Ro+6CqJQjmb1krU6W7TR/y2E2WnitmQ+6qJE3pTWk2S+tuXTLOxVqtMe64Jbj2tf:+rLJWWOitZ4EZTiMtM6bjEwPFvm","tlshash":"06c162b843a422bdf69bea753f5ba6f41768700ac2d0d89d91bdcc0c258447e4ab16f4","first_seen":"2025-06-25T14:51:19.351157Z","last_seen":"2025-06-25T14:51:19.351157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 720\r\ncf-ray: 9555471919cd5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2d0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 718863\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g0aGBbjlmesSomLZ5nj9FL3I4rKQbkbVkZeLSMDUUUWwYf%2BjyR3skVd%2BajPyJYVgnulx9Q3owA%2FBZcdENV0txtUYYEeSaZr1V9UzpQjbB1qNdokB%2B2jx5zZA%2BlHujw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=603\u0026min_rtt=364\u0026rtt_var=199\u0026sent=230\u0026recv=164\u0026lost=0\u0026retrans=3\u0026sent_bytes=87229\u0026recv_bytes=6904\u0026delivery_rate=12066666\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1656\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e9d2d590a39ddafa972e1cc277641626","sha1":"25d86086b4cb3b94e514d05f0fc5038f570bf623","sha256":"4071c53a37f21708291ff5430b6bf08d95c0137d74ee47f86d506a991bbf7ec1","sha512":"ac4834b4a420909a6527c89e113f6dfa3270473f733e9dddc4b241e27c7690f474cdb6b44aca8444cfd8cf7d014ecb01a30a12c0ac817761579ddfce73806bc9","ssdeep":"","tlshash":"be0199f78a0ca8104d6311e4ee376488c4d0456fd301c6878ccf603ee22362ad6fd5a5","first_seen":"2025-03-08T14:29:59.79104Z","last_seen":"2026-05-24T00:49:23.221085Z","times_seen":112,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\ncf-ray: 9555471bddfa5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-284\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388603\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=weoVzXwySiXa2Q4Q0YEzLW%2B3CcqOynJTqa50KsJRxsmeqC%2BnZZ9RpOU2RqAkq5KjV49lmztT7y9uWq%2BQs%2BYm%2Fw4PFQVIJCaNa10SuzOAk75bvi5VVKZ%2BESHfVRbQ6w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1190\u0026min_rtt=364\u0026rtt_var=440\u0026sent=425\u0026recv=281\u0026lost=0\u0026retrans=3\u0026sent_bytes=160927\u0026recv_bytes=11388\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2075\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"59929b247207aabeb4a40f54bf8b4f67","sha1":"c6cd1cdc8f6c37290b1148a48ce15934039c994c","sha256":"5cb871f0471e07010900f1629ce7894ce6fc44c7122831b2186f07ac26e06ec4","sha512":"a2637bc3bfda9535d3a049829e5c24233915f0b4f62ed5184b3b11efa37ac1daf4f815a728ad07248d72fcf7a00a5b5474ace71c1785487fb326a7198d981887","ssdeep":"","tlshash":"9cf0622635c50c2ee4bd890c4a0f18b68c844bec9e226b1287b5cf3feb4f24741cad42","first_seen":"2025-03-08T14:29:59.785467Z","last_seen":"2026-06-04T12:58:41.781494Z","times_seen":128,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/py.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/py.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\ncf-ray: 9555471c8f0b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-268\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 130838\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8JtI1MR6SHswlbvtbx6NBYpDJ9jVtmgt0o2gZGSPGJagmUz92ENwlYTbBq4yUL0h2TITO45Y5XNx3P9YfukVlo0%2FZF28DVxiqf404mA2don6uWfyNaRKCcggrZoJSA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2129\u0026min_rtt=364\u0026rtt_var=1534\u0026sent=562\u0026recv=354\u0026lost=0\u0026retrans=3\u0026sent_bytes=212407\u0026recv_bytes=14808\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2194\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d30b7e284fd92d4d8c43399ec87f7125","sha1":"8ca5497e08d537b6b13af52e5d7a86cdb98d0854","sha256":"0df6d356ff7046a472956ba55eb970a16bfecaa25e0c090c719b6d3152548e1f","sha512":"f14a43ef32ea9bd9da22a4d31cec4f6bb46fce28c906459312338c039e93db4c52624872a536c9b3240da921285c757fcdd744972dedec6063d45a75f1ed9206","ssdeep":"","tlshash":"3df047e7cf08bc50c2dc9bf54d4a04d9773315c6a8970112b36207784d12ea5e4f475a","first_seen":"2025-03-08T14:30:00.050628Z","last_seen":"2026-05-24T00:49:22.864497Z","times_seen":117,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/reg_desktop_3-1.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/reg_desktop_3-1.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2083302\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-1fc9e6\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2083302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74c998ae00d2ba60ff5756d95c553227","sha1":"50cabfb3c9c681bb6858a9c435fc8051bfbb2b8b","sha256":"115f1b80db3456feda336ff08a652f94298862a5b782db35324e09d77874c6fe","sha512":"cf208d117ddf1422cdeb4834c9b7aa190049674eaee7d981d65dce8265b70c636c15ef425e8b861a88c60c45ca04a8f9f0bb192467fc4d911f1a146c9d9dffe5","ssdeep":"49152:GSh8tRtgzqV3j62Axf1ze7yUHGR/0qi356G1wl:Gs8tngzqV3G24f1bUHg/Di35L1wl","tlshash":"19a5338eca2dc777c2649339435e1a6567ab8f3903711646c366c8be7d3f1a4778302a","first_seen":"2025-06-22T12:57:21.165903Z","last_seen":"2025-07-03T14:12:38.619574Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4661,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":67,"receive":4447,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/aq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/aq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 577\r\ncf-ray: 9555470f8d505690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-241\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985622\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vK1lSmZ3QEFB5Wk53hJbfzxyyiyW6JgoKS2Yjlrd4KJb%2Fq76W9xwJae9bK3Y010ScJzEV3SM%2BOHi%2BytTowyqSLScTM4HUsCnd3r%2FTrerFnFoc0nAvj8go8g60E3X3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=23\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=9402\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=107\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6fcdf7a9fa2f96f0f3a7ee6841b85526","sha1":"62a8ad9df506c5e48e02c72f1cf12a64c06fc0d8","sha256":"cebc8d7ea7b85c73dcdcbeb7c6e7f3355db9f4bdee4a9d8e4e769039145e5e22","sha512":"7836dab7fbc722d54a024aebeb597a4e22edceb58d5fa4dc18f248014642d8791957a988eb4a67842ee009e6f8c79bad3423bcf6c3c7b465f8497353d33e7d26","ssdeep":"","tlshash":"22f041b09258b878b39f4bd90923584af4a60de1720bb82790d75f78162db9282a0127","first_seen":"2025-03-08T14:29:59.891181Z","last_seen":"2026-05-24T00:49:22.653424Z","times_seen":110,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 624\r\ncf-ray: 9555471bbdaf5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-270\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 128596\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UdKXvbUSU29N8hncCZ4UZ2p%2Bjb46tQ5ZNoz7syIMP52t5Ja5yz4EO8aEtoGwwNe0RoN16yVwq4rhB9whZ4pkss2ybRrgO1AnNCuFqZWBIsE55w%2F3YLpxq5WeXTU21w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1985\u0026min_rtt=364\u0026rtt_var=1024\u0026sent=381\u0026recv=262\u0026lost=0\u0026retrans=3\u0026sent_bytes=142825\u0026recv_bytes=10628\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2057\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2c734f9ca649e3ded421dc37ec595399","sha1":"14b2ca66a1e2f2b5afd2c29b2289a847fe364070","sha256":"842a7ea3b5527a4a5d342e7e0f894b4adc03d7b4b3bbfb47dce159bceeb99650","sha512":"91c60b3a059e3f7ed9addf6530156caba657add7f5e60d26295a50e371505704110fecb9abe326d94372526d0724fea7e97966d13be7ecae2e19da321877fec0","ssdeep":"","tlshash":"35f062987c102cb9bda45d2a807f50289c783674a59273072b55fe3a71c3a0143bcbc2","first_seen":"2025-03-08T14:29:59.798512Z","last_seen":"2026-05-24T00:49:22.6789Z","times_seen":120,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ni.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ni.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 638\r\ncf-ray: 9555471c3e985690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-27e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152715\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ociK%2FpQqVeZ1oH0MeDc9p1y4h%2BN0yUWi%2Bfvfgvsa0wobkej1Vwn0IM66WbmS9DFfgWOHmUJ5XzVThWGKRojEIEVRlrhWzhdQjbWodZd4TEF9%2Fsc2HrnbK%2FUkwhlJ0w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1311\u0026min_rtt=364\u0026rtt_var=523\u0026sent=531\u0026recv=333\u0026lost=0\u0026retrans=3\u0026sent_bytes=201233\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2143\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7e376b397165e4b3f7d9ceb3db57fe4b","sha1":"5213ae591354f8635e591d74b33627b6d2995b52","sha256":"846eae803240d5b1ff47872a6b297d48279c4a8ec9ee8edc8d8fc9b4b0793263","sha512":"32a62ad8a0937ebb02c72f9d50169c88c7b39fb5b4a0e680a08fd7d67baa86444ce3057387f4a5c1d56aa5be47478ee684885ca10e7828ad82f7aba11bf32fdd","ssdeep":"","tlshash":"fcf0b7ea73407e7818295b0287fac9b5d364b6a8874c984be01f6d06ae06564fc24847","first_seen":"2025-03-08T14:30:00.05006Z","last_seen":"2026-05-24T00:49:22.681441Z","times_seen":116,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/LifeandDeathHG.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/LifeandDeathHG.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55702\r\nLast-Modified: Thu, 01 May 2025 17:22:18 GMT\r\nConnection: keep-alive\r\nETag: \"6813adca-d996\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"208be124886faea2e3b0a90c12014c3f","sha1":"e1283584a0339c8679368277e9aa3e3d1bb5479b","sha256":"4cc0d0e477f55331cefc743f93ab4247158fd8c2f66fb6871ef4a7b748d9a859","sha512":"77f82f1de28c12cc2a5ce8c863065a06d6976cd6f48ef937564c81c41a02053f58543d668d0f674f8afbee7a9207587ef3898b47686a358bcb7e7efc745d7bf2","ssdeep":"1536:dAccKFG8FovpKhUeVhV8/wNL6v8yC6QYy2w:iccqovpaUe/V8/4L6vxL6","tlshash":"c743f126e0e51eeaf56ba5f52cf70454b4cdb0394a708b7f72e5e8cbd1e621ca930058","first_seen":"2025-06-22T12:57:21.22138Z","last_seen":"2026-06-12T00:18:49.501499Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/FighterPitHG.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/FighterPitHG.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 74110\r\nLast-Modified: Thu, 22 May 2025 05:44:17 GMT\r\nConnection: keep-alive\r\nETag: \"682eb9b1-1217e\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"f9580ab60f1885329cf18f28ab0f2470","sha1":"9ee882896aa78853030289aefb0f4222b307b47e","sha256":"b1964ea292ab1ff1e4017e208f0e04b7ee32e0ac70344262b513b8b2f5de05fa","sha512":"636b15138d914def1e3d494f8b2163493cc17a2557ce490d35c7220c8517b8ba04060be290c87f5e7d08944c9418163f2e057f1f6765f366f3c070831b4a9e39","ssdeep":"1536:0roddk2qxPd/AB71/NwRXvtSsjQzLBxkQF0NHTDjtHrCrqaqHmA8MpjuolqV:uUmbhmKRXvcsjSzpF0NzfUW518RolqV","tlshash":"487302e86871e3fde7fb12e1c645ce353facff1d9aa4502a13354ac6055e994e02407a","first_seen":"2025-06-22T12:57:21.08569Z","last_seen":"2026-06-12T00:18:49.511387Z","times_seen":11,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/games?lang=en\u0026pr=kometa\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=kometa\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48 HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kometaloft.com/\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":109,"dns":2,"connect":45,"send":0,"wait":56,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 706\r\ncf-ray: 955547111f665690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 5027\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wd8OlRAZ%2B5pyJVI1hZJJ2fMubuCBRdVJqkWUH1%2BxfjZj3BX5hzMJmelpYVt81XEZKa76OB1LXENdrOWGI3eDAGx0CZYz9Hq4lve%2FouECiW0z75JxRKxjyxh063KikA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1901\u0026min_rtt=431\u0026rtt_var=1457\u0026sent=141\u0026recv=73\u0026lost=0\u0026retrans=1\u0026sent_bytes=53691\u0026recv_bytes=4472\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=354\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2bae19358d79c6b07325f46878339ea0","sha1":"4c2d12c180f031a2ec37176414e6a61dc727171e","sha256":"5d77591fa0c409ea25c72d310d8e73ae0bfd7a13a6c6433078f767d90e548e65","sha512":"47ef241bdd60a1f9d2ebee4581f03a665180a28f36508881825f54a4f93d0cd163d0e4aa8ca1998fd3d02a61e68aaee388c02e80ac7d74725d08d659efc20ea9","ssdeep":"","tlshash":"b001d8e0364a9c85c6250708ac256edcff50c640c4b40f4dedda1df55761e49838dbb8","first_seen":"2025-03-08T14:29:59.783382Z","last_seen":"2026-05-24T00:49:23.290068Z","times_seen":114,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 827\r\ncf-ray: 9555471a6beb5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-33b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OnD7lq61AnNDzP5pekO5nB5snckIWtn5ziuUUk3S7F24g9Dk5DlfkuMv9BwQfAtYFgg%2F30Urb8La%2FLPPaIqzzUfVgTYRhhQyuKecbicbYPlwzZfX%2BNi8mpxN4cnEHw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=8113\u0026min_rtt=364\u0026rtt_var=11660\u0026sent=281\u0026recv=199\u0026lost=0\u0026retrans=3\u0026sent_bytes=107065\u0026recv_bytes=7664\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1847\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"46ac37d63773b1ae7f2551e2a8f2bd2f","sha1":"db531fc81a74de9fb17717faf13ae3600af228d0","sha256":"cc44968b6063a8b12373a551b545006d13e5958a651a793faf34403a781de266","sha512":"0e7f7515b5c5b5ca503179a8ca59c5d44d168397158dcf4152af35b2dfe137c093304fb44a517994d1b8b646f6c3763069bf73c1424a6fa4ba47546f0117f6d8","ssdeep":"","tlshash":"63015643d7c745a8ee0da0aeff124418d299b52279555dc654c52365423240258292c3","first_seen":"2025-03-08T14:30:00.052693Z","last_seen":"2026-05-24T00:49:22.878012Z","times_seen":113,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\ncf-ray: 9555471c0e425690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321089\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WjVxHn1fIQvWHxyHJz3zu8k2Kjx16PKVCk045cNWPwam3VuWoPXjOFX75zFFuV%2F0jwwd0BQxCDzrce0CsqPbzMehk24n8MLwhXEP3%2Bn9O7be5ZWfhDG%2BBG426dTaDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2254\u0026min_rtt=364\u0026rtt_var=1771\u0026sent=464\u0026recv=300\u0026lost=0\u0026retrans=3\u0026sent_bytes=175428\u0026recv_bytes=12300\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2109\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"473e8e286bae969fab488dd62c2367c1","sha1":"1bf6fca74cb21aa48294d0c0f6539eb1a6811b4a","sha256":"1f3a620a69dcaf1c4e8c5b99f6e031a6fb52b97bcf147857409a53874bb720a6","sha512":"cbf27be3ed629f20b72821d320c327c12c05082fbe2e0f89373fd7da95aa9d4e6b51e95e8c43984951af1e4fb3b4233a5c8374bd2dcd569479456ca18fe8afaa","ssdeep":"","tlshash":"560144f212db28f9810082a4448e2cb31d747b96fc64d8e36676401726880482c50d14","first_seen":"2025-03-08T14:30:00.061537Z","last_seen":"2026-05-24T00:49:23.616411Z","times_seen":114,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/fm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 565\r\ncf-ray: 9555471c0e485690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-235\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 70853\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=R3ahmMHGh67AmvGTGkzounLjnBdjtYC2wCWA2tVkdwFSamvQ2QHwPqIgFIdjrd3OVk1dk%2BR7KeVHUG3ghwODOMqIVP5zaHdGS3IPPPZ71cKE%2B1pE4vWTeMtmQiLZMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2254\u0026min_rtt=364\u0026rtt_var=1771\u0026sent=470\u0026recv=301\u0026lost=0\u0026retrans=3\u0026sent_bytes=178172\u0026recv_bytes=12376\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2110\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8cab05594bff00e7601d6947cb716a00","sha1":"25fad7854548d7d71d246c71892fff2d74a57b60","sha256":"391463318d4b12e06e5db83eea8661415899830ccb42da6fde3839af1c5582b1","sha512":"56fab9f66e3e7d90c4d3dee4459921bb3b24a83d218008831a0633c9ceee3b9b8f1f6f6ca5c0329ede6a35377cc048533095265079018d00613bdf0a7c64aef1","ssdeep":"","tlshash":"5cf0e14876245ca8f85418c41145478b1c0e6ef4bdde5436c48cbd1788b21459e7ea60","first_seen":"2025-03-08T14:29:59.86882Z","last_seen":"2026-05-24T00:49:22.839312Z","times_seen":112,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/css/5498cec/widget.css","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:34.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /css/5498cec/widget.css HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 25834\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"6852b46c-64ea\"\r\nexpires: Sun, 29 Jun 2025 10:58:43 GMT\r\nlast-modified: Wed, 18 Jun 2025 12:43:24 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-19T10:58:43+00:00\r\nx-node: m9p-up-gc89\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6937e2be005e4775799daef26dbee168","sha1":"695a74a5aac85c1843520539aa859fc41eecf536","sha256":"fc0b14d708a863ee95e84c8581ce8661cc38330a53ad89dfbb7767cebab69082","sha512":"098498052f382e030968a9e837c5e10f5f6e3d569722e757038d8108c9ca67ef322ba0e516b5ca92ee2e4c140a33685733bdcf733eadad4ebda48ecd612bac7b","ssdeep":"1536:lv6Av6AL5bTKeyl6N6ErhbDuIya2HV2BSUpMyB6E6/+glP4aUO6kFsPQPifO5Olh:SlliF8O","tlshash":"a8d30a56ead1953ce91e941ac985aa3ca63dd102cf230dbff740f3e083cb6e61276509","first_seen":"2025-06-19T14:21:53.689756Z","last_seen":"2025-06-30T14:38:02.20351Z","times_seen":279,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/info/info.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/info/info.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-382\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8c7ecd8eb43f97bc2fa7fc5cfdb0537","sha1":"babebace137a602e58ae56a50d39c17d7ac3d91d","sha256":"27294ec839cc164e338e5d4c41f4895ace888b6997bc3a9ea6bd69f9cad3b003","sha512":"d85230d1fc820aece06a92c5517e8a05c9b9c6b0745ae9d5035b73ffbf1a22a160cfc5eed15c65fc97dce90f5dc3bcbad12d8e86cf3ba03dafc6a0c1b4fcf854","ssdeep":"","tlshash":"971180f473ec8982194f4b79ce2169406e3b0af9f7c123e4baf0a554ab180e4885085b","first_seen":"2025-06-22T12:57:21.236701Z","last_seen":"2026-08-10T16:41:59.372242Z","times_seen":144,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/io.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/io.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1006\r\ncf-ray: 955547101e2b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-3ee\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H%2F%2BpdEqYOlIhoVBfqftVwzGn24Da7dfQTqSGuktDfpny%2FGMLD%2Bwz2xFkFl4WSPBIqi5bnx8yoKEYF4WTntdKc8LgObfLgO5SDzXbVswX8NAAUj6zbSjMVuFRQKPbtQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2639\u0026min_rtt=431\u0026rtt_var=2076\u0026sent=114\u0026recv=57\u0026lost=0\u0026retrans=1\u0026sent_bytes=43524\u0026recv_bytes=3788\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=213\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1a6a3ab6ef9ed0b396fb85a773f1dbb6","sha1":"f6dda36b5e4b53abb93001aeecdf26d02fb395fe","sha256":"e9e48ffdd58c80d2dfaf4b8cf5347f7133b3c85d22a292ffa77a458b74614530","sha512":"a426d7ba97d507c0a5603a9f2637824d13f11fca90a347870d4117b2171349f5ad19c072add34f06486dd982f1f8857161e2c70f8152d5d790e9eadaa01f9ab9","ssdeep":"","tlshash":"ad11c8ec1af45eb8c6cd88b6f06d599f666601e50f13049809c295d2f64633b5233a36","first_seen":"2025-03-08T14:30:00.063461Z","last_seen":"2025-06-25T14:51:19.365332Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\ncf-ray: 9555471919df5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137532\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F0pNoSNMGuPgSMxfOGFi3fn2UQB8sIDlkLhwPJLRNscS9MXCJPVY37jHkbS7ZKO2kMIuyajTXRH2Ox0t4euWO44QeOpcPGPCcRuDrL6teL5dXTtMEW4EpRMSuE7nLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=601\u0026min_rtt=364\u0026rtt_var=197\u0026sent=227\u0026recv=162\u0026lost=0\u0026retrans=3\u0026sent_bytes=86041\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1655\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"56aee2baecbf568c71ab7cf456b43a0b","sha1":"6f8489ec1c0cb4892abc11ebbf1f7497f3744780","sha256":"3d7aa0a519525209ff4d3f2c4372f69109d134dbf331065950aaf543753a8fcb","sha512":"edc90f90d0822aec5166a038cb853e87c1179f0ed1fdeaf02e7ec024009bf2aa334e3a9255d0db0066c48776dff956a63a4c5fcebfb1b5e3f4a4353b41a39803","ssdeep":"","tlshash":"5001236adb309ed28a1f45233fd32958ddbf5fc5981a1856ea0d8431b15105731d86ca","first_seen":"2025-03-08T14:30:00.043502Z","last_seen":"2026-08-02T10:38:22.384078Z","times_seen":151,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 648\r\ncf-ray: 9555471bde015690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-288\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m8geon%2B98SIc5EOeDLkWbpUPx4PLC9srn73dX4eFotQpYgcNLBDQ1oJZbwisp8AfR04viSksuJIuG%2F83a12deFOlPqlDsfq%2Bj86TEOeoeXkhtfptFpcLAJ8gj1KrYQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1209\u0026min_rtt=364\u0026rtt_var=434\u0026sent=431\u0026recv=283\u0026lost=0\u0026retrans=3\u0026sent_bytes=163171\u0026recv_bytes=11464\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2079\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"45910bf358d1e48e26f433e72ccc3111","sha1":"77f7ff7d8dff1c22e622e6e67d34763449bffefe","sha256":"a568851a71a4cd520091c2b735317bb34a477fecc94160236acc133a7c524d9d","sha512":"4b3f64997ff3e041808b0c4988a10be260acf0c5997f45db6aa8cbe445156ffcd25f7ce3559786e76ad4b6d7c8600c35fe0c0ed7021b79adca0a6826cd46f623","ssdeep":"","tlshash":"3af023b7e9854c60d68fa13f6b4fa804593ebb214605db03684fd88242ca85355a4624","first_seen":"2025-03-08T14:30:00.03248Z","last_seen":"2026-05-24T00:49:23.725216Z","times_seen":117,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/md.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/md.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\ncf-ray: 9555471c1e575690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-264\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1078916\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KhnhHuKiedBnn7w7mxm%2Bf9qlyOeWrnppu8s6G8eYBqEcvuylH1%2BB0lQOLWFQzgVH6cJKuRGszHyK1R8BXLIisZeoL7KTwI6EqK79PZn8X3A5%2BXsLGLRMKzkisphY3w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1917\u0026min_rtt=364\u0026rtt_var=1306\u0026sent=478\u0026recv=307\u0026lost=0\u0026retrans=3\u0026sent_bytes=180327\u0026recv_bytes=12680\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2116\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9defc5a8d4e4af4ac075319a4e5e6554","sha1":"f9643e68eb20b76d98bbd4b82818cb2665b58279","sha256":"8fb7c9addb7a0ed1ec1f47916e922b639e4c87c2e2677207b07d885fdbcbcdd8","sha512":"545d079b510ae2a70c890672391ef5df7b4ae1fdc76ddc100ab246cb90b554b86c045b7e47cb61794bcd4462c4fa44640aa96e5049711e22e6aa8c7f0341e291","ssdeep":"","tlshash":"4df0b7ff0261bc28c8e801630d3f54a287b1ac51a052940ff0b24dee4f8000f02dbe06","first_seen":"2025-03-08T14:29:59.886695Z","last_seen":"2026-05-24T00:49:23.581078Z","times_seen":114,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/drop-and-wins.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/drop-and-wins.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 41616\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-a290\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1320x311, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b04038bcc7fa4fd5cdbfef3a772da60","sha1":"dff2014361d4c43797dfbbb0603890490de971b4","sha256":"907ee0c3ba2cd95d7c67458218833a8d60e67822b1baccc46dca3544ae4ceafb","sha512":"6ddf360192f624aa313f1a2bb0f3e63ee46a9fbe0a071e7307ed59031d45884f10a8317c1acaeaaf031ac7994718a8869ad7c570b00d6c710614a04474fdba6c","ssdeep":"768:2FbaA+UzYCYFjhn97OHZ4laeYCMeFH9MLYCmf6iFpvWflGbRFO15yfTOq:2FP+7hhnZO5W55pIUOYFObyrX","tlshash":"5913f19d82d3a33c9b27fb81a9505302112294710578933adf2bfa93adfb10fd395d99","first_seen":"2025-06-22T12:57:21.096948Z","last_seen":"2026-08-10T16:41:59.304323Z","times_seen":68,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":398,"dns":0,"connect":0,"send":0,"wait":67,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ar.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ar.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 593\r\ncf-ray: 9555470f8d545690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-251\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 887656\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5VOCKSaQ8%2FvWiwqCasAa4SHTKnTA23pLLzrN2wI%2BzCOqOVufMDEEj3S0tbA4qyEtPmE9ov3w8SUmyebp7rv5cijScYlW2zeVDli7UClZ%2B2sRe599Vc%2BMyMR8Am3PAg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3008\u0026min_rtt=479\u0026rtt_var=4738\u0026sent=39\u0026recv=25\u0026lost=0\u0026retrans=1\u0026sent_bytes=15364\u0026recv_bytes=2192\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=125\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b93edbc0a8df85b6419e4c61a434eef9","sha1":"cc084502c02a558c8c7d64b9a4176573eacb1d3e","sha256":"04d982cd338db466b7714830fec0cb2ec4fa859c73bb7a9b73179a4135aeb92a","sha512":"86db732c123bc79bb221a4168061cf2465a320c6e201be8ac54021ce50dac499190c9018bbaf82c0551c938d0e200a3b9c403659772c463217ae1ff43477c45f","ssdeep":"","tlshash":"28f047dd43184e516f20d95f504dc846cad405a09c497121c2fcff9926b3e249db1203","first_seen":"2025-03-08T14:30:00.051328Z","last_seen":"2026-06-16T17:26:48.295818Z","times_seen":127,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/dk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 675\r\ncf-ray: 9555471929e35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 140997\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=93TOdK1Z0T11XV5ZR3INGkWTVkwFJKDhtFmhwOXNJAe2waR4dUi7q2VkyLrSEg2o4kZ%2FePmEFiVNMZZjcIvsYfVtRbPy8B3VI6ZJxfNLcPTyIAe5LBgFmTa0F%2FUejQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2592\u0026min_rtt=431\u0026rtt_var=3432\u0026sent=194\u0026recv=135\u0026lost=0\u0026retrans=3\u0026sent_bytes=72123\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1643\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c7c423ae2c04f8ab157a7ac58bf4533b","sha1":"9b63e03642346c40789dd7dbb75679a2eb4a74b2","sha256":"86f5fe7a5c2793f236dc9d84d5cab836ebc685fd12e1091bf3839550577f63dc","sha512":"3f7602ac11be9d358de4538566e66c63c3e32a6ec4d5d6d93c5d1c0da717b0b04d39ea313a7def819792c9a7622251708aa4ad36f7bd5511e124dd5ee652e3bc","ssdeep":"","tlshash":"940123c6d750dd7cccb8a510f5174d9af834d6ab0792c1b86e2265152f8112aaeb8827","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-02T10:38:22.364298Z","times_seen":137,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/za.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/za.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\ncf-ray: 9555471cdf945690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-336\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152715\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xPIG0rYehy%2BtSjwx2ez3FnUDxvPnuBYiOnuHKRoNlFOFXnteJ%2F2RMMfTR8%2BrOVx%2FNzcgNfWVag7h7kg18K4YbE43JPO%2BAiB%2FGj4x9fxXOTaFpd0x4r8B2R4CP36j4g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1217\u0026min_rtt=364\u0026rtt_var=372\u0026sent=666\u0026recv=402\u0026lost=0\u0026retrans=3\u0026sent_bytes=252402\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2236\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"99a93b9b05e8e270e27a7cc68ff26ea0","sha1":"44459d8ffa2e5e1794ece70e657a5542c2d619cd","sha256":"4cd5b09c21743821810e5d2f1ad34f88f22b5441f0bdb09dff7eb940ea0ed91d","sha512":"89d36d99f9f4d7b96451434655dbccb297760d47fffa3a106a313c8d016528b0f22721480848d24e4810d1a63b30944232617a4290aa587533cf219fb1dd2d19","ssdeep":"","tlshash":"750146f28e712c37d577b7f92115b2d89c068244f93c6b32f44c0510591520839ae5da","first_seen":"2025-03-08T14:29:59.96837Z","last_seen":"2025-06-25T14:51:19.37026Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ug.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ug.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 884\r\ncf-ray: 955547213d985690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-374\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1327261\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Pbl7bCCSzYlO2BXnfMErfu5lXga11x3oqZQflqASq5zQcNcw8sNiFMA7a792XTrZ5dIbAkAoMU3loKHAkoefqR7Klc1WzQTm%2BDBor6mE%2B626Cxw2iPKkA%2B30Lof0g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1965\u0026min_rtt=364\u0026rtt_var=1424\u0026sent=756\u0026recv=445\u0026lost=0\u0026retrans=3\u0026sent_bytes=287148\u0026recv_bytes=18912\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2939\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"63e3d82917425c14269b98911d3bf8d1","sha1":"85ca03c4a26e0e6321afef95d105c1591c52eba3","sha256":"b11c536070c0835ef3695bd01f5b8724183707bf6ab31b2b075a1ddc6249ec4d","sha512":"353d52f47608abc795ee1acdd1523bee9fe72386a561bf1ee9d15506f0f677fa49d7b67bf374837a216bb08034b954b085138a7719a7d4033556fbb39d4a81d6","ssdeep":"","tlshash":"9d11b7b6e20a451fd9a52b13b078ad305e93e908824624d43000d02e7ea7dc98a4af05","first_seen":"2025-03-08T14:29:59.857829Z","last_seen":"2026-05-24T00:49:22.962748Z","times_seen":118,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/gb.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/gb.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 911\r\ndate: Wed, 25 Jun 2025 14:07:10 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:28 GMT\r\netag: \"3de413a6f455e1e35121519f2e0deb75\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WR7dEq2NUhbOLN4BL_C-X7_dEYgBnyFFRqK1QHHpjFwAxztNxIw0aQ==\r\nage: 2604\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":911,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3de413a6f455e1e35121519f2e0deb75","sha1":"8692d11f1bef937ecda85696ec530bbbfa76e5df","sha256":"2f0cc6ed1e8e9a7e56cafd3500585d685ae0c51abacddc52f750fb4d23f60b04","sha512":"cd5ab599bbe91838b2cedf58005c100196999ecca5c1c9db00d76b7eb8e91daf7edfed73cfb998dbeeccd5c4b88097ebed29a611a9d68ab07fd071bb5df4da4f","ssdeep":"","tlshash":"4b118cd462fde149ce52430c6a9e72682127b1c773414265f1991e4edbc588bc9d2eac","first_seen":"2023-05-07T23:28:43Z","last_seen":"2026-08-10T16:41:59.338272Z","times_seen":536,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":24,"connect":1,"send":0,"wait":6,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\ncf-ray: 9555471cdf8e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 118140\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nvAGW5mCOcADXtYJtVZsHNLO7KTYNj1eF1dMGq9Y%2BTWw5S7r1%2BJOmIYK9vrpgJCj9qowGsN8Rzfr%2B%2BcOh%2B22pHisrZHNiv1Kw7FKbiU32MIQ6UhiCVU5COHtQ2dj%2Bw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1136\u0026min_rtt=364\u0026rtt_var=380\u0026sent=669\u0026recv=403\u0026lost=0\u0026retrans=3\u0026sent_bytes=253742\u0026recv_bytes=17164\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2237\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8aae00475abff798c675e3a3ad932e8f","sha1":"74bd87fdd8e56785a43adeca39d736e423486c44","sha256":"ccc70fc124bb0e3aeee2e8213c44ff47cb6df46a6b9ca1f81da321b32cf59eb0","sha512":"fdccc9a162be0a86ccafe701f34753e6a9891bbf980895da795574d9ff4b9723a686084b4dc0cf32eb02785f6d71e4c6b44c51a771052f511cf9d5d0f0c00bef","ssdeep":"","tlshash":"a70123f2cd47ee48e80ac95f522b07c439b087e14c1db01a3a53cdb50ee78995182d2a","first_seen":"2025-03-08T14:29:59.893422Z","last_seen":"2026-08-02T10:38:22.370631Z","times_seen":133,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/ApocalypseNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/ApocalypseNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 62342\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-f386\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62342,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"3f64e9b184055e22875f1840c9d88970","sha1":"2fd898d543eb6189d2f3403d0507a44d37905a66","sha256":"9ba4eb7f997de147b761774c7e3b6a4308fe5b6f40e54402cb087a48eeb8caa6","sha512":"06bee10ab53484d882d653ba097f99935436bd6a695d042a5ea35e294f9b7e5fbd33e5ad63b074aea6d8deeae86e11a2b3bb6c13d39b6a150e32c7a373e125ef","ssdeep":"1536:mjTgFrHE8eDVwwZl8IQGFV02WUvPR/Ry13:mHZ8eewOGrWUR/U13","tlshash":"dc530231ac0a4668fb38e7b35806bee663d97da5d04c075920d7ad70836af370c1a576","first_seen":"2025-03-08T14:29:59.914571Z","last_seen":"2026-08-10T16:37:06.177637Z","times_seen":216,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/au.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/au.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 648\r\ncf-ray: 9555470f8d5e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-288\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 147580\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3UhMpWzqBhU5xj6ZHW8HUnCD1aQrnBYsm15k3sTjw3ewnOTlSQjMJhcQLFJgkJ8aJknX%2BjsTjmOhhRJ7g6AzMmG9alfy1HUGaN5d%2FMjhcY2PefIeoTG%2BSOCwijsV6w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=17\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=7119\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=106\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b5e06e2a6df9344e54cbcacb8a1c5370","sha1":"88973b661f3b61bd46ce3cebc294780aabe24747","sha256":"3f0ca58366fdebc74210392ad397a494f457de55b68b4c07c4658aa1abe9cdfe","sha512":"efa5560dfaa07e85f2149f02e2743895febe30c8803ff70f154acae7dea20b6fda66b761c422a90639e94416a5ac2f537f932de4097488ed4d96bf58cc1209fa","ssdeep":"","tlshash":"13f0c8c492630fb2ad9303040c0b1e14d84e134334a73892c7bc68322c36a44474001f","first_seen":"2025-03-08T14:29:59.762173Z","last_seen":"2026-07-26T18:03:35.080057Z","times_seen":150,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 583\r\ncf-ray: 9555471c1e595690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-247\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1961079\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vc%2FcyKhh2E6M5%2Fq86%2BRN5MtP1vf21fEdiYlOH7YdNKcIh8k3xsotfFhv%2BAOcYar6RH09UViPbkDumbKjg9ReBCket6%2BkB%2BkCX0uaggJ3JaKaL0tRvxi4OhaExqS3RQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1917\u0026min_rtt=364\u0026rtt_var=1306\u0026sent=481\u0026recv=307\u0026lost=0\u0026retrans=3\u0026sent_bytes=181454\u0026recv_bytes=12680\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2117\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"462ca9d46ceb37ef9e07f0b5f2550027","sha1":"e18a094be291f5b80fd2ed302c524dcb60009a71","sha256":"d1aa5e676b2ea608f37142b1dbfa48a17e42ce33c8869b156248e16f98a69874","sha512":"1d45dcd530619d1b758fa6eee41ee843649db2e24c185fe4ea29350f12898b4cc589428b555f83f3153e7d205942b00302f03bddbd52221fbcf55679c6c0c0da","ssdeep":"","tlshash":"3bf096cdc2fa4cead8085cb2840b4d357231269de0905863f89688361d813107b73e23","first_seen":"2025-03-08T14:30:00.065386Z","last_seen":"2026-05-24T00:49:23.142057Z","times_seen":118,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ng.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ng.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 601\r\ncf-ray: 9555471c3e9d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-259\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1528314\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Lf%2F2I9rL28caZ5ukTZii34wrUUl3X6fmfGUt7M3e0woXcXsq8M1j%2BYfpeBhM4Lll1r9gGaaCK21MUO9eZrSbysQn9ac6EDWwul5BVpi7huYdlzHEKsPC4a4lXQFsNA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1487\u0026min_rtt=364\u0026rtt_var=650\u0026sent=549\u0026recv=339\u0026lost=0\u0026retrans=3\u0026sent_bytes=208881\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2154\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b6f18a11761bd7926e3ec751127be3ff","sha1":"33432226c66fd47442d9f5bf532e08dc13e6174b","sha256":"93bd71d1517029bdf0f8e933ca034f886d9969af5859fd8109b2ad3d839bf3b5","sha512":"b3fa6fb60f271af098925eccbb77c783c517e7a55890caa713c5aeeb8486a7fbefec0d8512ddb116f87dea4f1497c1d3ad47f8847de6dbf343155af4b35d32aa","ssdeep":"","tlshash":"8af0b7479a16dbd644c3c2521c0142cedc2422729067a119a52dfc21aa02935d397300","first_seen":"2025-03-08T14:29:59.777102Z","last_seen":"2026-05-24T00:49:23.448404Z","times_seen":121,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\ncf-ray: 9555471d18315690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-268\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 792169\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jmHhTIJnXJeB3j4n6mdYlmYeOiQMcjHeEmVK2PxZsZPY1gj2m46CZDexM5Bjg3FT6BaW%2FpJpkWeKHL4ErTtkjg9kvopuorb3YONBLKRmFi3V%2B0cQPECeCFRhzG88KA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1320\u0026min_rtt=364\u0026rtt_var=590\u0026sent=743\u0026recv=437\u0026lost=0\u0026retrans=3\u0026sent_bytes=282279\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2284\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2fa44110ff5288ecc94de44c01006b89","sha1":"badaba336111362998a88445bd1f2bf43ad6e072","sha256":"6456089ffce42d8453b2b57c326ed241fab1ddd824bb03f0ec6fe68ff2baefab","sha512":"f845054a4b1615caba67fecb8b902c4086aac9698a65f67d99d1eea76d9421d3dd924519c6d13061141ce6ab0e0b7c66b2233ae7d0a0bbe7675184420bf9011e","ssdeep":"","tlshash":"11f06256361adca68d22f1252ac9208de8002396cb961000d14edbc8962632ff8c1a22","first_seen":"2025-03-08T14:29:59.870382Z","last_seen":"2026-07-07T17:21:00.648577Z","times_seen":120,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/va.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/va.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 631\r\ncf-ray: 955547215dc65690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-277\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1028012\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mii1dwQ5gHxJTXAo5PD1MFJ3b9Y1XYHhEz%2FR0nyBS0jNAc3L1FQ9oqRHOYdUdW1jn5k7QMby%2FEDeCDbbpGj1X9SvnPZqjN%2Fg8Hh9j6S39fXqpqwsV0xqQusVVoDZOQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1420\u0026min_rtt=364\u0026rtt_var=495\u0026sent=796\u0026recv=467\u0026lost=0\u0026retrans=3\u0026sent_bytes=303076\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2962\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1c8dd2544dcf323dc1f77e1c0693408d","sha1":"ca5f34ad0f29eed79df950187108112d965bcde1","sha256":"b5c810d54493b77e2e22484933d7a69004f8cb4ba40cd63657b67e7479c3b17a","sha512":"2342fa8626d52085231a72930b00bb625acc7f8c7dccd73e2b8b19caf3780ac2d095baa6c5f9a667f624c1cb90e8dd279c3ee18de455d34052a50fb0b4fd109d","ssdeep":"","tlshash":"78f02da30a59dd145d1e02238a0a00f9cca4a33b8c7e89cb0c9c92ba012a20892482ba","first_seen":"2025-03-08T14:29:59.796206Z","last_seen":"2025-06-25T14:51:19.377284Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/XwaysHoarder2NL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/XwaysHoarder2NL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69719\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-11057\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69719,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"873b9f49061efc9cc74b8067033b9e93","sha1":"83dc9db5b4b95a50030e3305c6d2a29eb8454845","sha256":"45c0b313bc983dece484dbb235a88e911bdc5d121d1e46d690d3137df7e6e45a","sha512":"7cbdb7728a4e1ad34c52a7dacaf10770bd23ce51f5fb7dee95679b8a426f0bbf4282fc209c31d65e76568ae28db64641bd3089d9d13b9c95e58bf803abb17f52","ssdeep":"1536:T0i8gcLkVTdICxXcMpRqwuTQ04sLEWpZPVA0L:I3k76weQ0ka9VB","tlshash":"2763023f5018e2eb52412fa91d5b4874a6ec45f24c96786a73f34cd2f557342b9c63b0","first_seen":"2025-06-22T12:57:21.154828Z","last_seen":"2026-08-10T16:41:59.352318Z","times_seen":223,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/td.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/td.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 528\r\ncf-ray: 955547111f6a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-210\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1957416\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u4l87YqlsTd8zE%2FZE5F9j%2F39Qkr3TdyX5RJgDLdLSxFzegXIHobjOT%2FOKXuqVb1MqOeHr9De3YM6T8nCwZEL6rUy1MpgumY5j53rLgLow9c2aIuEca8ouU%2FHNN3DKw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2228\u0026min_rtt=431\u0026rtt_var=1748\u0026sent=147\u0026recv=74\u0026lost=0\u0026retrans=1\u0026sent_bytes=56030\u0026recv_bytes=4472\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=358\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3abc773a744c60398ee20b13bde5bf1b","sha1":"6f464a7e2ad70c6aa3a5a6ac74765898a01e4239","sha256":"db33b7eab728a5068b14cb4107e9b851b5accbe27a25e3f734b98938fbde6840","sha512":"d91202fb9578f8a285c50f966f236c1eaab42dde89e824fddee0a37fe02adc0aa43186194b61111084053036e4fcf73911dc6a7b28e7294952162938c1bb8dba","ssdeep":"","tlshash":"e7f075d9868d4c39da1932637937ca200c1725215c8c9b03ca9af021fa0224f4380f91","first_seen":"2025-03-08T14:29:59.874226Z","last_seen":"2026-05-24T00:49:22.934987Z","times_seen":113,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/it.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/it.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 493\r\ncf-ray: 9555471b9d8a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-1ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 155800\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UJ2t%2FV4qeN33hAw18wgOpX1rs72ETyLuqx%2BMvSQnRYch%2Fxas8JywpfoCuLUzLbXIucImvx6YG7phUc5vvmC1lzSDSDKUZns8YOITxx6Fl7PqQQbUHFyOypwgT5Iiog%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2123\u0026min_rtt=364\u0026rtt_var=1250\u0026sent=358\u0026recv=245\u0026lost=0\u0026retrans=3\u0026sent_bytes=135526\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2039\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"148df276bfadaa8a19e3f278eca0f63a","sha1":"bc3f876a6d64f320ff63b06cfadf06208547d668","sha256":"228d778a62302a0c909041ff3a902ecf4b5ba93c339fc665a16ab90016e32d21","sha512":"a9ed751bc0467b3daf8e853ae75d89d6f7db2875a3f4652719cf9c323a2b9aedac09e2642d7f5b8ece93c37ca8996bc6ff5cff0269e1312fc524fe594078e3dd","ssdeep":"","tlshash":"18f00e93c9632c1c8eac01faf42055ce50013418d0496007b4ccbee19329309ed3ee88","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-09T13:53:46.166035Z","times_seen":190,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 815\r\ncf-ray: 955547214db25690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-32f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 840378\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1J2ZgYExshHzlI0i6C%2FQDRgUk9x%2BK%2BEiC1cXyhu0DxdbjhFLqv0vlL7g6ppCR%2FJP8fgK49x7cPFHvfrnTIlRp7fXCdgivKXdEf054fQNEoX86w878VMtmAHjirfEXQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1546\u0026min_rtt=364\u0026rtt_var=1202\u0026sent=769\u0026recv=456\u0026lost=0\u0026retrans=3\u0026sent_bytes=291064\u0026recv_bytes=19672\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2948\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"30e0f23c02fc1ac47ee00d5a6ecb2348","sha1":"8b752c78f78ea5d6c4de64cd788c95df9259c557","sha256":"67719906451088b26b713aec46910b10911ad6bab165f3d149dbd2a47bc3bed6","sha512":"4abf2f683f7b790b4cc22e9c53f7c7fc5c282052845b9524637f335cdb77c3ce3e2f925004cd61eb341d00b3bd6e53e6e4ee944a133a51065999b8555f90e0c0","ssdeep":"","tlshash":"cb01752e0f580e7b5c496562492b17c02f88f97fe53df38300605e0d37a365ae0e45b1","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-09T10:48:42.839073Z","times_seen":226,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/um.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/um.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 813\r\ncf-ray: 955547214db55690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-32d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978211\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jn47ANQj%2Fxs4HSNp5N1u%2F9FW5k95EMaoY%2BaCYyE0TfMZuPvQSZF0WQlFZ%2Fm%2Bb5tZC4lTxcQ0EKLcAPK6K%2B5c5mNQz35lHTlVu6mEIVEY%2F%2FEKL7s4FnAUPAgr6pb7jQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1499\u0026min_rtt=364\u0026rtt_var=912\u0026sent=772\u0026recv=458\u0026lost=0\u0026retrans=3\u0026sent_bytes=292396\u0026recv_bytes=19748\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2950\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5268ee5aae7f14ddd7702a8bc977eeec","sha1":"bebb1819975a1e9f54c36854c55ee7d4a9106693","sha256":"d2fc9ddf921f60c3d09f272e85a550bfad3283618ace26451646073b2a943355","sha512":"a514a3c377da27ee13b79570d0422f2c85944acc0e2130c04d3183b6c71b4e834738e9fb3f88fc42100fca647a875a502ac43e718fa45f0f7f6656e5bba58c8d","ssdeep":"","tlshash":"7401ca37219500fd552a8a5fad4dc204ecf45b2bb73a4405e41dcc6101d539ce7da6e0","first_seen":"2024-12-21T16:40:12.670346Z","last_seen":"2026-04-29T00:02:11.945454Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/eh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/eh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 830\r\ncf-ray: 955547215dd45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-33e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388600\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=87GfCTJyciVy%2FAKMluRGU0N%2BLirlUZEDvali6bRasyPR0hYoqjzF0G7Avkvipd9s3QzTSmtAXtPkbfyXkJ0tJP7ZRlm4%2BkLmNfPIR6oLfgaciJADhjyli3vWcUpENQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1337\u0026min_rtt=364\u0026rtt_var=440\u0026sent=790\u0026recv=466\u0026lost=0\u0026retrans=3\u0026sent_bytes=300123\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2959\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"d7ba6ded1ae2692c293c23ff3de857bf","sha1":"df8f4fdcca67776e37937b1e5b7fd819b4a13394","sha256":"b721a0cd3b4f38dc6d6f6007132be4f144d2ff45254c17410c10bb745fd4facc","sha512":"41c3e9b38f120627ca223023fded246e67f04d281ed9f78b5fa55220f2f468bc5d0c00968bfad12825cb7870a380c7f743d305e9b1f163523f450d00cb9381f9","ssdeep":"","tlshash":"b80186c112800934cee78305323d35d4e0ad272f4647e643f2056a365819dde87f0b13","first_seen":"2025-03-08T14:30:00.058549Z","last_seen":"2026-05-24T00:49:22.873376Z","times_seen":114,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/LandOfTheFreeNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/LandOfTheFreeNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 61394\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-efd2\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"691b7022eac4479020fffaef9baf5919","sha1":"34a9b4fe57455041eff59595fb78ce6b054b00d3","sha256":"2ff8f9b73e52d9d47379b7309934393decfb6a8c323f2d467bc8011b9194b9e7","sha512":"13ea8dca6f1a2c14d6fdbdd4c352acc46ffb3d71d5ed99ca0babdc40b1aa6f7896a0c59c64370e906666787f3c08bf311e8f619042b33e7370c2b9c2a6982dae","ssdeep":"1536:ttmEjjerKdhfkuJFgF71UWcKh1PcSmJD1r2/U:tBjjeudhfkuJWDUWcuvB/U","tlshash":"6f5302cea3806193f569cf24ed10eeb6aeead030b483767e0084344a93f2551fa5df56","first_seen":"2025-03-20T14:16:21.599845Z","last_seen":"2026-08-10T16:37:06.143955Z","times_seen":116,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":74,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/wtp/cashback.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/wtp/cashback.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 45214\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-b09e\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45214,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e91692478dc5f6979a8a15d51d8bbbcd","sha1":"0f3928f7655722cf844d83e9ac475923849aa0fe","sha256":"8e4e00d43eda40c574eeb94ade0c2a099e9def66feef83ed3d11e153f5a16a7a","sha512":"3bedc01f500110284a0c8916819532361c549b803ae8a86d9ce94f7bd297d1c26721882fcf323538836e9ae7ad153c107b97eff5145852481c64e2f46bae5a3d","ssdeep":"768:SGy7SgZOlPPUyRxLRF5K28Ef1B0LUur1YDk1nnHk1imQl0Nvk7Fgo:5y7SgFu9maf1BH8nnHl/01g6o","tlshash":"6e13f1eecc33433f50aeabc2faf934623d9915d59a7dc096476f5491bfab444223a108","first_seen":"2025-06-22T12:57:21.096095Z","last_seen":"2026-08-10T16:41:59.323973Z","times_seen":82,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/mulish-latin-ext-400-normal.010c30bc62bc9d6b.woff2","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /mulish-latin-ext-400-normal.010c30bc62bc9d6b.woff2 HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/styles.4eaf80b61ae0f399.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 12612\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-3144\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12612,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12612, version 1.0","md5":"4f34f0c29ef320b535bc4a258318b5c1","sha1":"b75380be26940aec716323a8537ae4c1b2e4252d","sha256":"bd31d387808eab8b6d39d6cf8ce3c11cdc69e93df8a3998b8e218a9427d4b6e1","sha512":"fb4ad84d88ea933dfafcd04e9e736c3893e1e90b56850c7d76f77a4c618c34db4e331d152276071d3432f05a8fcb79d5ce377405fa133f296a075ea687f6c034","ssdeep":"384:rbBt7eesr8mpH68SNdMusAHQOhU0WEumyhv:XBtXBmFTSBwOy07yx","tlshash":"eb42d0721f8981a0d31a3878157f932f46ea9448f2741f04ab4fe320e19d997760fa67","first_seen":"2023-09-24T13:57:41Z","last_seen":"2026-08-10T16:41:59.28622Z","times_seen":79,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":67,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/gradient-arrow.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/gradient-arrow.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/styles.4eaf80b61ae0f399.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-2e1\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":737,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bd543cf7ccdba8b0ea88630884d9955","sha1":"cf4b6979a771abbc6b7c06483508081d8e287499","sha256":"7f86da5ddfbc66d99d25680d788ccddd99d91eda07e94747e839da6f0867498d","sha512":"76b7e1d5a709e616fe71f48e0532439f40bd33b715c879ef006332c64a19a45d49868498c24c8bad8847c80dc738fe6e0c12c6175b73299eb89f7c298dc1b4c8","ssdeep":"","tlshash":"2001c0baa5bc9d1df087ca0dcd14a430139c80b3d549d510b04ecfaeab5b1c1598b5a0","first_seen":"2025-06-22T12:57:21.204285Z","last_seen":"2026-01-08T21:50:23.920885Z","times_seen":39,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/eg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/eg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 660\r\ncf-ray: 9555471929ee5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-294\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q3kkiPTU8NuLvseX%2Ba5l3OZ4yvtuArn0RKCA2ddJQzVvUg8Nh869yi6xW%2BLyzjO1%2FDbhBkHpEubPShD6gtIk%2Bma5n06jFIZs%2B%2B%2FZ9yn%2B6mhFY6BoyEPX8SPnca0Rhw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=651\u0026min_rtt=364\u0026rtt_var=376\u0026sent=212\u0026recv=153\u0026lost=0\u0026retrans=3\u0026sent_bytes=79676\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1651\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8c87c748009ef723a8b33ddd3cd0e7e4","sha1":"5847db409450b8c44e9236c90c31b75b251de99d","sha256":"a1f55c979e036e83771f33acf49005956e9ed29f0725861fbcd27c416d80f98d","sha512":"47989e7edd37919504a0b9adda200dc951a482e7986a025eb9cee918b0c5a573219061d050527d9e04f218c03a085b13a015c762145eec7a80c4697ee0774437","ssdeep":"","tlshash":"ca0123a47790ce29eead0170a83121adefd429857ab906240543cbb8c446447a5c7853","first_seen":"2025-03-08T14:29:59.859244Z","last_seen":"2026-07-07T17:21:00.670909Z","times_seen":123,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 907\r\ncf-ray: 9555471ccf635690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-38b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388602\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BrlxWzOnn7gDiYHB6R6HOY77%2B4wBlyLnuLTv3%2BOAswoS8kX60v7iiYH9WtZjkdWEIfo%2BoIx91S%2BPEsNbfvBNwlXgYwqI1dL6uxE%2BwQRWNcXBU9Sjf8THuA1mQWakGg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1206\u0026min_rtt=364\u0026rtt_var=657\u0026sent=629\u0026recv=381\u0026lost=0\u0026retrans=3\u0026sent_bytes=238699\u0026recv_bytes=16100\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2221\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"2aa0dea91da7a5486cdbd429c5ac4926","sha1":"6ac11461b598aada9278c0f8cdac023a7e7f942e","sha256":"caeecadd1852270e737d5917cbc79b347ca62488e46dfafc3ff19a44e56815e8","sha512":"ddfebf4a3c5aa0adf3454799e4c5a031c319836722f1f7ec904d83e98394b18ed5723794531ef4d72e0478fed74ec7d42d793937828bdd710f90bd464c439616","ssdeep":"","tlshash":"2711b7b4456ab46d488bed3f0faf0320f5778e8305baa991f9042173b022b16819e160","first_seen":"2025-03-08T14:29:59.912729Z","last_seen":"2026-05-24T00:49:22.766772Z","times_seen":117,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 587\r\ncf-ray: 9555471cdf885690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-24b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137532\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vy6UsUABL%2BTIel2jsqt9QcAwWC12slcLpSdXQYeJqWxx0cwQTQvkn%2B01M0v9flKdjNI8bhfmz140MJIZ2Bt1je6SyUXzatv%2FrM9sCtWDQ8BhBs9bEgYcZvQetZ2qgQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1218\u0026min_rtt=364\u0026rtt_var=566\u0026sent=645\u0026recv=398\u0026lost=0\u0026retrans=3\u0026sent_bytes=243846\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2234\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"88aff2b8d045f41e88c665d47c38ef2a","sha1":"5389d3c6f2366f97f327415c9053addea6ae6775","sha256":"9fe45473d9cc2a9267273b9d3e0ab0d8bbc2da3f82db95aa7ea58fd10b40f77b","sha512":"14a10e9f61bed65e966927a5d364f0fcfacfcaacce79abb9646caede7ed100a5e81b9812da7b2f817530e3d06a52d2566ceceda45bbaae30ed207f460784335d","ssdeep":"","tlshash":"81f047b0e5523931ed542d83c3f7ccc5231474441d75c7044dd7f08b5550669cdd0ba1","first_seen":"2025-03-08T14:29:59.840239Z","last_seen":"2026-05-24T00:49:23.599564Z","times_seen":113,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/BookofMonsters.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/BookofMonsters.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 68057\r\nLast-Modified: Wed, 21 May 2025 06:07:18 GMT\r\nConnection: keep-alive\r\nETag: \"682d6d96-109d9\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"16b129c313789da690f97140a74a877c","sha1":"4cf634756d55c8a126318e8ee322645d85f63c50","sha256":"50d0e79f34356b4b82dd9fd7934b3750a3d8f64f4840ff53d2be6bfd3d741e9e","sha512":"d45cd473e7f652276f0a0fc9e2e95f1c3c95cb639043ad5ece85432fbb573121c71118b7230780716d49316eee16f6f4fe07a42cf2aa4db063cf4e0e9145e615","ssdeep":"1536:W1WW0xfN6SEhyLITznE9CA2SN4SV5TrRxOFSI9W:0W9xf82IT7iCA2M9VRrHOxQ","tlshash":"116302e086ae396874340938ff529d07eaf97ac9346b3122f7701e25ff114b419b60a9","first_seen":"2025-06-22T12:57:21.187221Z","last_seen":"2026-06-12T00:18:49.651416Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/categories/new.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/categories/new.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-244\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":580,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc24f925ce9f71141fd58a502bfbc9e8","sha1":"e22d7ba61603fdd9fa5128e2dda4c772aa341bc1","sha256":"d6e297afb36f8e26488ea2ddeeaa4a63fe69c0b65629bea22570be336b471061","sha512":"3d6925fd4876e62a5382d7645aa9343521935cff65c95fee33a677922b7baa7cde21bfd7caa412c9d6eb3a9c4b7119f9195eede3d382293a6fcd9511fa7fb1e1","ssdeep":"","tlshash":"01f0e1e1cb39e4c8e086493edf557ad8632720de59456989f264eb1ed1c6ac2d005494","first_seen":"2025-06-22T12:57:21.14658Z","last_seen":"2026-08-10T16:41:59.270873Z","times_seen":144,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/show-eye.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/show-eye.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-3f2\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2fb89c35f2b21c60dde0c1ba12b8af3","sha1":"f5ba5147226aa7eb518bfe8a60bd8663e1ec85b8","sha256":"2024f532bfa11c05b54389412013a17f83d11d2920ecabed58733be6152ecfe9","sha512":"f0e54f966db75c6e702547cbc16dc485834588ebfb7e8c8d6187ad56332eb048468af74a21da1d9c9bf49a732b50625a28a220c0579bd51b43912a65926ff14c","ssdeep":"","tlshash":"e811efd3f23097cc954a8195ef3c6465600a80bddb870585a37ecb45ead34daf80cc04","first_seen":"2025-06-22T12:57:21.128615Z","last_seen":"2026-01-08T21:50:24.062807Z","times_seen":41,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\ncf-ray: 9555471aac345690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nSQu6S4KdHTGLRingDEbSuWRyUeTMgtlrMzuJXJuOf0rsJs5yK1UvVXJrLxumLttm2Xvftaz8%2Bx0a1WrIvvYrO81iUpyWRoQyRUXqbn3Ebzujh%2BzURZ5g9xBzbfCHw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6700\u0026min_rtt=364\u0026rtt_var=7448\u0026sent=289\u0026recv=206\u0026lost=0\u0026retrans=3\u0026sent_bytes=109843\u0026recv_bytes=7968\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1889\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"711b3e5067b15c390282ce91e883a9bd","sha1":"878e25a4fd5b1e7324e3658e2f04a21487d02fdf","sha256":"a0946d111935649b57ecd558963fc3759ad7b73c667cf1e50f70f9d203674d6b","sha512":"59d177d129271075c8544009fe95fc2400260b99e34271eef5e267d2a47b99bd1cc36361b99337ef7d2c8a18ec4404dacce3fdf344c8613bbe01eb1abff83b51","ssdeep":"","tlshash":"a50188f05e94c9dd477a86365f0b1984e3415361790d3f5f9e01cca46209f89cd82701","first_seen":"2025-03-08T14:29:59.925453Z","last_seen":"2026-05-24T00:49:23.361148Z","times_seen":114,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 540\r\ncf-ray: 9555471bcdd05690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-21c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137532\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r0NxtSrcrxk4a2NZs%2FZBIKzWPou0q8yrzixjth1%2B8TyuQHp1gYDt%2FqblhyDbobwFHaNanE3f%2FhTNyP6L8rq1z0mZ24XUrsthaUQIr3h8q0yXjGTpcojuTTtfz%2Fekgg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1485\u0026min_rtt=364\u0026rtt_var=500\u0026sent=405\u0026recv=275\u0026lost=0\u0026retrans=3\u0026sent_bytes=152898\u0026recv_bytes=11160\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2070\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4a6960b83f7dfdb88eef23de3c04cecb","sha1":"9b428f0b724efc6f37adc6279d61e681f74b0127","sha256":"4b0276d888c43a78153094e3f2892fe203b024107a8e1053dfbc8d3a63c27396","sha512":"93a08c6d01c718c1f29811a376b2c76ffdb85814dcd18c1bf2d80df9f9946c872e64ada226b808f01e6bd7645584ba8b34942298ebcad68ab1d81669a8a643ff","ssdeep":"","tlshash":"8ef00568df2fae7ff5141033510f18345721f32ea7b5b927005566f740593011855a98","first_seen":"2025-03-08T14:29:59.984101Z","last_seen":"2025-06-25T14:51:19.394035Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ua.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ua.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\ncf-ray: 955547214da75690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-298\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 895141\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vaFySmw2zLPtJ%2BkNMRSsqGy58IOxmWT8mFVNvn4Ulq3HXrUFnB6IHeU29TDuG88mdSXPn%2Faspp2ZrcxUn%2FDyFBJoApBsyeei6gPWe19Ik%2BNDhxYKuWoxzOONuS%2BR3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1631\u0026min_rtt=364\u0026rtt_var=1375\u0026sent=760\u0026recv=449\u0026lost=0\u0026retrans=3\u0026sent_bytes=288783\u0026recv_bytes=19140\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2943\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"a82a5d0a43b25a90c525d839836fe970","sha1":"395820239fa807857075e1699fb81c24b2a23a23","sha256":"7b98c8f6e089c8cdae83f09d9b1e233a42ab23d6a07e0a5df9926afb1027d0b2","sha512":"aebf7f6122fd9f1ceb85fdfaa72b2f7503f54d5d4cd6b526888e75b94931895ea609963fd4a8e02a77be2179cd46353da306211f7f434e371b25dbe164e046d0","ssdeep":"","tlshash":"7f01689b8505e6763d3a335f16a2b8c2f024ca2f0b15a50a718c77f08a675e1054d7cb","first_seen":"2025-03-08T14:29:59.931857Z","last_seen":"2026-07-24T22:01:00.669156Z","times_seen":129,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vi-sber1-20.jivosite.com/ziqY8DLV0e?62243f10d813df58","fqdn":"vi-sber1-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:34.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /ziqY8DLV0e?62243f10d813df58 HTTP/1.1\r\nHost: vi-sber1-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kometaloft.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vFC1DEj/auY6gGaOdSFgrg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://kometaloft.com\r\nSec-WebSocket-Accept: lQEqZYDWNetOITu1S0+IQvIOySA=\r\nServer: hand/3.2\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":1,"connect":59,"send":0,"wait":59,"receive":6,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.jivosite.com/avatars/2256902/678530a9e58d5.jpg","fqdn":"files.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:46.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /avatars/2256902/678530a9e58d5.jpg HTTP/1.1\r\nHost: files.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31487\r\nx-obs-request-id: 00000196C3253B2CB0086607CD7BA89E\r\netag: \"3e83d0a6bb0751ce9a43300dc3026e4b\"\r\nlast-modified: Mon, 13 Jan 2025 15:26:34 GMT\r\nx-obs-tagging-count: 0\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Disposition\r\ncache: HIT\r\nx-cached-since: 2025-06-22T21:58:18+00:00\r\nx-node: m9-up-gc11\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31487,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3","md5":"3e83d0a6bb0751ce9a43300dc3026e4b","sha1":"a1af1b09e8f5a2f0c4e2e26f4be16ad6427fb2a8","sha256":"d111f983184436a70a572be18028eeb2cc3f9dc2dee43ca74acccd36a5094520","sha512":"b6c65c1a8fabc2a3a34ee18ed87282f249580fbefc2db520662930d8570c33714f5bfaccd265c0455f738e6717275564be1c77697b1bff7f82c55e31e1e50e97","ssdeep":"768:CdFANU2iKfZtXVHW+S9vYrqYpPSrWCUcrL4O9no3Sv:sANttfjlHWDvYrKrprL4oo3Sv","tlshash":"ede2f1d29f96d14cfa416074023217afcbdd641df1728c5e89cc829ac3ce6ee90a16f9","first_seen":"2025-03-20T14:16:21.556502Z","last_seen":"2025-09-22T23:29:15.099164Z","times_seen":6,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":211,"dns":67,"connect":67,"send":0,"wait":73,"receive":14,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/logo.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-e07\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3591,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d33809c730c8e84f04d5a0772ddb04f","sha1":"0fdd959a0b026f40d8820a7b7958962e7fe7c4e4","sha256":"9192d941dda845685adf4a68a20c8f19b86feca407a6ba314071c5f34bd60422","sha512":"b710f9e86eb92529c920ca239ebad10891cc095e8d4b46e658af1ba99f63fe23ee468654be4f4d964628aa20d4dfcdda7e68d11218f00ed5ddd02dd8d4b3b13e","ssdeep":"","tlshash":"8271b1aad73df43fe58987addd18c46a22dd41eef988d36076189f1e14a51c10d48e90","first_seen":"2025-06-22T12:57:21.151909Z","last_seen":"2026-08-10T16:41:59.343447Z","times_seen":68,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/to.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/to.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\ncf-ray: 9555471d182b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-240\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137532\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L05NAwquY%2BGzuYCE59yO04isWvowAahAALcd8kWcYx2cDdXo%2Fwtc9ZecssAHXCmeLqzM9n%2FxZd9SMv9fm4LDKOgJv7xO5BOVuRth4Dg2gNkQbctw5dCIvijZ3xDSWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1402\u0026min_rtt=364\u0026rtt_var=810\u0026sent=732\u0026recv=434\u0026lost=0\u0026retrans=3\u0026sent_bytes=277536\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2278\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4ee85794739d7a8ab88adef7ec62d779","sha1":"286f402b0e202939e68c4e6daad2b93958b40fd9","sha256":"d3af8fc12a056ed602a222ae02435c2b541c596d2db60b75f2767cc5ff62db93","sha512":"49bf64a9efb7d3c1898a0d25978c680e0f6befb081499155fa6eb1bb73762978aaf4aa57b95518a11aa993adb74a1739aacc87b9e8ba0d050e092b3af637e166","ssdeep":"","tlshash":"39f020d2bd4db81dfe804139d18641e8b19b23c89e2892b6b0861f21758b9208242325","first_seen":"2025-03-08T14:30:00.062217Z","last_seen":"2026-05-24T00:49:23.605266Z","times_seen":114,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/dz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 731\r\ncf-ray: 9555470fedd85690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2db\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152959\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LUb2695oqBozWnTtbLiLV7RVSU7tRKM3wfxJ2t%2BDzXBKWR4sbfPfNyX%2BY2fwMjkdmnD5n5aE%2F0nq0kVcgPSq5eZ8px%2BV7Srx%2Fa4rvtsrMss4dEtdJw3ed5FiSgF0KA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2883\u0026min_rtt=431\u0026rtt_var=2116\u0026sent=111\u0026recv=56\u0026lost=0\u0026retrans=1\u0026sent_bytes=42280\u0026recv_bytes=3788\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=203\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"275ce9eb3efbfad8f27d6a9f7d6fb458","sha1":"85e4f2f13ca2d2fc6f8e075b7f317ee7e521a409","sha256":"cda0f340d2df4021f6c686d4d068256c4a004dcd16cf835edb03ddfaafbca370","sha512":"23c2fc5ab0c7ef0fad356217ae21707c426ed26a48c8aa4c5d199964740772e004e9d7f53743451540f6f5258273fd9e148ddb57f605da130ddd130414fd5edd","ssdeep":"","tlshash":"3601d86b7ac2cca008129d4182e8e74fba3c0148ce6f2d7c01c5c6cbad043aa1e708cd","first_seen":"2025-03-08T14:29:59.767766Z","last_seen":"2026-07-07T17:21:00.663698Z","times_seen":122,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":50,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/at.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/at.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 613\r\ncf-ray: 9555470f8d5f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-265\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762228\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xCt297t9QJhApRbPYGxjc2S5GwhlLLw8k%2BnljQ2Xg9dy3uJGqsJl3rL4wCyq2omxMJeSFF1fvdJS%2F8abmqRH9HlGK%2BF0aNqmqjPK0%2Fj5ZCHmeKHq3aOyh78FIp8meQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=20\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=8277\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=106\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cd1e3cb21a2697169a16cf81c8f87320","sha1":"9891d65a587c94028b8764ab2098152e6ac6e253","sha256":"cc32c1626d6f65cdc8a92d21fd13726123f20334b0f708517b3363431ba66991","sha512":"74b0a457f62e02e0da3d0a615421c54b2d75c05b67332f1cff2312fa0ba5e0c7bd80cab8359831f878af89dd2e8262619141f03c945403ffb5b435ae22b77849","ssdeep":"","tlshash":"a5f0029e9129aca489be622389736e80d4a16292753cb949053a7138254163f52d1902","first_seen":"2025-03-08T14:30:00.020826Z","last_seen":"2026-07-22T00:37:09.232811Z","times_seen":132,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ba.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ba.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 734\r\ncf-ray: 9555470ffdeb5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 929010\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c6Nm7RGKhYHTuFt2fGVlc%2BtRBTrOQP5CDWroR1XF70peN9tD91C7KtfQvUzVcEcLHXkOpgZ%2BhGJ6105Ri15jxqJD%2Bqpn0Aje4ot3EB40RbDi0NLaMF3H6a%2FhchSrug%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2326\u0026min_rtt=431\u0026rtt_var=1685\u0026sent=97\u0026recv=49\u0026lost=0\u0026retrans=1\u0026sent_bytes=37135\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=182\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5e1318caf1394e8ddd7b1a9bcb28fe16","sha1":"10f49c5eb3431dbc2c113511c2652b66e5d95c32","sha256":"fbc74d7a855bcb4b20af7d2e39c0fc556b18e19bd4a4ed8fa3166bc23c34620a","sha512":"da354d9ff72130c87381dbb0b7e7919855abfed37326e6fb50846f93981f03548786c2830558ab8af236160b4282d073b01bf7244efe839b07d74c819c495101","ssdeep":"","tlshash":"370183c69b26ce17fb544c81a74f262659108c358e33d211820abd202a3544ee1b3796","first_seen":"2025-03-08T14:29:59.998909Z","last_seen":"2026-05-24T00:49:23.286864Z","times_seen":114,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 780\r\ncf-ray: 9555471bfe2c5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-30c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388603\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bowmCn6rVH4VqNF7%2FrkIuWbpC7NhtJAlxvZNgFsXkhkyjwjrylxORl%2FMP9wUTQnWb%2BjW9Il4UdrTpH4T%2BbZEv7axrNM1ZWEDdQ8iheAPCIixQOZIpVmnBbM47PVnoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2010\u0026min_rtt=364\u0026rtt_var=1361\u0026sent=452\u0026recv=291\u0026lost=0\u0026retrans=3\u0026sent_bytes=171705\u0026recv_bytes=11768\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2096\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"f868dc07ce76455596e346ac0298c619","sha1":"ca71bb65fb6764fe4e0c186ea07ad236f68fba80","sha256":"59cb0f4320b857924fe2cc4522a8370fec710199fb5b5afdaf572ac86d83c006","sha512":"407db632a51b10106db7d4ad8275c12623e6e1f395ba92e4d4ab6aa9b50b14bfb680c7f57af7315d199aaa244ab99750023bc6e53a418e7043d28e48968d23ab","ssdeep":"","tlshash":"cd0175dd6a29dc96d92c403faf8c3db6bfd2f38000661196df30e11a02212208198a2a","first_seen":"2025-03-08T14:29:59.95576Z","last_seen":"2026-05-24T00:49:23.245596Z","times_seen":115,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/vn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 485\r\ncf-ray: 955547215dc95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-1e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137533\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HPy8AZkS9zdg6wzmWqDWAC9%2FTZHIv5cDQCSvMPIWG%2Fx5hYv%2FYwDBu06pUlpoUwb%2BgQCgx4ZyDSgiXy2PzTIyOmvGcmjYmhdMIpFYWrpRej6K0%2Bqvmwik5iRftI48iw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1431\u0026min_rtt=364\u0026rtt_var=544\u0026sent=802\u0026recv=469\u0026lost=0\u0026retrans=3\u0026sent_bytes=305287\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2963\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6299c664741528d71b0a5a2689fe8374","sha1":"e25eaf554cc1213198c8457c65e77967ec29e08d","sha256":"dafbefab9559ba3dc10d791f481f4ab473cc46e720a1dbd8ea3ec3218f08a851","sha512":"8ea48e2fdf7273d1377ca70feda0e4443519cc3ab9afc7ff303ef6d120171880df6cefa509fb6ccb2d8858c92ae80aba4a6444c325076d2ff14123b7396b6a5f","ssdeep":"","tlshash":"88f054d323900e4f5d5ab32e42296951ea0cccd837d38755c82ad4d96642605c1a8589","first_seen":"2025-03-08T14:29:59.858503Z","last_seen":"2026-04-29T00:02:11.956497Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\ncf-ray: 9555471abc3f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2282499\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uBQWLK5ZNw2U2PHGR%2FyhxYOXNv9g2PXiGxh3zDc0HJpJseplCTlgC3T47mixz0J9jcUqsZ3iBkM04nk2S6JwUWvsLQ1V2oKvhWjqoNXO7RTaru3rVQuQJnUegm0SIg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5437\u0026min_rtt=364\u0026rtt_var=6385\u0026sent=295\u0026recv=208\u0026lost=0\u0026retrans=3\u0026sent_bytes=112316\u0026recv_bytes=7968\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1895\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0d0ecee1fe4c113666de9dc362a57deb","sha1":"d23a1ab891eead0569b591a0280f4755fca32abf","sha256":"9dc9fa2cf43eb9c8449fc32717db36efe4f883454c0e27edb9d48d620a92aae6","sha512":"d6d98eaed3f0b9d626865038f716c9f22fd89e7a99f3c5329a738e2b4307da600d3f6fe20097c8cbc230d807674e2c228d4eb1dd009755d627744d71115e0e19","ssdeep":"","tlshash":"5c0183aa0f0c8832c8ec51b58ec86118af143f61fc39f23341845c24679a8e03f80022","first_seen":"2025-03-08T14:30:00.055739Z","last_seen":"2026-05-24T00:49:22.880784Z","times_seen":115,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ie.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ie.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 693\r\ncf-ray: 9555471b9d835690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1981725\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kO0e9TOhA9aqWKz99QvNHBlpf3v%2FE82sNVN6cWRO9cpZEby1nEf9Jd9ZDN9xud4o4kSOrFCV3Mg%2F44g95buwYABe%2FA%2BkexcAf65f14p1e4XdnkA5px9lEa0nPxO%2Fig%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2329\u0026min_rtt=364\u0026rtt_var=1237\u0026sent=353\u0026recv=244\u0026lost=0\u0026retrans=3\u0026sent_bytes=132912\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2038\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"6f87a0d893b41ff80e317395113d2344","sha1":"d76cb25b624a56294ad1826e688539f4d854c3c1","sha256":"83bb64ac77eb529b67147558e5a2086f260fe372bb1b11288a0fb99906636259","sha512":"74699e767d2b93e1f12a98f158de27bba673903ea3241b771dfd2332ab1d9e0b6b0cb34899085063c09db59b1f7e61bb25c3b3bbfc946879961f784cfb58ecb3","ssdeep":"","tlshash":"91018881987959fdc33c62267339254fb873686cc21a07303560525baf56255f1f4482","first_seen":"2025-03-08T14:29:59.875649Z","last_seen":"2026-07-22T00:37:09.214107Z","times_seen":130,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\ncf-ray: 9555471c4ea95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1028943\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rUQLqsL2icHCbc4%2F37f2czFU9nK9Z%2BAcM0psCoNwK%2Fx0%2BIMfK%2BQqDO8tAK1vanXMp6oZlYpekK%2FThVxQAGe1QYz%2Bm%2FM5ImU1lMR70kuWcT3CnVnxkA9CFJ8ti%2Bfnqw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1280\u0026min_rtt=364\u0026rtt_var=454\u0026sent=534\u0026recv=334\u0026lost=0\u0026retrans=3\u0026sent_bytes=202410\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2143\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9740043a6ac2a5f2512dd196263e7af","sha1":"8a56b456d3851dd06003845ae859aad228c3c0c8","sha256":"c07826d3a8286ff20351850821afa5e1fbfc39c1ec29e3fbce5a0b91f461ac51","sha512":"9ce9ac1835a769a10bb623b912c8eb382bd97342a6185a4efd34338638e57d5a4719a9156a78a6f8906e1e8bd8ddd4680015081a7d30c0647cb340ce94ffbbce","ssdeep":"","tlshash":"4f0123f614c1ddd0e7fc3326a37c92c25f50c4f6b755611857966e213440f42429930b","first_seen":"2025-03-08T14:29:59.801518Z","last_seen":"2026-07-24T22:01:00.731307Z","times_seen":168,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\ncf-ray: 9555471c8f005690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388603\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UUgF%2B7tccLhW95MsdG5UFMfgnotk2wml1yffPwxzq4Wx7PZMxozBvu%2BMEmrC7YGqHkMrKflv7CVB2PVE84WODTRyussAuYexW5gaYaH5OiXZxPQcGmCv78G9Dk0D%2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1480\u0026min_rtt=364\u0026rtt_var=501\u0026sent=558\u0026recv=350\u0026lost=0\u0026retrans=3\u0026sent_bytes=211200\u0026recv_bytes=14656\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2187\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cec3d001b892f58845f18351c32cbcd0","sha1":"6fde7e7899d9ac817739e031070c4b7efa915717","sha256":"d4767c9977f3ffb92a55be247c7cf8685c454abe702a791de93c44b9d66750c5","sha512":"68dec9528bc0aa4e7cbd98dae58b8f1bd65822232d6251e91b854ae4bc7e3d994774c4733415fff0ae37f22e948d49eb3d0bc884c8ee8938aa6b4b004ff333b3","ssdeep":"","tlshash":"c40194f99c2f7e27d1890c414112d22188af40b355f100afb6a8f4301dd268d76402c1","first_seen":"2025-03-08T14:29:59.832524Z","last_seen":"2026-05-24T00:49:23.38647Z","times_seen":116,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 719\r\ncf-ray: 9555471d28415690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2cf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 792169\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DxxLTmt6PgPxWtUelr8NWCfnpFIpi7n4GD12g4EXSOCb5xFM06l8gpJOigqFh%2BCYusSFKID7JlxlHyjw8%2FwGU3jYz6zd0ZVfwKUaQ5LOmI0VPcCTlFu7SKzKUn7U0Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2049\u0026min_rtt=364\u0026rtt_var=1674\u0026sent=752\u0026recv=440\u0026lost=0\u0026retrans=3\u0026sent_bytes=285921\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2297\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2622412a0b0c4a2caa821f53162589c1","sha1":"b65aa0fb87a8ca21c0c3387ab9d1f0e411fac9bf","sha256":"5cafc181df151b5202568cb1b8fa8dc3d16c51ac2812d34c7bd35a76a92aff92","sha512":"f732a7ac150736cc99c1f6744e41dc4a7940dde515a4bc1e78717a38f0456f593baa18461605d36765be1cae61b796544517513c25f5348c9101507647d8e7c9","ssdeep":"","tlshash":"6f0144d2e3082e7bbcda4af586057847e1e12a0492d564061d534f4e560ab4a3fb737b","first_seen":"2025-03-08T14:29:59.815948Z","last_seen":"2026-05-24T00:49:23.148872Z","times_seen":114,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/Kometa-cashback.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/Kometa-cashback.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 427804\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-6871c\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":427804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40a5cb21a9b36e7eb6fffa4669684c32","sha1":"0a0714289c071b89487f891489abb549ab16b891","sha256":"2f088badc34897aece6763580470117d9beae08ca10f9758fd4db40b060db6a6","sha512":"a5cc2c76ff7c12f8bfbf7beb38761def13fc9df72032eb6f137d93599d36574409013b50b7b0557888230af2688853d01a493fa0b2a2d9bc864a169de894b8a9","ssdeep":"12288:QLGMqNne0CiSdwx/uBq4REyDZnxQx6SzGns:tneS9u8gDZm8s","tlshash":"eb9423c4fe7b131e30bb6322e68f1c25d477a124c22c632029562bb6f72556c17da9ed","first_seen":"2025-06-22T12:57:21.026004Z","last_seen":"2026-08-10T16:41:59.353405Z","times_seen":85,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":74,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ncf-ray: 95554719eaf05690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-28d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978210\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Id%2FGlpWfnKJkD3Kp7g3%2BuHpVxQ56RAEJmAvm%2FIIDHSJtl3G8DtUKcKQ4uc0Jan4p1SLwvYAxWk5Ag7bSnpmVHXZjMZc2ZDTsxoYqCFqscgnQ6N%2BiX76OzYJCRHBNfQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4203\u0026min_rtt=364\u0026rtt_var=6276\u0026sent=265\u0026recv=193\u0026lost=0\u0026retrans=3\u0026sent_bytes=100806\u0026recv_bytes=7436\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1775\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2f564b2f23b734ee442add0f7fcb041a","sha1":"1e5b742a558e2a2101f188ecba0a115973b60cbc","sha256":"a2dc6bd1d5b91f9dcf0899fdbcfd2b1c1306e2f9840d9820817837b9a7675286","sha512":"f12101268f2ccfb7b7f3c857afc388985f7fb0f07dff8f89de3a9c966ccca3972c6bf06ac7166b8ddcc9a34959ea3002aee0ca87326404d8eb77786fd229cdad","ssdeep":"","tlshash":"45f083e4379024d51adc87e80b4556628b644b52b073a0cf16808e06460a29e3ffc680","first_seen":"2025-03-08T14:29:59.941916Z","last_seen":"2026-05-24T00:49:23.528591Z","times_seen":114,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/hu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\ncf-ray: 9555471b8d6e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-230\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VcsKC3mUkI5JYeir5m2KtazspRCrrk2qbWneaZqmmk2958iplrgcC8WI1IReXV1hrHf4v8IInLVvGkiLVd93L1J%2BFoBD5yDrMgieN6x5iQ%2B5BNrAddAd8Npbqtq11Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3072\u0026min_rtt=364\u0026rtt_var=1681\u0026sent=335\u0026recv=238\u0026lost=0\u0026retrans=3\u0026sent_bytes=125866\u0026recv_bytes=9488\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2030\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8432f3eb8c717c7bd7919120a994b37b","sha1":"2b556db494b4763b1344e2544bc418ffcad9e85d","sha256":"4b01784ef93df1a5a6109ac34d9ca8c7a14316f1a1fc8c12e0fe40e8abae93dc","sha512":"b14662b419fb3601b8923c3315efc05e5982add0deeed56aaa013e49c6b261703cd39ce9e221f5fa14f18c1bc3796251ed98affe7de7e0f0da4810d6ffde512c","ssdeep":"","tlshash":"56f096e4d4a3d777c0ab283504da401ced0187642b8c525303f249067345290a44123b","first_seen":"2025-03-08T14:29:59.97686Z","last_seen":"2026-07-24T22:01:00.728485Z","times_seen":152,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/so.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/so.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 516\r\ncf-ray: 9555471cdf925690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-204\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 642469\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dBZX52m5wFO0e0JWGQTJZLNaMPZeBy39TNqLd5GpwCuj4amT0HX4V67m92zURMkS%2FkuAdwxOjEjm10Q%2FIU1W33Dbv79YdaUvkOgl3k4Ak8hOFf9z9emDZ06VS4bjdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1277\u0026min_rtt=364\u0026rtt_var=414\u0026sent=657\u0026recv=400\u0026lost=0\u0026retrans=3\u0026sent_bytes=248761\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2236\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"35ace10af3ca4710426d26e50df8ffaf","sha1":"f7b19e4d8a1b6b405075942da0a9c74a1666d387","sha256":"b027422cb036ae67529e9d706eea844fcb46644e89d012993c250fe2f8518623","sha512":"c67805563555dd97788988e034cc61ffc216c4d6c5efd42ada28c840705a2b25252e5b274a60e6dc74f59dce56f3e5dfd9417ab2d8c8db835689ac91ae816a72","ssdeep":"","tlshash":"27f00ec9f6a0f85288053c3f00a99d6a493041e29eca154b5d926e124972118face2b1","first_seen":"2025-03-08T14:30:00.002659Z","last_seen":"2025-06-25T14:51:19.407687Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/DDayNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/DDayNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43787\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-ab0b\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43787,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"ab18c9785d9391f3d524426a685a9cab","sha1":"7fc7a9f7e5cff997813eab3e348a761a8ef7de4c","sha256":"ae96dcffb8001aa616d8e48b0ff085c00ce8a0ab27bef5d1a31a8ef92114838b","sha512":"ac4d1ed06c779e38c161bc7ac6d4e73d275186a78c166ae487bc2f75155a27b5177262b22b96442ddaf251482b9d8522da3e4224791808a7b142e1355e4ec24d","ssdeep":"768:xY9BPdM3fxslmJxmYcKfVPbmu4w2qpUm92qDfhphwSyA3fgUGzV6n:xYV8ylmJRHf1XF2q6moqVphdjvgUGzVw","tlshash":"b613f1654f0c24d1f542c6ea7ca72e35cbfe7030b62368c5e5c5f42e14d96a2ae9842e","first_seen":"2025-03-08T14:30:00.027868Z","last_seen":"2025-11-17T11:06:56.162247Z","times_seen":125,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":103,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/CloudPrincessHG.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/CloudPrincessHG.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 73550\r\nLast-Modified: Thu, 01 May 2025 17:22:18 GMT\r\nConnection: keep-alive\r\nETag: \"6813adca-11f4e\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"975b3f6b9bcd44acf3b552de85f4aa03","sha1":"ecb6d408e7aa814b973b3e64dce4550bcde29f1f","sha256":"601a5809e03db6637148817b64687e57164acb8a1c7a09423d01e2416199a623","sha512":"ac0bfd583a0b7af60a52effc1065308662d400a66414512f7cedc6ecb2ad7d2a60a6e697dd427a72543205eb51d47298a32c79cc9a5370ad49d1c6bac4791f37","ssdeep":"1536:cx45rl8oTg6iHQPAp90tJGq/EuDSPkfZbXvbGowP1xN3h8tMc6:UAp8oTpiHOtJGqMuusBbXvbRox3tj","tlshash":"567302389ce64917f58b5ab29e0c3f561803ed26466645ffaaf86dc40e014d3e528f78","first_seen":"2025-06-22T12:57:20.97134Z","last_seen":"2025-11-17T11:06:56.079715Z","times_seen":112,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":87,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/styles.4eaf80b61ae0f399.css","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:25.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /styles.4eaf80b61ae0f399.css HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:26 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-20b38\"\r\nExpires: Thu, 26 Jun 2025 14:50:26 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":133944,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f8001cd8d0449353097ea8b56bb38a1","sha1":"220ec3e64bc8a8b58e1a87359ca220ce654e9602","sha256":"7418f36014c1c5fd57d2fed9996dad053db9cb38e810ce061b517ae128e88869","sha512":"7d7073a59c22efd6e3a304122dc726a74fecc1ef6f6ac55ac63e7a39be4a1023eb046780667683b4400caf1eaa7a3c6c907b6d12e3d1f6955f8e3eec859cbf41","ssdeep":"3072:E2/WsHDS+zHCDgh3E3TnmCEoTac+lr4jLjS4iL5F51WLzTfTyWQbW0ZdOlpPOTQX:F/WsHDSiHC8h3E3TnmCEoTac+OLzTfTp","tlshash":"14d31723e835f3a53b13d45362448bec53b8f818fb1726a4f157de0c6aca05ae1b6758","first_seen":"2025-06-22T12:57:21.206056Z","last_seen":"2025-07-03T14:12:38.539581Z","times_seen":5,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":141,"dns":2,"connect":65,"send":0,"wait":165,"receive":13,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/categories/all-games.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/categories/all-games.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-17e\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46d4f8f0f2121c9c1086823e9674dcbc","sha1":"620ad18e08cd996a97b654b33204bbea74e0c73b","sha256":"9fe914218e4782553f71a5d1ab5741b364a0edea61e6ebf3b30e10f70202eade","sha512":"33b0da7d3d97cbf67c6ea4e0a650761779c69304264415a6722f436da4d0936165a26b716326244d71c65a20aeb24c618b7e505eb681b2b5eef8f4169a234c11","ssdeep":"","tlshash":"1ee06890e2684d19c84e5386863c3a3f10b7e4d25359400fef887e10b1d48fa9d726e9","first_seen":"2025-06-22T12:57:21.017068Z","last_seen":"2026-08-10T16:41:59.325942Z","times_seen":68,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/nc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 945\r\ncf-ray: 9555471c3e945690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-3b1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388603\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7pF9qSU22RNdWbTVViVVaLvU1Ufr8ZAQSJRgRSQWzPdqvuJnMKA3paZBEa7ruCR66yS1UIMB3C%2BHD10CWZ%2By4e7gItjyofkGlJsLUDOVLmDx96oZsve98ubzMB6r8w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1251\u0026min_rtt=364\u0026rtt_var=727\u0026sent=517\u0026recv=328\u0026lost=0\u0026retrans=3\u0026sent_bytes=194687\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2138\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"1670a4fcc053919512bcd62dba1dfbd3","sha1":"3728068ace006ba9817620c8dc87eb3696a5f62f","sha256":"72a4f753137e638f62351e52056c8f1e0e804d6329af9ad8b8aef86495ddcf90","sha512":"057be9f77a40f724407a9a2f8accbb37e0200f568cd9765837a5b43e0476d3e5dc16ca3849be53dbd5d73f0c93b5cbfed237ed72773484d86fecac41e232d89e","ssdeep":"","tlshash":"d311c8464953cb70c27223ff931eafc8a01176d5db20820e0060103fbc60718a554198","first_seen":"2025-03-08T14:29:59.877684Z","last_seen":"2025-06-25T14:51:19.41126Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/ZeusvsHadesGodsofWar.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/ZeusvsHadesGodsofWar.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 96285\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-1781d\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96285,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"0a2785d289ac9908c3f0b08d3fa7d67e","sha1":"6524539a53795b5836c9150cba82929f42677b9f","sha256":"b0ed05a3e532af297c32f4ec93db8ccd15fa5cf1dfc37cbe5404e8350cfa3bd6","sha512":"bb2536a4e84f382542bb528793960d757721edffb28ecba68f306589cf7680ccdc2dad3cad5ccf3623b8b690853d70a4035d897481d815c02155946805c64ea7","ssdeep":"1536:sEspO5IIVaPErIhqJvUo0dsLE/hQkFN2wT3BSffkWIugFPD2onrxOrkWZ7PL2uE+:yc/xIhqdUdQkFNR1SffVgh2Y8Zj","tlshash":"11931226cb984ff871e341b5c7853d80ac6b823b363dcb272ed81694c8f4cc6b162661","first_seen":"2025-06-22T12:57:21.150939Z","last_seen":"2026-08-10T16:41:59.275725Z","times_seen":225,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-sber1-az3-20.jivosite.com/widget/status/2256902/ziqY8DLV0e?rnd=0.19303781367038075","fqdn":"node-sber1-az3-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:26.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2256902/ziqY8DLV0e?rnd=0.19303781367038075 HTTP/1.1\r\nHost: node-sber1-az3-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://kometaloft.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 184\r\ndate: Wed, 25 Jun 2025 14:50:27 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":184,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5cef939ae5e61ae749a6e8f374397ee3","sha1":"da90b2ca9c0c49f34690760ca6a868756bd41449","sha256":"7ee3d63110e48bf74ccb7bd711a06dfeff63231e6a1b7aa935072f81ccfd11a7","sha512":"b3e8392196d1deab64b3885043910aa699a611a1c3d60ff819f3303d87bcbd020866de07e4b78ad060d8db9da12fb495f247add32b6fded7c072b65bf8938a5b","ssdeep":"","tlshash":"bfc02226483a05650ae896b0b0f73f0a043801023dc0e51e9114a848002f083c00f003","first_seen":"2025-06-25T14:51:19.412628Z","last_seen":"2025-06-25T14:51:19.412628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2420,"timings":{"blocked":1152,"dns":25,"connect":52,"send":0,"wait":122,"receive":0,"ssl":1064},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/category?lang=en\u0026pr=kometa","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/category?lang=en\u0026pr=kometa HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3787,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9ad544c0e2a793498d33955e520d1c44","sha1":"f56488bb1083f88f9ac499e18e9ea255cd99171d","sha256":"e233a53c4dc26d60a83d27b51ddcc1665deaa7488a9fab63be8a5db58448d9cb","sha512":"7183b6049f7fe66e1bc5b8f1f06219e95f536ed343f4c61c54698c22748d1db9e07e57b1af119a71207685078726053313c0a59db154e6a0a86ebb1cc3589aca","ssdeep":"","tlshash":"5371c033e11449fac369bfc53cdf360629ea125c3dc0ee2aca88d60902956f94727977","first_seen":"2025-06-22T12:57:21.233255Z","last_seen":"2025-07-03T14:12:38.525063Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/dj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 637\r\ncf-ray: 9555471929e75690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-27d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797770\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=234U0aBKGgAOqTzBniOFZqf3D0t9hYKbytZULee1gixExbUbWlNqyyj9sVyRmewi2sJ3IwaB8iPMLBO36teYfy0tI89PJb9czdBBIymEOKBsBAgH%2FlDD%2FMbodzsEMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=570\u0026min_rtt=364\u0026rtt_var=129\u0026sent=233\u0026recv=168\u0026lost=0\u0026retrans=3\u0026sent_bytes=88464\u0026recv_bytes=6904\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1657\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e5ab10539d070e2b094e6dd9459a0049","sha1":"455c3f51a7f0f3b2220304df3d7a12608b8595f0","sha256":"2abd1265e700b3d3503f7b89f8d69c0041a51326d21b1ecf0d308e380e1c47ef","sha512":"4c0e60f47cf99635ff3e738bc6b713b8873d320413b135f4b4341070095dfecca5ce54c655db4c4891d73b2141d0256782067d32a39768614f3d1c28173a6241","ssdeep":"","tlshash":"bcf0bdc34797ad115fff06269d4ff84049c747edf70533cd9241cc200d186057610192","first_seen":"2025-03-08T14:29:59.830614Z","last_seen":"2026-05-24T00:49:23.358587Z","times_seen":114,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/my.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/my.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 845\r\ncf-ray: 9555471bee0d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-34d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1415820\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FAl%2F6HGcYALhupo62oY6zxhki97PFp5zLh36urDIZZRr5K2IhVy4NByE9ejY4L12OTRy4YHZOP3LBDimFItvted90GXtSZ8K6aqGB5DNTGdJJBCs5Ei3lvIBxAta8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1559\u0026min_rtt=364\u0026rtt_var=1182\u0026sent=444\u0026recv=289\u0026lost=0\u0026retrans=3\u0026sent_bytes=167938\u0026recv_bytes=11768\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2091\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5721e18db757877cd5f271d60961ca7b","sha1":"ec9c440a3b6dc5a5df1568514ee92d1c5997c47e","sha256":"6c68ec6876683872ec7c91fc37a78b3c3c944fb3ac20c72a0f9680feca1c30fb","sha512":"be87ed771da8eb0e51a068ca16d18f904e9963a1fb81c9563e6a35a6584e3c791b5f8e6fd2c7940c157f9827e1e39fb13902032875f66a084cbb416b1dec732e","ssdeep":"","tlshash":"0e0152d75bb54c70ed382df65f1d19d8fca824199f180237428158690ab1e96e919c0a","first_seen":"2025-03-08T14:29:59.885701Z","last_seen":"2026-07-24T22:01:00.700111Z","times_seen":138,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/FireMyLaserHG.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/FireMyLaserHG.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66598\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-10426\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66598,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"b0b7d3ac64a423452e7b6aa580af0410","sha1":"4493aa0990d48fa40eb3166b5c1888fc19899399","sha256":"4179cfd27a3dbfdb19b17d6a3b806f4adbcff5ff59dfe484539845387312f6da","sha512":"d84d3bc3ad01e7016cf7f6e1491369abcdcd17243348527fa7a45c4798bf30f558705ab1ff392bc169c343036ffe3ddbb42fb589728f66073a1c343e66164295","ssdeep":"1536:rCX83NpBz1ksNKqHTwpD/def9/antpmz6zrasRfirUFHHb2f8dhDC+mj:C6PBKsNJHADkanH2sRfjFHyfAh2pj","tlshash":"ee5312133b86bad8f70d737ba225cb342cb4963560b93a4976ed915af203931d0631f2","first_seen":"2025-06-22T12:57:21.164905Z","last_seen":"2026-08-10T16:41:59.3565Z","times_seen":219,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 578\r\ncf-ray: 9555471d18305690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-242\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2282499\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6JghfN9%2FbtIglOYsQFMnOA293%2BdEolFFHZyfL9aegWxM3bDyEkWMspqTC5%2FONFRaUF7dvtIa0Psu8b3AtI%2BWD5Xd00PmL4P0vzOJd8qqDo2msttLeglO5XOkjIuMNw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1367\u0026min_rtt=364\u0026rtt_var=661\u0026sent=741\u0026recv=436\u0026lost=0\u0026retrans=3\u0026sent_bytes=280973\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2282\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b11ec74a65a222049ff0645be4448cd3","sha1":"c142a874656b7b01b5eedf57cab6cb4b487c8f32","sha256":"d05b00ae8539a82d3cdea2a8c3092dea937eb3660da277ebbcae0a983d3a57ed","sha512":"77b885aca567a334f22e2c30f03e8f216af1d0a6785a0fc705e4451db0ce39fda6af0d0644d413e6581e79d296cdda58589e57a7c2cbbff300fb22070fe9775f","ssdeep":"","tlshash":"1bf041e16a029b9490a91f75c00c057894952602e92870cd0f1d595d223b58da4b920e","first_seen":"2025-03-08T14:29:59.957702Z","last_seen":"2026-05-24T00:49:23.654816Z","times_seen":115,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/wtp/gelik.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/wtp/gelik.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 32298\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-7e2a\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32298,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"14381ab8c87dc8f4f8cc0441677e675c","sha1":"29d9c5e26a34b77655102737f50b5e274838b4a5","sha256":"6b968ca73b4ed241cf42d3a6e4e4bdde326bfe3f908253b560dc75b650a8d0d9","sha512":"4bb7a82b642491b00622a6674a90dc806c9a30a9b09b37fd3de159f592365fb3b5b3fdbfcabafcf77a9e36325713d91064b4cc06a474853722f90fbcb68912e3","ssdeep":"768:OzDOsOb1Ltm/5rAhu+PhPQnqTfrzZ11OuNTNin5d:OzkQGhLPQnq8unin5d","tlshash":"6ae2f1a7d926b91e111fbf10eadf9e7b3702018fe332165f90a64d24f0ab653dd12221","first_seen":"2025-06-22T12:57:20.936551Z","last_seen":"2026-08-10T16:41:59.287199Z","times_seen":82,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ag.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ag.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 698\r\ncf-ray: 9555470f8d525690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ba\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 792167\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GqFcb%2BFWZLf07l77gzheyCIWVy9hBy85eFpz7fsThJCMMiTa%2FRY6MdgJYwcsl5exXRGSF4pRTkeGNvi47eLSUrU2nL%2BdqVCSorwYjgwEXfj5ja%2BYDWGKEsS62VNgCw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3008\u0026min_rtt=479\u0026rtt_var=4738\u0026sent=41\u0026recv=26\u0026lost=0\u0026retrans=1\u0026sent_bytes=16706\u0026recv_bytes=2268\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=128\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"36d31ea3ae228c27c7e86c945613e13a","sha1":"2a17e30d848ee86a0a36c36398912daebe42a171","sha256":"229b2fa20fb75cb2651fbcc074ab74bc12553207b6fb4a7925042b5ebe312c55","sha512":"9e47a2114e581375893d56bdb4f183459cfb0d0ead2a063113bdd928bec0f2d9e8ac491be66ade4dfdd8135aa34ff479b3397674e79e4532f1dcaa4eadd0191d","ssdeep":"","tlshash":"cf0144d857499cdb6f1f7491a80c4fe168455b57710cd206e0bc056673153a63197963","first_seen":"2025-03-08T14:29:59.905297Z","last_seen":"2026-05-24T00:49:22.976211Z","times_seen":114,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\ncf-ray: 955547102e335690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321087\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3ptneIYMGI4Vf8tHgHBcBZ6HG6sOAuiJZF3OWqDwES5kFMDod8xHkaUQVNcD9NwJK6A6KIPyq2ttDoq6HV4rdSRWQPgLuaDIz9aef%2FFZ8q7mes2Vx6cAVxWdh3sL8A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2978\u0026min_rtt=431\u0026rtt_var=2568\u0026sent=108\u0026recv=55\u0026lost=0\u0026retrans=1\u0026sent_bytes=41023\u0026recv_bytes=3788\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=201\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"888f9103f347bd75d092273c98193320","sha1":"6b260632290659c72a1f5a0409e1f4808ef5e76d","sha256":"928131163fa3e997e095fea7d3157575c91ac934079eed601d05c358a983febc","sha512":"04bd18e87468a31612db58f4e3c355a6fa2cb3d76eff653079c2578e958e744bf4606696cc02c5e6f665a169514d7c38f0fea3e69002e9bc5fd6fe00ea17578a","ssdeep":"","tlshash":"1e01b53c6a42d41befa34e8299cbc0a2cf3481a5d0f32c0a5062098d5aabe47f1c3858","first_seen":"2025-03-08T14:29:59.872672Z","last_seen":"2026-05-24T00:49:23.68803Z","times_seen":113,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/il.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/il.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\ncf-ray: 9555471b9d875690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-284\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SOXmA9hLuOzpQYo6t9zya4qZWHPTv4XPsOa6k%2FGPvKpuWVYwwx2TfL10xLcER2%2F0ydN2EAjBW3%2F%2FyuGW9zfp%2BcnP7wpL8CSvTMCMUTQlQW8UhOVvRjT%2B6D1mROgR1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2329\u0026min_rtt=364\u0026rtt_var=1237\u0026sent=355\u0026recv=244\u0026lost=0\u0026retrans=3\u0026sent_bytes=134305\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=31\u0026cid=7185efb47e2cc7c0\u0026ts=2038\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0b3755af2667f255adaae9c5026106db","sha1":"0f5db50a0784eb637a7a38ec240b466e55eaaefc","sha256":"3b6f7c238a129011aa1ce64761c2dad751a2aacae31ce23aaeae1fc204b32a12","sha512":"396a757558b0f78bba27320f92795302df3a306a564e416e94832d55252784197063e0c6205d20634ee6a201f697c9a109768ffbdeb94edf0ce54560a070b8f3","ssdeep":"","tlshash":"bbf0c87592afe5a51ea50330a512e108007313e13c5b2707070607252332789d7b0103","first_seen":"2025-03-08T14:29:59.811653Z","last_seen":"2026-07-24T22:01:00.716721Z","times_seen":142,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 647\r\ncf-ray: 9555471c4ead5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-287\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321097\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c6zzgF0rHWiNDAiCeorsVmr0jPItkmZBCffs%2BBDxJG3ZRo4UDpuNhYbxvgaYxpx3%2FMo%2FyK1ftTGlqT%2BAz9NDtw3rDctM%2BwhJwWE4LZvH0aEcXDutsxzjBdA9aO89Hw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1369\u0026min_rtt=364\u0026rtt_var=373\u0026sent=543\u0026recv=337\u0026lost=0\u0026retrans=3\u0026sent_bytes=206225\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2147\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4eac43b3d48696f0d8852aa2acc98a8e","sha1":"e712135c957d7788bcb4f67da452e15dd7cc3f62","sha256":"018e856422df85363af38c902a4e8556527663fcca7012197fa3b11fad079db4","sha512":"436bf4b281fef300e5277d110340f72e7869bc27be02245b93fe9f227f82111f05badf8b34af0c8554831775aa8aa918c64e46a6327892e81cda46408cebc16f","ssdeep":"","tlshash":"16f068c0db463f68aa15487b0b2d504b7c1e0d51f2343991074768003bc3d5c6654eaf","first_seen":"2025-03-08T14:29:59.967366Z","last_seen":"2026-07-18T21:55:13.740159Z","times_seen":127,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 759\r\ncf-ray: 9555471cbf485690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2f7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1181145\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RbfH5Cne6l24hVQI1HKjZJqmmwORAEcZTrCjKUb6C7gpyVQsCZbbbuwAWUeeseTwsgWvbdKz1sTYoqWDREYr%2BapMHmLSa53711AJR0%2BcIGbk4WCWa3J0PaaVtmpw7g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1500\u0026min_rtt=364\u0026rtt_var=551\u0026sent=601\u0026recv=373\u0026lost=0\u0026retrans=3\u0026sent_bytes=227085\u0026recv_bytes=15872\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2213\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"290a7c7181d810bfcb6afc7de1f3789d","sha1":"bff43cd9481cafe46337809645ed674fa787edba","sha256":"8842a5cba6c72519491c33312457b274cf8cdd495837bf449c25decfa7c71dc3","sha512":"16ca3dfcb5eb7f45077f4a8f6e8f74e8f8eeb621f81db68f3626362df2d43aa6ad376cfc91fb84b376ec49c37bb194c81398e55fa91b62733f6a4865c1766f64","ssdeep":"","tlshash":"3501b5b08b4dcdf3ccba10573eaf9e74ed0a2ffc58a850421e664d68fc10342a69094c","first_seen":"2025-03-08T14:29:59.85643Z","last_seen":"2026-05-24T00:49:22.980955Z","times_seen":114,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 650\r\ncf-ray: 9555471ccf6d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-28a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 763119\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g%2Flha777u02wLjfR1%2F22w4KmbQFSXWPBYby9b2Q38kNMQE%2FktzAvF3WsYs5%2BlZyYmJs6kHTHVvn7KTTTVmEOPku2iEW4Dn8MNBJM7Oo%2Bmoxyrk3zVvk3O6m8O6yjCw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1116\u0026min_rtt=364\u0026rtt_var=659\u0026sent=635\u0026recv=391\u0026lost=0\u0026retrans=3\u0026sent_bytes=240148\u0026recv_bytes=16784\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2228\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cae101912005fcb42940d3c529743ce0","sha1":"32d5bf7808b2887ef2e268d70cc9a6263b32767d","sha256":"a6682c0dd97b2db81fcd8fee07714cae418062cf53617da5d0a7cca2f1400ed8","sha512":"cb5f15d1e5b9b4f209233412e04b0eb594a57e024ea594007a7c7dbe919e0f2292a192987ca982567f61383f4d57388908d6b9a43a9d6f3fa2d8e3ddcc1f3f1c","ssdeep":"","tlshash":"3cf068ffc7899f10c5c84956c10614d8eb35641733fd71f4731682552d9ab281e8c146","first_seen":"2025-03-08T14:29:59.900166Z","last_seen":"2026-08-02T03:46:50.0226Z","times_seen":201,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/BanditMegaways.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/BanditMegaways.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71233\r\nLast-Modified: Wed, 30 Apr 2025 08:31:40 GMT\r\nConnection: keep-alive\r\nETag: \"6811dfec-11641\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"261050e6517b236896050f441f587454","sha1":"05ed82ca4b6b217dcb34c89276081beb954957f2","sha256":"16b7cae0f1719ad54f50a9c65f1ceff71b056c29c6b7ff510177cc1b1b13a81c","sha512":"ef202125660aa2b9338049e781c2f111a30b223723977fdd3aa321a502a518ede15a24d9381e513a5c8c72e86f8e9553cce355105e691d0f0585cdcb1a58a084","ssdeep":"1536:Iqa+w6p9cC06Ha0N/sJN3MqGRad7buAqdams0Z14mHpZtNU3Em8:Iqa0n60NUX3YROHJ3ms0Z7HpiEm8","tlshash":"276302c0b740d7cad61f1f6e927a1de254cc269babf2cc2862c27c1f51ea9118b27107","first_seen":"2025-06-22T12:57:21.068248Z","last_seen":"2026-06-12T00:18:49.575071Z","times_seen":9,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/astroPay.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/astroPay.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-1765\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98a36d27b829e6de9be09abc8bab1cda","sha1":"c2122afd6703ae0013d0e1adbdd28c67ca74973d","sha256":"172c7dc8397760f691b6335433862132add82dcb72c3ee58b7d6f5d81a508699","sha512":"8cdad17709cf22c03fb25164bbfe5664903f5acc8c98f1ab7bb86cf53024decaddea8950fef8eb9af8c85bac7ed32afa34470cd4cfe89400482218a17b726272","ssdeep":"96:syqqHYHn7+X1/3PXnCq7do5h1ZBXJL2x4/sU5S/RFdeN2mjjM4KqL2VcmFCEc/Kd:suJX1vPn7dqzXJLBsSS/QFjM4h2imFCm","tlshash":"71c1b6e6537892bc45c79f5eef229951932fa0bab516c2c0ca6ddfa450c7c88f707850","first_seen":"2025-06-22T12:57:21.202247Z","last_seen":"2026-08-10T16:41:59.381266Z","times_seen":152,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/check.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/check.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-226\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d18fe43f1673acf8ae09c85b9a605bb4","sha1":"5c6303a238cb94797fe94ef14a0bfa2c8af32820","sha256":"96aebf0a51eb876e6044dd22fec20d6edd798f924e3dd401227288b2ef07eae7","sha512":"9e66ba7bc5035fbe2f05c1f77a9c71157d7b72e03f7971df6afbf44bfb2e11498ac082a966e5f40834d19c03a5a04e73c023ab93bcb4b4e08332d4e1b22532a5","ssdeep":"","tlshash":"7af0ebb5821dc4ca9047ca30ca760c9468774cfe8ace10d4e6900c603c801a4c801a6e","first_seen":"2025-06-22T12:57:21.091925Z","last_seen":"2026-05-24T00:49:23.398471Z","times_seen":71,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/do.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/do.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 618\r\ncf-ray: 9555471929ec5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-26a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1428109\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qfheYfXW6ZCnUhDhe%2BgLRLvWhxFxnbOrQparVwZrlgMMC1tWS2jpgP%2BHHAWkFlo0mGq1WEghEGD1XEYfRRL5gAxonKo%2B0D81wO7Q4B1fWsup%2FN3vSA%2FcYdl%2FKrkLEQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=601\u0026min_rtt=364\u0026rtt_var=208\u0026sent=224\u0026recv=160\u0026lost=0\u0026retrans=3\u0026sent_bytes=84884\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1655\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3da4b0ba3cf317165b110660dfde7755","sha1":"3a6138c355d583aa90937014e6273d61af37bf06","sha256":"47b8cb0e7c20706cd41e1e28b3b6dad9ad273e8a2281b1446896cb3852b03c85","sha512":"f3a8bb515884932bdae1db825b7f92915d5018c32168eba2e96d0ba8a3faf64da6ce3e5aff64ae85d812c0053929984e9113a8a2d3b0cebb9026a9caea3d7468","ssdeep":"","tlshash":"fcf0b7f151c00875cfb5e3e2f0e41918d182ce19d33ab04b6141ea384c11bc5d801141","first_seen":"2025-03-08T14:29:59.994705Z","last_seen":"2026-05-24T00:49:22.843929Z","times_seen":116,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 535\r\ncf-ray: 95554719eaf25690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-217\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qWOKcXe6deOpp%2FOHzANJI6RshJHqz34nXtYB9tGR30LdlvTxcRvejcxRelTKC8GFI%2FAV%2BmboXLCM4vRTOpCe3fPodoPnonnyFRaCGOkpIysRZlSU5El6nNw5UV9QpQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6418\u0026min_rtt=364\u0026rtt_var=11019\u0026sent=258\u0026recv=186\u0026lost=0\u0026retrans=3\u0026sent_bytes=98540\u0026recv_bytes=7208\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1766\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8031c3a1df8ffc5c56d71f824a335bc8","sha1":"b3b22e16fcd54ef298a0f11aff0526383ae8612b","sha256":"48684b0ec46ee8cc0ebaffe3bbca9873316bc56c7e33866360f5c2bb225abb2b","sha512":"7505caf854787c73e6fc71027607350b96f859328febcf973fa4f1a08992a622f78c6b9e8978709b96cab4e61f25d78b82a6c6a0b59457816c0217cc3d2e71f4","ssdeep":"","tlshash":"44f075ebbb4186f8e5e922508301bc0dc429220086c1b6799c5f6cb12c13350b39e4ad","first_seen":"2025-03-08T14:29:59.780739Z","last_seen":"2025-06-25T14:51:19.429094Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/th.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/th.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 579\r\ncf-ray: 9555471d0ffd5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-243\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 763137\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ax5fyfTR4S1aBPdaS0izP6F0a%2BCxBN7axbvuBlQ%2B0%2BoN6RikWsRzmcl6vOMPsum7HAjm37YwLTEKAVHnc1KNN0L9hVmhhwlj31KppayFe6eOEA5dFz%2Fo1%2BsBBZ4dMA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1601\u0026min_rtt=364\u0026rtt_var=787\u0026sent=714\u0026recv=422\u0026lost=0\u0026retrans=3\u0026sent_bytes=271289\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2264\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ce9baa1865b1a2195cea41859dca3786","sha1":"c1d58d6c1bae88e315a95d2c5226ff9f27260f09","sha256":"7b8ea7870731cdb67e32407e4a258ac92a8d91af7f750d3f38eddb6ddb3fd287","sha512":"eebc573a6748e596fce75f20e6edd334100fc86353a3a8cae007435b3865a81e130aa455518d69d4d8d58dc4c5f9f3972e0e773ce7c76eb40d9c689a6a5ed818","ssdeep":"","tlshash":"abf0e179a438df5c9c7a2612e438ace2ef9384aa4d294844c590cc7d2740f2ae59c840","first_seen":"2025-03-08T14:29:59.969441Z","last_seen":"2026-07-24T22:01:00.691081Z","times_seen":167,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 766\r\ncf-ray: 95554715cd765690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 123712\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gApZYp3szSUNbP0VSYih%2BRQJTuyxsE%2BCFiHdxqNQwgysqRVnXr7d6zPCODSfP%2B2mKIul4PYBq6I596Kt25Hy3UPZ%2BLPRy2E2TUcj5wv8%2FVrw2LKPyEagPYjDweSnlQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1922\u0026min_rtt=431\u0026rtt_var=1427\u0026sent=170\u0026recv=95\u0026lost=0\u0026retrans=2\u0026sent_bytes=64579\u0026recv_bytes=5004\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1104\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4962d9bf7b1b287e1878b7605b8d14d1","sha1":"62b84068fa0cb418a2fd9bd30c5063f0bf11f433","sha256":"b3cdaee22c655de9be5ba931a01f22b49fbad3091d3463e5c3e0c72239dce99f","sha512":"73d9d5b7a1ff8ef3611b76f77f34fb878864bfd59da15fc2cf11e969b5704b7d0171150756542d3036c1667229b1c04c2acfe4905d4e20e4c2b03176ed84cdd4","ssdeep":"","tlshash":"d5016595663d7c46da118123ce1bc9bdf0251e74d43fca81ce117bbbd2360c944e168d","first_seen":"2025-03-08T14:30:00.042681Z","last_seen":"2026-05-24T00:49:22.668391Z","times_seen":116,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 838\r\ncf-ray: 9555471a5bd45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-346\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 899795\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hYxLrsPbf5V%2F9luTk3jqCPF2n5nhg4uD1xfQas94LUqc7V7FKNFiXSehbwyh9IGjB9EwZ%2FD50MswByJaDV2Jxm0b%2FU%2BhxK5TeSAW1uqfGDRtTZnZn%2BlGerwyjcn%2FSw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=8113\u0026min_rtt=364\u0026rtt_var=11660\u0026sent=278\u0026recv=199\u0026lost=0\u0026retrans=3\u0026sent_bytes=105707\u0026recv_bytes=7664\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1846\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"ea4a703cd2292c371b4622bacc2c40bb","sha1":"e11a14f2e7c386bdd79c6c9d28aade8900ab0577","sha256":"37044a671451f66f39b8df8d1e937ed6ff98216f5d1a96afadd75d6d19f7f570","sha512":"12aa8ad5d509115491ca1cf0e121ea6c925785d326fd27384ec1d4cadfa8a4c3efec7dbce5da197bc41cd34d40cca61163a1e51fc02e0aae5a7a6a94c60d1fcf","ssdeep":"","tlshash":"280196ad95366a70a78700114b4068b15c274fa131aa49a810b22dee3693a672472360","first_seen":"2025-03-08T14:29:59.995816Z","last_seen":"2025-06-25T14:51:19.431845Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 678\r\ncf-ray: 9555471cdf915690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MlZssY6qKUb%2FUutX6fAUemScwT6UOkktfiZqXXW96IlxoXEY392MFUlaVeBsgNVoq1lfuiaPUMqCISWi9IBqDHQZdwupdSg3VvYqzM9yZ%2FjWiAS7eVVkxXgyuque7Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1556\u0026min_rtt=364\u0026rtt_var=1388\u0026sent=678\u0026recv=408\u0026lost=0\u0026retrans=3\u0026sent_bytes=257735\u0026recv_bytes=17392\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2246\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"46a6e800b9a1d30f350f90cf25524158","sha1":"cc303ee5fe10a2acb0d55367a887b1b0e33c7898","sha256":"593b5bcb75fd6f0f7f878d461141b99033fc9fd34e4954d2d5f80aa8b7a83b01","sha512":"5ea631cbd77dc7e8c274ab531a13162fb64a4f2679d81b0848bfff32deee5000a5a7110af91b9a48430aa5202e094f1721622b701f39b35ec9c7a3c0829b62bd","ssdeep":"","tlshash":"800183e34210ce05f7fd11198024fd9ae826024cb6236ac218994e733ac714e9db4355","first_seen":"2025-03-08T14:30:00.040299Z","last_seen":"2026-05-24T00:49:23.695953Z","times_seen":113,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 689\r\ncf-ray: 9555471cbf4c5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ABbCO10FTKRhTtbppwQSlm1jIUWYjQknXJzBFT3R5YJZOPYndHh8sTzDUgyUhtl1iS3EF4jpfefnSNVcv2RnpSVrpIgkqTVS61XFjniTM4Wp22YLc6AVFfQhZ7OkwA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1276\u0026min_rtt=364\u0026rtt_var=466\u0026sent=613\u0026recv=376\u0026lost=0\u0026retrans=3\u0026sent_bytes=231983\u0026recv_bytes=15948\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2216\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"618d27e2342b2716bbafd66161f9e6a9","sha1":"3ee86556daced2ef9315aaed25a2a0828542cdde","sha256":"2103837d96970acfa3466f5f728b2d106688839d217c651f1aac221e334798c1","sha512":"c1cb8f471ad4fc34e28eff8251986f5f1870ac13b921679e6788a2d49814eda68e25e8bd06e100b0714931f7a597ff903585cb27c1c4259a191d692308c46cdc","ssdeep":"","tlshash":"1b0199d33e081d76b70d06263253653d3a00a2fc34441c19a6489e04ac10ad381c264a","first_seen":"2025-03-08T14:29:59.765115Z","last_seen":"2026-05-24T00:49:23.487989Z","times_seen":115,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/categories/slots.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/categories/slots.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-194\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":404,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f0221b3b1167d4c8c77539b4f55cfc6","sha1":"5efd109f778c3fb9ebe0bcd1f8b94de348cce651","sha256":"5f8b129d584c3b016f320a62381ad637a3b3933fb53fae47de0863dcf4fcdf8e","sha512":"094842b35c36f19abd76cf0d2125b01d989b7fcc453e901b13251d847492c3088e4b5993d30dc43fc99d2ae7eca43c4cf00ff643ef2f058c0270f41418da960a","ssdeep":"","tlshash":"d1e068f4926c46acb04f073b8f67878ca71ef4eae4464106b1cc263a3301092d9079fc","first_seen":"2025-06-22T12:57:21.043958Z","last_seen":"2026-08-10T16:41:59.365799Z","times_seen":144,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 592\r\ncf-ray: 9555470fbd965690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-250\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321087\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BCvwLNvp5cblWmBQ7HlgrbKOba9pLQYW2BAP5H16U1GQugfYBiF0BpKInikYTgA%2Fyk%2FEbgE4P5Hmeqj8zBbwoZBncG%2BtibnlXjSGrrn7sKt0t7PlwuCbK34FywQ2KA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3898\u0026min_rtt=479\u0026rtt_var=5333\u0026sent=50\u0026recv=27\u0026lost=0\u0026retrans=1\u0026sent_bytes=20259\u0026recv_bytes=2268\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=135\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"727aba397dafc31ad769739e36833550","sha1":"a5388b26c76294d1896d46945abde7dd1d636b9c","sha256":"a46542d5a4f6a8412a0f3470d2287ed27bd68f578ab74cf224ed94290f8ed93a","sha512":"4bc0c255ce2732c43525f2588cf106674ce26c861036fe0e6df1791017841a554eaf22bbdd61791347c3e753cd2f31346c95c82124bd09c8f8106fd260610308","ssdeep":"","tlshash":"c6f0e1645f411c66dced561367c29b22defcc7768ce66137015aa4fa630462aa1b4048","first_seen":"2025-03-08T14:29:59.84522Z","last_seen":"2026-05-24T00:49:22.956017Z","times_seen":115,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ck.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ck.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 666\r\ncf-ray: 95554717b8115690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321088\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1zuoDyneOgAn%2Fz7M758DnGdvN%2Bwn5YjAra%2B2%2BKUWNGAG3Edj7tbR89xj11F1rVmLMx5L89h1us8zwKmXD4MInln3xAArtEf5bG4FsR7IcsOL%2B%2FGA6a8udvTsNUFeaA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4806\u0026min_rtt=431\u0026rtt_var=7759\u0026sent=178\u0026recv=104\u0026lost=0\u0026retrans=2\u0026sent_bytes=67293\u0026recv_bytes=5308\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1421\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6d565c836e6dc581d3c2e5fad6f03448","sha1":"e6d99662fc2c51aecd179497e80b12ddddfc0da5","sha256":"50af200a57e8a496d287f83a17742a7c72837a2b8da949b3628ec157e12736d1","sha512":"d419dffb7299c9857e3fd4f499398b61f33e9c55b5be03035aecf8f4b713d330c06e5b27b7144f8fd33384ced8eb3af6ededf24b1234b0d32fab0c8290f8ceaf","ssdeep":"","tlshash":"7401c8cc4314ce21798c408ba00d443cd5fe05502691724dc42de131e24378dc3fc86f","first_seen":"2025-03-08T14:29:59.866562Z","last_seen":"2026-05-24T00:49:22.903352Z","times_seen":114,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/fj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 841\r\ncf-ray: 9555471929fe5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-349\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797770\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AAYPAVlpQ1j82Q02qJvZ%2BbczP0YiTKuTp8Etsnpk%2FJuyQwM9NnE%2FCOl5EBceCV4ZD9CwOFl8g6UMg9B7Ix0wzrYPbN3yS7LQzLpNToabI49qmSjlTWThIvhmWA00jw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=913\u0026min_rtt=364\u0026rtt_var=525\u0026sent=248\u0026recv=180\u0026lost=0\u0026retrans=3\u0026sent_bytes=94524\u0026recv_bytes=6980\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1675\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"08a4024768554ea21d453a60e002a623","sha1":"ff75137738991c3ea7b5b07841f3331b2d2dc0ff","sha256":"cebf2367d3fc879623c4eefae30bb28ab2799ddbb284ab046943f80f16835503","sha512":"679c98d63fb4c7f0f873346934cb9d15d676cb88815c69e5e6cc5c9470d11b4590ced3cdd0cbe17b5db6315f9ead9c18926c75b23df79b79e623242bba3bb181","ssdeep":"","tlshash":"330186e60318b379bea5c39ad70346069837a363b03d91ca9492bd1c44036e85fe8d06","first_seen":"2025-03-08T14:29:59.791829Z","last_seen":"2026-05-24T00:49:23.521669Z","times_seen":117,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/hk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\ncf-ray: 9555471b7d465690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-1f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152715\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DbV9rqmgte%2BdOaUtm5lpNE4VwfeWp3KQXuFcPuIfv81T7zbIoF0zLVDdi9CjW%2BsCHbTOwEp1jrjq6TZoAHMFm3yQZaV1QZKWcakU584GewN1gbSb5jROhwe1%2BvqHAg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2974\u0026min_rtt=364\u0026rtt_var=2882\u0026sent=325\u0026recv=225\u0026lost=0\u0026retrans=3\u0026sent_bytes=123537\u0026recv_bytes=8652\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2015\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1be20dd5b1d374e45d11fc620116c8e9","sha1":"4547de6bc39720313f745f8febcdb15b231b5dc4","sha256":"d6c641621067bef14fc333dc70006d387278cc05c579072312f6dcc92b273b5d","sha512":"0ab36a66c693d71cd31d714e77e87a3cd08e4640d8f091a727af06cb4de02316f54088df8e55fea3d77ca3e71c2d716a76c663a8b216ed6a941ab35417c49d43","ssdeep":"","tlshash":"1af00edeba042e64602a833a987687a0d43b0ae98582bb6e71197ecc07c12af40d0691","first_seen":"2025-03-08T14:29:59.875009Z","last_seen":"2026-07-01T02:50:47.736887Z","times_seen":126,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/jo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/jo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 708\r\ncf-ray: 9555471bbdaa5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lljv6qz4LmXAA5MZC%2BmAAEeOjw2nqZJKHAtI1xZsHdU9eOYNBt51VlM0NYF8nwN%2BPDc71fVae%2FB1Bei7rTn%2FkG8BQTkhscAtA%2FYWFP2E45CsdRmTO0VR98kxuFTqWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2059\u0026min_rtt=364\u0026rtt_var=1168\u0026sent=374\u0026recv=259\u0026lost=0\u0026retrans=3\u0026sent_bytes=140193\u0026recv_bytes=10476\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2054\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"71f9bf10c6107d62e2c17ef73f46bb7d","sha1":"40cb8b1f136f3c00ebe968b51c4a8f1ce12082ae","sha256":"bbaba727357a371b4334f5997e1e6a7c868cc3a794899fdbbfb42ddb83ab3472","sha512":"377c8092d40e6e4bd8fc2f24d2233d0a1d9ffcfec1a1d885b95266023d946985b467e4e025eb65115ae3dccdb929efbe9924c3b15a5f4354abe462833e190280","ssdeep":"","tlshash":"7f0144e723084ee8fcae1975439f98b4c62258189b28170f196a4519ed934027b641b4","first_seen":"2025-03-08T14:29:59.812769Z","last_seen":"2026-07-07T17:21:00.650135Z","times_seen":121,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/yt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/yt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 787\r\ncf-ray: 9555471c0e435690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-313\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321089\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LQ%2FViXAF7b8TwRMlV4YPuDfib5wHHmRX9FA5YgIUQiyDupPFTgIvR5E6RtokUHlZcaw2MFJ70PBDZS9qNbhDreitih0622lONiJ1X65yTnX4clFth6QukM7X6TFfxA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2254\u0026min_rtt=364\u0026rtt_var=1771\u0026sent=467\u0026recv=301\u0026lost=0\u0026retrans=3\u0026sent_bytes=176855\u0026recv_bytes=12376\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2110\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9b294e247078a87fb95da3c59f6861fd","sha1":"0295079e750dc5236d064b24a3b1b336021395a0","sha256":"ba890ea44a98663727eeea9798b2177917fba6bbba7ad1845e4a95f53b2b4c92","sha512":"950d3e1d19588eed9367ed5754c2dd212805310754f9fd944c0bca6c29b3f8398d62ff1a8efa4f1457301c4ecc536ceca4dbf57db0b13eca6c6cbf64a9979d77","ssdeep":"","tlshash":"3a0175c40bc9de305ff863a8fb6af4ccdf2181aab02080c981d915028ae3968c278865","first_seen":"2025-03-08T14:29:59.848608Z","last_seen":"2026-05-24T00:49:22.58031Z","times_seen":113,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\ncf-ray: 9555471cffe25690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388601\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZAjxlcjyHmh3rERsKDj7z0lSgNF1KzvqqapT%2BhOPodtW1vGyRJ8XtgR0ThU3If%2FqUxRVHu6J54ybQAFhDIqbl9r6Yq%2FnT6mgfo0o1A8AJzU%2BdBYyZ3uXaqBrQuOSew%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1398\u0026min_rtt=364\u0026rtt_var=763\u0026sent=690\u0026recv=417\u0026lost=0\u0026retrans=3\u0026sent_bytes=261297\u0026recv_bytes=17924\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2256\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9740043a6ac2a5f2512dd196263e7af","sha1":"8a56b456d3851dd06003845ae859aad228c3c0c8","sha256":"c07826d3a8286ff20351850821afa5e1fbfc39c1ec29e3fbce5a0b91f461ac51","sha512":"9ce9ac1835a769a10bb623b912c8eb382bd97342a6185a4efd34338638e57d5a4719a9156a78a6f8906e1e8bd8ddd4680015081a7d30c0647cb340ce94ffbbce","ssdeep":"","tlshash":"4f0123f614c1ddd0e7fc3326a37c92c25f50c4f6b755611857966e213440f42429930b","first_seen":"2025-03-08T14:29:59.801518Z","last_seen":"2026-07-24T22:01:00.731307Z","times_seen":168,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/GatesofHades.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/GatesofHades.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 88235\r\nLast-Modified: Wed, 21 May 2025 06:07:18 GMT\r\nConnection: keep-alive\r\nETag: \"682d6d96-158ab\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"3b247ed7dc30e0a741dc58fe97acf0c6","sha1":"90187fe070f9770e5e06eaa8891a9803f56d0c7a","sha256":"fff7bd3035f98cc718fe6e2bf6ea11aa43267c2902ec1d5411ba6b6fba0beeec","sha512":"d72b9e9321351ed887f886cab6337d289dc389841c4b314e5321ae3cd03a16e717b27ec95daf9b2943a9514d0d0af4dfa1794061b7953b1a35308fc724d5a5d1","ssdeep":"1536:gZFPjxA5HP3gxeq7s3Y/2nWwvgtNmSuVpLn2QYwb34aGPk0FdRhQPQ8j0V:gLPdA5HGeqpeqtkS+n2Q13psdRiPQ8Y","tlshash":"ab83120a21dd5df6fbc7150a669b8f1bb2fdcc5ca33395db25c20498bd903e885ac294","first_seen":"2025-06-22T12:57:20.970067Z","last_seen":"2026-06-12T00:18:49.638074Z","times_seen":15,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/polyfills.113be87ba1ebb95f.js","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:25.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /polyfills.113be87ba1ebb95f.js HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:26 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-87f0\"\r\nExpires: Thu, 26 Jun 2025 14:50:26 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34800), with no line terminators","md5":"0edccaf19a2c2d9c2c10378bf6866983","sha1":"5d019d4642ecc28cf6bcdcafb87cfb8d59e50042","sha256":"cbf75914ba20aa58ba50846e0e80f257629c2cbb177cafcae1ae4e1c4bac8d4e","sha512":"149f26bfc6061800190925297282eb4f5bc2b59d9d8e84ceab3179a9cbe9130f06e4b63fdc62692df12e8e663e9a56a2efcc0cea20151e8f7d2a8b3211789eff","ssdeep":"768:rciJfaBqkSOKy9oHIe3qKO8ZHp5rgLaQNruNVswANChBYMcNzzxt2FSNdh5z9smk:QTvtpQtaTa","tlshash":"3ff2e7da3391a0b6cbfa58f5d17b8007f63665a4784c48d8b10c98ea2c36049e567f3d","first_seen":"2025-06-22T12:57:21.145623Z","last_seen":"2025-07-03T14:12:38.731994Z","times_seen":5,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/as.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/as.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 728\r\ncf-ray: 9555470fede85690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2d8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985623\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m10S0QvtJvKwiKYuxj6CS%2BXPNq4Za7opWedMsAmQbIuRlzgxjGOut5pKwzrKijpgQSxep4n0YsTS9m4NEIIXoHm6OEhoMT8SJea%2B2DI3F3W0%2FdIP7OAJ9W948m%2Ftfw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2824\u0026min_rtt=431\u0026rtt_var=2225\u0026sent=83\u0026recv=46\u0026lost=0\u0026retrans=1\u0026sent_bytes=30929\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=172\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4cc1cb6b1a5cf323facdb769a1799c49","sha1":"218365c8f6b31cf06bf6830056562be87c63ed97","sha256":"313ece360e1c9aa1047c25db4eda8508cc4788ba7578e597c5090a0777f417fd","sha512":"ef78db9d92791d662d62d7cd7f385c3e8dd41cfc04fc751346f52e0a0f4e275468f4428d653786008d7397a77daae56fc0724727ac081dd9ccadbeead37785df","ssdeep":"","tlshash":"6a0160b8879c9623da4ce1fc0b5983e8c8a01e6091214246a7c89e7a9a1238420e4f48","first_seen":"2025-03-08T14:29:59.881682Z","last_seen":"2026-05-24T00:49:22.737097Z","times_seen":112,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":14,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 559\r\ncf-ray: 95554717b8105690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-22f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 488776\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FqS2MsekuELa67Zp9yB17bKWuj8%2FOTyoqz9WhEzKrfqAv%2FfTxxajQzei4VCmwJZtQmRYbEp83lUTEyPp%2FamUwnTeLCXDp3UbRmLXPA3e%2BLML10vJOF4Mc%2BJqQU%2B8LQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3383\u0026min_rtt=431\u0026rtt_var=5414\u0026sent=184\u0026recv=107\u0026lost=0\u0026retrans=2\u0026sent_bytes=69627\u0026recv_bytes=5308\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1423\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"85d0baf16eda36d5009d737f7f37ecce","sha1":"f32c7e096dad6d0cd7007f1add6ad0b9f0804d88","sha256":"90a6e6fa19df5619c7d2a5dc6150266359453efbb488e6ce684a6f6b2f415bdb","sha512":"92d15f21f97a02203230e6138afb39630efd61c405ff29a53bc4b62ccef2669b604d14a54adb64af38be2b0c73327d7385e9d53b827572f0e61b5f33d66de658","ssdeep":"","tlshash":"a7f026c9092cd810cc918b77cb747bdd6670dc4580e9712b99f19daab10209711d5582","first_seen":"2025-03-08T14:30:00.031812Z","last_seen":"2025-06-25T14:51:19.441976Z","times_seen":5,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 595\r\ncf-ray: 9555471919d15690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-253\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1181149\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=McaUkdKo7RX5P622VXIxzEoZvcp1IZibOG7jHjQKId5qyXrqBRni8OTe%2BuIGIUmC%2BhoGRbzgBoiWhBe63uUTNHBNSNW5tWlgt8SHONNHGBoyrHTC9u%2BS7KyBVjQeKg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=617\u0026min_rtt=364\u0026rtt_var=214\u0026sent=215\u0026recv=156\u0026lost=0\u0026retrans=3\u0026sent_bytes=80850\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1653\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bc7dc35cbe69b2a7bcce402fe452eac2","sha1":"355f56f0b167a68664ca22f7689dc9051d98d605","sha256":"63daa668edcf1832d8fccd60fa0d5d1a21fe623b5b154177606a8d8c1693f354","sha512":"85a84c10668efc0e287c3f1e8576f100517e3551442d3d2edb83d3e012fcd1dc9a1665e7ba622064d8e24309f122b1624c434c70c843b9629beecbfc64803b67","ssdeep":"","tlshash":"79f041a632002d38eb905751827aaa3189302b00da3f1f515f94df6d40635d2f28d07f","first_seen":"2025-03-08T14:29:59.808Z","last_seen":"2025-06-25T14:51:19.442656Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 671\r\ncf-ray: 9555471cefaf5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152715\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ypAkRVkGU42Fu%2FgVP8Lu4vqnV5DY7OdUXz3WJGGSoHrXx13pwySAefc3YZycTU5BVNJvPBXQrthQngewlA53MynqDSwaN7AWW%2BWk4KyjWWBq59ycBVNxW4YulofPGA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1336\u0026min_rtt=364\u0026rtt_var=643\u0026sent=705\u0026recv=420\u0026lost=0\u0026retrans=3\u0026sent_bytes=267373\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2263\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"58958a46c8dbfe96d97e2ac2b068e0bc","sha1":"9d4becf710e52ed0c3db04b9dd763f629a7787bc","sha256":"4fabecf2141838d1443a0dee7aa6c90e97332f309e47f3b1970c07e25c34a74a","sha512":"21d97d6bf0b3face71d48a8d3c0d977f83b74c76e81409951a3eafbc922bdf4f42933a2fe774b9b722858626e025b0200bd48d2a51b900bda935dc2b667acbc8","ssdeep":"","tlshash":"870123b66d415c38c70a4232d3ad26feb8d5e82947d1e404427add3ebd511081f9409d","first_seen":"2025-03-08T14:29:59.965622Z","last_seen":"2026-05-24T00:49:22.586144Z","times_seen":117,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 715\r\ncf-ray: 9555471ccf855690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 925931\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9%2F0P4MvfQVAB%2BpKkihkeyYuthTMWpQvVWecP8GMmXyZefKHvcX3l3JKKNTV4%2BGBGX5OaNKNb3TlO5x8IHH7g7FOtj%2FTrt2vgnSs1ppp51sE74ot3k4QF7SRNPMHB2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1262\u0026min_rtt=364\u0026rtt_var=513\u0026sent=648\u0026recv=399\u0026lost=0\u0026retrans=3\u0026sent_bytes=245160\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2234\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"479521bbbadc3e357ebc80261c5d644a","sha1":"0f9d4d27e7642197315b9feda3cd967be9fe6aa1","sha256":"4e19c8e031c630224ffeba58154995619e29f670bbebf8a8030633ff831aa1fb","sha512":"79d6e5b2718a955a303d4d53460c6cdf5f7815744ec9b7482d96b9656d3ad5a8d31e2f70e995ce0f6ef47c7f462e8e609817c7a8c09f24c75b5ebbf0e78c5fd1","ssdeep":"","tlshash":"fd0194a66f36dc5815f0c63c2b9f2c088834da3d9a9fa007082bc151706fd07ca95701","first_seen":"2025-03-08T14:29:59.901228Z","last_seen":"2026-05-24T00:49:22.769492Z","times_seen":114,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ch.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ch.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 436\r\ncf-ray: 9555471cfff65690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-1b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 896466\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6v4Rt1WwzqIB4zUf9T%2BDbIMVnUbYuom0gCaMNpjNnKXquih2JqkvZOmXxcEypOyoW5D8z5oKq78NotceO5cdYW5Uwf8gYUSysB3E%2Fz5iywrxQWgSt%2F2pxBYSFWhwKQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1260\u0026min_rtt=364\u0026rtt_var=657\u0026sent=699\u0026recv=419\u0026lost=0\u0026retrans=3\u0026sent_bytes=265356\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2260\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"afd665c33ac05882af4c783156e3479d","sha1":"878e117f4aa4c79be941a54fcb4493d153ffc2f0","sha256":"de81b77025abf19b1b320b8795bf34ec6d850b18a7cfa69642ccdc67d2276f71","sha512":"acbb2a672e9d2fd5e8ba3865015d7baa1c2d14c74cb8516b44f31a0f145b7e25f25fa6da634dcaa3479e9ae0076af33f67f50aaee69799f7cd9ffc860fa4a5fa","ssdeep":"","tlshash":"e5e0a3f21d1dac78d86e14f7426bbcfc8948ca3004a85617a9716729641745c5e90d11","first_seen":"2025-03-08T14:30:00.033209Z","last_seen":"2026-07-22T00:37:09.317133Z","times_seen":136,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 596\r\ncf-ray: 9555470ffdf15690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-254\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VJ79xPd3VHe4FtNuggM%2B9uYKteX4xoNY%2BSe7k3IGf4CFV%2F3Y3DWHc77vlAaxTWY%2BQvPzh4v5NJ2LG8AYDxmo9tXPbirRJ%2FmAviHr2Bxac1MXH06BHlOL0wXhOQXN2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2326\u0026min_rtt=431\u0026rtt_var=1685\u0026sent=94\u0026recv=49\u0026lost=0\u0026retrans=1\u0026sent_bytes=36024\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=178\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a869eaa3c9babe762262e6fbd57b31d0","sha1":"500f78726f6aaf9e1fcad1a70bd80f36f797b28c","sha256":"14c0097b3d84e74edc421898b04669ceb44964a7ea46acc04e1c09d3c0bbee46","sha512":"2880f9818ffda83c4788c1306631d9e61af6a6644707d8367b179d033300e2b364651bd740762c64aaac86825aa30c33e2a4dc5a46bc5c916301b20a375cad44","ssdeep":"","tlshash":"b5f047bbf7df78b6db21a4398caa4b51cc525729e160244bc35c9834674c6d434d124a","first_seen":"2025-03-08T14:29:59.824818Z","last_seen":"2026-05-24T00:49:22.776867Z","times_seen":114,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 601\r\ncf-ray: 95554714cc5a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-259\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1767052\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GUaNFwV9t6JC4POlR4hJIfIXqXiYe9nA%2FvqTTBy8cnHGeXUWq%2FUqHVTf%2BXMp1Y3En2%2BFa4edMMWQ5kwRqPoNnu1X4a7YfrluB%2Bb7hsAQKAR%2BhZgabOD%2FIis5xiIzeA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1665\u0026min_rtt=431\u0026rtt_var=1913\u0026sent=158\u0026recv=85\u0026lost=0\u0026retrans=2\u0026sent_bytes=59741\u0026recv_bytes=4700\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=953\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"150319571f6a4186272d5ae92d4fc5e9","sha1":"873ee8b94a89f7ca7ac3db7094b0148d49476a6c","sha256":"a6df5ce0d6a9a6df4053e776c3f5e5456e27ba655ac899261bd139bbdcdb0762","sha512":"15c3b71835336f202e00162229788ddfd868dd0386d77cf1a984a3436d1eb0228a8a2e711abf4e3e1ad8baab4d05545661abcf610519f73d91785823621e5e7c","ssdeep":"","tlshash":"56f041eec70c9af984199ebf271dd048a6a3346463fce30896d599600c9b005e4498ad","first_seen":"2025-03-08T14:29:59.846094Z","last_seen":"2026-07-20T21:41:41.230004Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/de.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/de.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\ncf-ray: 9555471a0b1b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-240\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137532\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lFiazn8SPh1Qasz32Wgh3LgSUbUD30%2FMu2pbbyGg784ODSxBEbbxu4hjxYCG3kDWYM1ZGb7MIESFH3xOjEr33tb0HPlyZXPPSvS1%2B1IZX6Eubc1jb4VxSUhLKLBbUw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3624\u0026min_rtt=364\u0026rtt_var=4526\u0026sent=274\u0026recv=195\u0026lost=0\u0026retrans=3\u0026sent_bytes=104616\u0026recv_bytes=7436\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1785\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"9aa471ca2b386a0d0dbaf8d21fdb6ced","sha1":"34c0e0f001be61f855cee71cd9a20d4a16386837","sha256":"c3a022b7cd3a077dfc06f14ae2b75b6bcd1565e4e0ccfa292b7300729f256a4f","sha512":"42e934e102f6b05fe083322a43443dc9844b8bb901df3adab433aefd3e711955a669a58b3d3ee93f1b6d10a6f2580fc3839c2d5bbe763dc245a844d468564abc","ssdeep":"","tlshash":"e5f0476782cab58955d10420c4b80904bbd97725b94d51385a07f76635993c941057d9","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-02T17:48:39.565736Z","times_seen":198,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/in.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/in.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 652\r\ncf-ray: 9555471b9d765690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-28c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2326820\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VcQvhsZxzK3oLUxdW5TBdQT88yr4inEQ3ZKnI1oeCBXL%2FQl7I16vNg3%2BF%2BFyIKkjzcnLMwUQwyqkuRTFiCM44plXSjNzta%2F26M9GTuwm1%2FR0mtUP7EaTLvWa2iOBAQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2942\u0026min_rtt=364\u0026rtt_var=1520\u0026sent=344\u0026recv=240\u0026lost=0\u0026retrans=3\u0026sent_bytes=129489\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2032\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"75b1c7dc20fda8d601b3ba16ef1be958","sha1":"28b4d56b8fe28f10c3c67576bbd1b0c7a35bd31a","sha256":"fdacd583a8f45b7b81f745d24809437d7c28367f8864d87b18fb773d8ab6adba","sha512":"dda3c200037dd0d9b9bb350456780b96f1ab3d3ed17a4673a80d8598a53545650d638f697af0b99033af26c07dac018935d5b6b0d8ae2827054b2283c7f6a1cd","ssdeep":"","tlshash":"daf028713af49cd46d0bc47095a5a5b564f4216c84d9a0e76b70df34344d501dbc748d","first_seen":"2025-03-08T14:30:00.064694Z","last_seen":"2026-04-29T00:02:11.899484Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 798\r\ncf-ray: 9555471cdf965690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-31e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1028011\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EZlu29vLEn5iUDvEEXBTOaUwv9ebSk6hMTj2%2FinYWNBnDayNMwqZQxkoadSxJrA9fVsMyY081xo9SRCThotwYwnHS16VgogI9XyyWZ%2FyqeFvD%2FxBDeL%2B8T3c8%2BojlA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1556\u0026min_rtt=364\u0026rtt_var=1388\u0026sent=675\u0026recv=406\u0026lost=0\u0026retrans=3\u0026sent_bytes=256204\u0026recv_bytes=17240\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2246\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":798,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"19354f9332d2fbf0d427fa08e8aa9d08","sha1":"d043ee9b0ae2205a0def262c21b39c78859a6750","sha256":"0ead79138884b04dc8bf5fe2f368d82aabdd7529d041e8451216fc538f2290cd","sha512":"66175719ce79284b0563f2291a66ab6deccff0171300f30db614178316a50fc351bfcf892723f28ba99a1f2b4a31e296b636c9b564836245d7afb7ef296e64e3","ssdeep":"","tlshash":"100175620f814e21c9143035dec616bfa46d994cb4f792c661f28827da013a8146c312","first_seen":"2025-03-08T14:30:00.04745Z","last_seen":"2026-05-24T00:49:22.560005Z","times_seen":114,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 681\r\ncf-ray: 9555471309d15690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1854495\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OIS9FOie5n7XKfUDFv9vt7YmQbHG%2FIUkTd8E0PRPttDRaTIOERBmHReyE2ZaqKjzFhSP%2FEDdFR5F8FPsFvYa3xu3Erup0XszkCKqE%2FAYt4f3lmi2uNQHRA2VoO6LtA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3075\u0026min_rtt=431\u0026rtt_var=3004\u0026sent=151\u0026recv=77\u0026lost=0\u0026retrans=2\u0026sent_bytes=57102\u0026recv_bytes=4548\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=666\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6a2b6b91ae9f47449ef694577dfb6156","sha1":"fdb515c0b2d822780bb3356faa5142bf03ccf074","sha256":"5951366218db5035b949640847ce8cf5c737b5adf637a4f66842641f647ed08c","sha512":"3efb33a0d36a975b7924afdfd68f43db8cfbd14e5c4c22fd78c36eeb60c2859b11fdab2694da11f700018a828c8557de29eeb1f1e1574dec16f8aed81f638350","ssdeep":"","tlshash":"0d01285e83d0557284353872de94af41edb6b5a46412d401917509684f01296cfe4f65","first_seen":"2025-03-08T14:29:59.923252Z","last_seen":"2025-06-25T14:51:19.448689Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/er.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/er.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 769\r\ncf-ray: 9555471929f55690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-301\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8D0d4StqiLeuVnypCnYzVeGRSh70tDbe9pYaSeruUsis3qmijiVp87s4cG%2FPplMh%2BUKHeX8ll1K0VvXixx1k9nZX7hgBAf%2Fpzg4Ujb7ka2aLL1tdreWhtUARZoLGhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=617\u0026min_rtt=364\u0026rtt_var=214\u0026sent=218\u0026recv=156\u0026lost=0\u0026retrans=3\u0026sent_bytes=81959\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1654\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f0da095ed601c69f94dc8a4b459f2b81","sha1":"306f2cbf1844b78dfd1d1975800357b609806e9c","sha256":"12354ec060e054f97855f6165b864d5fa4ea47970853360f244c94034b58c8e1","sha512":"66e10054a1a1a8730f1c151ceb1ce15a157cc770906b49a47c969e11095670b1df5245b0f522293e6a0c3f055c6ce35a23afc57d2946bc9c29f06295a7decb61","ssdeep":"","tlshash":"3901751e370555e49d0904a193dde194dd1a57643cad507a1e55423fd3aa35ce9c2603","first_seen":"2025-03-08T14:30:00.013452Z","last_seen":"2026-05-24T00:49:22.608572Z","times_seen":114,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 629\r\ncf-ray: 9555471bbdc05690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-275\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1n0ogaEvBQUYHz2Hs57btR9T3APg3M6XP4bxEp1pa7Qfpo9YsWWoIqZ01JTq%2Byg9VwPwOTRPxMyOEEZ3MWcuqwgzHNa50ulZJxHPqwUwrWLkTRjW%2Bo6ayERasAkH3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1812\u0026min_rtt=364\u0026rtt_var=771\u0026sent=397\u0026recv=270\u0026lost=0\u0026retrans=3\u0026sent_bytes=149321\u0026recv_bytes=11008\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2063\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"911bd8e5c913b30e53d68b44490d4c5d","sha1":"519645b651465216b0675547db05e8e4e2650091","sha256":"6796c67bda1ee2e168bee0354fe45235e1ae9fc6422e415d929a8669e918b8cf","sha512":"f4ea93628850f4a7b45cdf04e51547682746847b1eafad39047ff26147fd6a3ee4bc41e2bf343de843b9a3f0c5194e1281554369ad53ea1e2078dc8110a3a6f5","ssdeep":"","tlshash":"5af0020c8e219d71eedf8265c5419e1aa804909c05dac6003649fdbb66aba14cdbb004","first_seen":"2025-03-08T14:30:00.011576Z","last_seen":"2025-06-25T14:51:19.449815Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/re.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/re.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 769\r\ncf-ray: 9555471caf335690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-301\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388602\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wk16%2B3A%2BmlyvPpkuLSJ26y34vs7eKNpbjU15HTvKJ1F1pW1xZJ0iPPjyuflsxT%2BF1CBKCDN2G1N3nbjhQv8feCEpwb%2F0U2nIHnYtjElkCYxm0SkMtyLZJDFoU2B34Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1511\u0026min_rtt=364\u0026rtt_var=682\u0026sent=587\u0026recv=365\u0026lost=0\u0026retrans=3\u0026sent_bytes=222318\u0026recv_bytes=15340\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2205\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cfee96cc4e2331852e0582e85732734c","sha1":"ebfeddc52570a3171d6294e1c477eb4c01366872","sha256":"075b4aa95651f7c185fd09ce7f21ef18130d10dcb2f75e91699c5e76f52e84df","sha512":"2a66e44e2772af744c0c878c2f897273b67b1aae7d1947cb0bb13dd7015e107a0bf9c9d8be9a8fb66d7ab079cd01f92aa30f037cc9d8c6c1953ec94eb11eb632","ssdeep":"","tlshash":"9301b5dfb3028c376c1a52b765c98813b8a049b07b5508a2fa2c832bd14b1e4f8dd46b","first_seen":"2025-03-08T14:30:00.015959Z","last_seen":"2026-05-24T00:49:22.614909Z","times_seen":114,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 757\r\ncf-ray: 9555471cdfa85690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978210\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7pnWB1feIOJYbVmPwN5TAgh2TU9fx30%2BcaUlszAI96Z%2FwBDx95zyozNAjB77mPhws1FioIBTpMovHvqfdeuUIivksDxGN5Fj1KKl4RbVjFZgf7uQjQO2uTgwHGxbFQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1007\u0026min_rtt=364\u0026rtt_var=388\u0026sent=672\u0026recv=405\u0026lost=0\u0026retrans=3\u0026sent_bytes=254933\u0026recv_bytes=17164\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2242\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"dffe1eee15fce54f94f86e513fa41ea5","sha1":"3eb85d43df427e335a340cc95b91aeb2e93c2144","sha256":"bfb6e72f33fee800a3efeaff5091c0cdd2df2ee39de9d7a89e9fbcfb4b168596","sha512":"056bc7624c0891707172a5a6ed92bf8ebd7926d40282c3fe9d94874ef4be97695ff96c1f64275f41874204e0b19e9ca121174a4f4116bd1383b59439e30f0dad","ssdeep":"","tlshash":"e601b5dab20f561d4c13a851d3da25b5670990dd7811e53b4112e2f929029474284c94","first_seen":"2025-03-08T14:29:59.946228Z","last_seen":"2026-07-26T18:03:35.148722Z","times_seen":125,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/tournaments/sec-tourn_desc-8.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/tournaments/sec-tourn_desc-8.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 63760\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-f910\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc072608f71fac3ca5a13ccfd69ab97b","sha1":"90f5b49d2a293d06b63ff8533e5db6f1f780cdec","sha256":"6b97162c5ef45f5b50065f33f3feb6a7b7420825aee97d1f353c500ad2c24b0b","sha512":"7a275342ce587ace99d23789cbe68f5d0df55cf0049d2c816e89ff0a6ed8c36545a2bd085be9e13a4bfcf663442a56cf4560f322cc50f2e2a6628382e34175ef","ssdeep":"1536:tdKPv1hCLmBczqIrWOKyi6HaOQV2tctCFJRrWnUMouli40yANA:rKX1hEmkXmKhtVgxi40NA","tlshash":"c553022b1c7ad73abd2e10ec0407aa1d42a4f8151d3c60f9b72b0adaa1d2ddad534b07","first_seen":"2025-06-22T12:57:21.082167Z","last_seen":"2026-08-10T16:41:59.377266Z","times_seen":68,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/aw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/aw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\ncf-ray: 9555470f8d5c5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321087\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OO8wAyqL1Z5uBzgdmPM6vzGHwt0mea8BBujE3IfwJiAyFkfaglxjbxqhm85Nt0GiHegIfCVyezV%2BPf59bYiVlNyH5BDMjE9j%2FpL1T82m%2Fm9QI1t%2F2WVvTj8VQ%2BkaOg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=14\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=5911\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=104\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5603207e245b5e831588452e3dc44720","sha1":"139af4049676b19e852e9e2a7a9a1da25ab2f9c4","sha256":"950419af090c343ed6ca24e4e204d6c97275775667df84f4ce613b27805ad179","sha512":"86dba0386a0056bc97a496706e172429a1bcf8020cac656fec524d49add4f4a491607cd400498161922353275f3b6bb629bbdfef72edb51e470a315ab2365651","ssdeep":"","tlshash":"e40144eb82904c78cadb3207522f55359484550b6f51978a5115ec352d153244eea2e9","first_seen":"2025-03-08T14:30:00.022944Z","last_seen":"2026-05-24T00:49:22.604556Z","times_seen":113,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/az.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/az.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 673\r\ncf-ray: 9555470f8d625690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1979191\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gy4wGf8f3gRJU6GS9vJB7JMrP1k2eUb3yNIGsASCoIMKQkXoKDf52AnhRt3aoBm%2FsgzPtkmaW2T2xqjaJAy7mINL1mNE2tRC0lhKYId4%2B3M1CfBmR7Z1Q9x2M1nkeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=31\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=13040\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=108\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"529bfc2d4faa7e8fe08b371fd6c8e218","sha1":"fc74721a98c8f2bc6e3d4b31be7f7bc139e636ed","sha256":"5b5e3c96a81fa5687b766ecbc0d6b2651bdaa02959cf0dbb81eaef677774fac2","sha512":"0baed67c7c8363ef81362e2b367d85d16233f9be64c55791292243188f7254af73ae20cca0d4b52222bffd951dd43774e3cf415430c63733374ba994bfcb5984","ssdeep":"","tlshash":"e2018383e3c30c34f9548c8b2ac1f1d1ea441d71d43632d79481b0ec2814ca48bc8801","first_seen":"2025-03-08T14:30:00.048086Z","last_seen":"2026-05-24T00:49:23.355976Z","times_seen":116,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ki.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ki.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 741\r\ncf-ray: 9555471bbdbd5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 123713\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mW043QN5VmB321rNcrOdWqyUqo8F3eUzPBz5lgMnTVxJSiXXJggviAzXVKV%2BCKft9FjfVb2y8QFoGL1kJupQb7YnbJtE8OsHJ%2FHbWAntNPFF9VB7is2wMVwUYky1yg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1872\u0026min_rtt=364\u0026rtt_var=994\u0026sent=384\u0026recv=263\u0026lost=0\u0026retrans=3\u0026sent_bytes=143962\u0026recv_bytes=10628\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2058\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"68dd51d8412fee2fd0265879ca4b60f1","sha1":"8248e1d789970e297d827f53818b84b41ab2efa7","sha256":"f05c04623af723afbc89e2c0ffd1b769d0807ec913782c8942d5948b762f78a7","sha512":"a18fb8a07f9f01d614f50c97974a10cb1a871aa86433ca6e440f64440a64beafb65a5a59e7c7859f15ca4d3b20a3dddd25c6ae229811698f9f640be0cf8945d4","ssdeep":"","tlshash":"110120c37601ad2a6eed8c1f9369e0a468308cad375190d5441db134057351c91cd471","first_seen":"2025-03-08T14:30:00.045867Z","last_seen":"2025-06-25T14:51:19.453697Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ma.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ma.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 469\r\ncf-ray: 9555471c2e6f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-1d5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1186408\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sxtTxa%2F6n%2B%2BzGBEG3RLYmYsIakaIQamngWjLLKkBN1fkXjKL7%2FfwYk5sIbG4qaMbZAng56qDNSOhBEBitH3PAtcLILR%2BCFcnP%2FqaLjUN4yCCxKIqUHdpv9GBvRJZ%2Bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1747\u0026min_rtt=364\u0026rtt_var=922\u0026sent=490\u0026recv=312\u0026lost=0\u0026retrans=3\u0026sent_bytes=184977\u0026recv_bytes=12908\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2124\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4021ea430dd401a9c12bc7039e5a12d3","sha1":"aaf632e35f09ae7a6730f22009a651202173e662","sha256":"ca7b586fe35986101464231bb7f7e65a2922305b62d00fd308657d340ca801ed","sha512":"35f9d8a6df4de968c191b25e123ca53e43f94089e4d8cbf2aa118aa1f031187aa27220cc329ab1591a84f60dfeb50af27542e478a0841629ef519cfe5b7f8f12","ssdeep":"","tlshash":"e9f02bfb27a05d1bcad2445ff1475465e5c6fe553075750301408b356d17216ccc7e86","first_seen":"2025-03-08T14:29:59.786103Z","last_seen":"2026-07-07T17:21:00.662701Z","times_seen":124,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vi-sber1-20.jivosite.com/ziqY8DLV0e?62243f10d813df58","fqdn":"vi-sber1-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:34.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /ziqY8DLV0e?62243f10d813df58 HTTP/1.1\r\nHost: vi-sber1-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kometaloft.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hojoSiomcwy0EcaoL6bPxg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://kometaloft.com\r\nSec-WebSocket-Accept: 2sUktqJogs/X5nkpbyq8WOJiEQg=\r\nServer: hand/3.2\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":2,"connect":59,"send":0,"wait":59,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\ncf-ray: 9555470f8d635690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-261\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 899794\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7N4iR6vVv3T8MZyCE0%2FEycy54KKnB9pXo39FOR6wYr%2BQl8kwD43%2B%2BZ%2B3ZvZh9AUpCGgYbllQ5pNFg2WqOz8GKGs359eVJhUomD32hXcZpVOHIajcvgrjZ9f0WTE0VA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=28\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=11916\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=107\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e85b53938ddf2684a384947eb5228e11","sha1":"ebd8737842d7f13723ff1798b6376e2fe09a5481","sha256":"4527c54aacee5796b9c975a7e2cf3112564ec8baed016ea9186c0b6eb066eaa6","sha512":"b05667892a66034d86c39cc00b20668a4d6888cd43f9f3d9a18cf827bab6e4f1a53f2b3724f9d6de65093b71ca524d9226009da1c9719402105f3a4ff410bb50","ssdeep":"","tlshash":"53f062fa84d07c3c4b23e52d93dbe8a2f60b2d08581435974000d14e7fb7328a09b300","first_seen":"2025-03-08T14:29:59.972849Z","last_seen":"2026-06-04T12:58:41.616414Z","times_seen":121,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/iq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/iq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\ncf-ray: 9555471b9d815690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2389000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GcqSPCAMDu0lnIPMnUQAkE6608HmjWstT0RP7So8TJjf2ao955EBkKHEAp6hsXrwA6rUAi2TA8SZi2p64urAVBwmy%2Boe%2BzHfu8e6N3h9h0rFahsvP49%2Fpazjovta7w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2722\u0026min_rtt=364\u0026rtt_var=1222\u0026sent=350\u0026recv=242\u0026lost=0\u0026retrans=3\u0026sent_bytes=131706\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2036\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3f98968f040388d79ac6e1305bf7ee67","sha1":"4319f7c31f0b112776c53bc7af33fac2fba524c5","sha256":"997f199bd64308dea460ff613be6c391ba6371edce90f0250f18e098e8b860d5","sha512":"add275bac75a6a33f1446fed29da21bea26d866119c7b7c4a123acf7523a27e312ae5ceb4f3b744f6bb142ec8545f4b78f3277465e35b97bee537c8da2724135","ssdeep":"","tlshash":"500144dc12418b2bdb46473279a1e60d652e6607612b52eb70d9494e5422a3114a42c0","first_seen":"2025-03-08T14:29:59.838327Z","last_seen":"2026-07-07T17:21:00.655845Z","times_seen":121,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\ncf-ray: 9555471bfe2e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1073802\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qTzorLFwHpfDQJhwTYzDwplAEqjvRX41kz6niGp7FNXQgHiyyFOwuIzMjmkkl5HFG%2B%2B9R%2F46cUzfM%2FsUrRAGrySJ57qPO8JKgYMC6SS%2B80XzOlYtALAZRy4YlMP1AQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2010\u0026min_rtt=364\u0026rtt_var=1361\u0026sent=455\u0026recv=291\u0026lost=0\u0026retrans=3\u0026sent_bytes=172996\u0026recv_bytes=11768\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2096\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"56b3e87248a0b7e77d0b6ddd24854e66","sha1":"79a2cd4f3e23bb2116912b1dde70ab6295a3a789","sha256":"16a881577c4fe4cb8a373947cb801f07d876b5f8fa130ba0742c4b185f60199f","sha512":"a98a2175d5f536562b4109b0ad74893d289623b491eef9ff71307409c3b63622a5d9dee22985e4d2a142818b84b027d1a0e6a2a4db9bf6e1b53064799f69bf53","ssdeep":"","tlshash":"410194eec89292aa8b6514230002c9a8bc72c25080a1053ac110bb202c3f048d8d47cb","first_seen":"2025-03-08T14:29:59.847161Z","last_seen":"2026-05-24T00:49:22.960242Z","times_seen":114,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 584\r\ncf-ray: 9555471c1e585690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-248\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2367584\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=70mvhOYj4iZep4GyMglcx9azTuijS5PwGI9IpZfhmxIEcGeU1gmHUBFFLOKLzKLALSju%2FhFO4hJCnhX2MzLrweaH6wppPAlHeMgnUp%2FkOlfOzKh5ffL5vHHYD7K1XQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1917\u0026min_rtt=364\u0026rtt_var=1306\u0026sent=483\u0026recv=307\u0026lost=0\u0026retrans=3\u0026sent_bytes=182769\u0026recv_bytes=12680\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2117\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"850e4d836e5793145457567a58019fea","sha1":"081c2b59454bdebcae08ec09a163a59c17f7aa9d","sha256":"eca5cb8f41c4521e96d60151d1499ba013eb944e7b706045324221e407ffaef0","sha512":"0f825be9a9209e688d12bb0eb8e51d68f8d30435798daa3bbdafe8cf541628fcee08aa9bdd75259b0e550be20eddb43a502b0759211bea9cce89fea17d9094e9","ssdeep":"","tlshash":"16f041f117344efca6be852ac40749a29857e4381f881e430c32a0e03da4f74e36d092","first_seen":"2025-03-08T14:29:59.800767Z","last_seen":"2026-06-04T12:58:41.710178Z","times_seen":120,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/vi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 856\r\ncf-ray: 955547215dce5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-358\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 687072\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i1pt0CASnQPv1PBghDG2wj%2BYQnJPcv%2B6M8WjyfpUa47k1kBfP%2BYJZElV7CdlKAaBg0Iu0qQkqqSX9IscJYU3%2FcYXlci%2B2u12Xx3FbGf174qJ10bT9L9DLashtlIMkA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1420\u0026min_rtt=364\u0026rtt_var=495\u0026sent=793\u0026recv=467\u0026lost=0\u0026retrans=3\u0026sent_bytes=301704\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2961\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0c1a7e5c19a70b79b4664ef757d095f3","sha1":"9ec8b641b41b7f961c19572fdee9b622daa92d4b","sha256":"75870d0a239c03c78cb9b8c7787d3eee35145aa742012f16622b16cfd3c889da","sha512":"a987ee5bf59e3d5df510af8f80fc3f099eaa2254a0805ed193bc1b59fadc99c3410858a7e62b29ed06a7036c849ebb1bf8e97ea7114e39b1a5415c732f0ca8f1","ssdeep":"","tlshash":"23118a5002144ec1a4151327a18e67ed75537eb5c46bcc4bbf8d48b9552d6190e4ffc5","first_seen":"2025-03-08T14:29:59.910058Z","last_seen":"2026-05-24T00:49:22.871248Z","times_seen":112,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/wf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/wf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\ncf-ray: 955547215dd05690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1804239\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NjuC3yA081nDd57FFV7ZlKSErjvrXezl1VO6UcUEPrLqM2krdSWwAypXer29t2I5f44iQIzw4EsopxCRXw8BXmAhvAVBAF2yGZLnoVJ%2FU9TSPgjQ9XX7%2BB2TYBGe1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1505\u0026min_rtt=364\u0026rtt_var=543\u0026sent=799\u0026recv=468\u0026lost=0\u0026retrans=3\u0026sent_bytes=304223\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2962\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a555e26d48da7308303ceabcb1b18476","sha1":"8a05ddbc57f6c12dddff24f2c63fd3390d0c4025","sha256":"1a284d803387b2818ddd2ac916a19dbb3550cade0d45a6863b23aad7b596e586","sha512":"2fd9135e323d02d7dedb84f1aeb2ffc00fc8226fb76c6eaea35ef3a021e472bf077206c62cb2398993157878b388d785a0882b637b2de7f37dd9b14b73bdb6eb","ssdeep":"","tlshash":"b7f02080c8905eead6054832135f5613fe75527b5706207701296e3a91b3365623d602","first_seen":"2025-03-08T14:30:00.012251Z","last_seen":"2026-05-24T00:49:23.70097Z","times_seen":113,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/bg_mobile.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/bg_mobile.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 638\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-27e\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e9e7ad5e10b94ecec5ebcd3a96ba3300","sha1":"79a5637f3e787f95f22840c7d66769693fac8a21","sha256":"7a0b92fcf57cd4d2c07d91f8a1eef11f92e1b57291b8afe20c0c52d49beac68b","sha512":"5ff5949d78c67f42433e5a0eb0d233907f0a380cf200f48ac3ce3ddf481fa9cda4b231a386e3fd9059e26577b562b02fe13611e3ebf4f36ac4bfb826da94e64f","ssdeep":"","tlshash":"28f0dd4f832c607a79d3f891a7c587873d0f89a0e09f5451768ba3a450b66e51446ef4","first_seen":"2025-06-22T12:57:21.111513Z","last_seen":"2026-08-10T16:41:59.335655Z","times_seen":85,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":136,"dns":2,"connect":66,"send":0,"wait":66,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/countries?pr=kometa\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"OPTIONS /api/countries?pr=kometa\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kometaloft.com/\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\ncf-ray: 9555470fcdb45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-298\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797769\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f%2BImsQfqaG%2BrhLK7zmHt25%2B5n9DMqSjs4Gg7t1PyanzmNyDpzB5JjnQ6XkaXNHqxI17NYjHHgwdkYVCsLSqDvR7jzZkGbcoT%2F5%2FpkTpvDRJmjYHM9J%2BZk77GJnhazw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3315\u0026min_rtt=479\u0026rtt_var=4018\u0026sent=60\u0026recv=32\u0026lost=0\u0026retrans=1\u0026sent_bytes=23783\u0026recv_bytes=2572\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=150\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"58a70a5cc96c0543ea25aba4675b087e","sha1":"4ed05445a6e8e5d239b288299a967c71162b9e93","sha256":"0a7f1b61acff932215365f326bbfa4aad43287196b21c03ddb61e0cc7986029d","sha512":"98c2ccbfd0e0f2a899ab75b43710970a0fd9535b09d6787a1454e5d2772d1d50f650b153ab18807565ae0364942359a3157dfd7697b49ec5e12a22a55622347c","ssdeep":"","tlshash":"aa0183cd6a310ddada804631f13b664e9908c37abb26620d025996248e1060e0bc072b","first_seen":"2025-03-08T14:29:59.774095Z","last_seen":"2026-05-24T00:49:23.016892Z","times_seen":115,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 713\r\ncf-ray: 9555471a6bef5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 986347\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iwgpxluOBOpuFKd1TYrSf4Axl0cd5usNgdUcT5cCImBEuWfjefJZnbXEk10dAcrrBUPZftuv6ZU8okkMIuAom8Jt2h4dVfJAapVlikMeGAygs8%2BECs8irLTSZbT8Gg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7391\u0026min_rtt=364\u0026rtt_var=8088\u0026sent=284\u0026recv=201\u0026lost=0\u0026retrans=3\u0026sent_bytes=108407\u0026recv_bytes=7664\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1868\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"04ededcc9af41e54ef894dc62b68c8a5","sha1":"6fef82e851bd210673b0eff2a46db0d10606cfdf","sha256":"63558680fe17d9b16b994d043082203e6c981ba7e9d23f3b8bb6e553ee6ec1de","sha512":"f9e956a8f818f6ddd17a48aa8d1c6bf3ee62ecc4efd498707f4930d843a07a9eb81554ead5e9e492c325b5bb14fd00c2592c85c578bafda753fc7124380cc96a","ssdeep":"","tlshash":"8a01e48323ab2d004436375fa00b0ea28d608e2bc8001ecac9a3ca4822b006086f36da","first_seen":"2025-03-08T14:29:59.792568Z","last_seen":"2026-08-02T10:38:22.388803Z","times_seen":149,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ml.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ml.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 514\r\ncf-ray: 9555471bee175690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-202\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388603\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LqUlLA%2F5do5eCBhBaqf52M7Kx2McQOSEyMGN%2FCt8QbSgLwBucO0nMSx4E4DMyiMUEU1YX0MZ8LixxJzcRu9IAeFCB5RZiQhR4fyCtFhvPyi%2FTALZA1%2Fp7q8O42R0mw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1559\u0026min_rtt=364\u0026rtt_var=1182\u0026sent=441\u0026recv=289\u0026lost=0\u0026retrans=3\u0026sent_bytes=166907\u0026recv_bytes=11768\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2086\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d4684a292f6be7c03c5c8a182a1c6799","sha1":"1faff8cba23b9e23b072433cc0cdbb4d3ea412cf","sha256":"99afbe6d36160b95c1393aa2dab2741c6303075cca87e6be79534de851bdbaee","sha512":"d0c3e3af920438d6b22f8948b2c6bf5d9935a09c7674982a96f501149454c4e1e22ab0e6ca42f0503cdb1d8151600a12f0e1e373f9517e284067f20b23786462","ssdeep":"","tlshash":"89f00ef8949ceebccd70633995b79518a250c6184e7a68923492cb34f333004f36e39d","first_seen":"2025-03-08T14:29:59.985773Z","last_seen":"2026-05-24T00:49:23.366282Z","times_seen":116,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/BloodAndShadow2NL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/BloodAndShadow2NL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66210\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-102a2\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"db860cd767f703ef71d43b36be3871b2","sha1":"983404dbef1931fd4b5206e6150b29590eaea267","sha256":"633a9923772b0ebecede3ac99a0185423c865311cc0a45acd3a18f378fa889b6","sha512":"bf395a90de8d2df9c2b4e46f489023439aa5f080ca48f5f1557cfa91e417c1f6ea4232bca8236e0f894a740aa890bc7d5ed9b50060808d8ddc8caae8f421d9e0","ssdeep":"1536:SZrq2J3d9KsB9clZY3rGtBjXZ6w60k2UNehEWQUc:SvKw3abLZ6wkfNehThc","tlshash":"4853027296e26b507aab383e2f1cff2f869fc8a86ee7d4d1a7c5db856044714c0c6141","first_seen":"2025-03-08T14:29:59.934306Z","last_seen":"2026-08-10T16:39:18.781491Z","times_seen":220,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/DannyDollarHG.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/DannyDollarHG.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 74617\r\nLast-Modified: Thu, 22 May 2025 05:44:17 GMT\r\nConnection: keep-alive\r\nETag: \"682eb9b1-12379\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74617,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"c62625a9ab351b5cfa12f4dbb5715d35","sha1":"5ed319e021af91057e0fea6a85d53b90090aacbd","sha256":"89cc51a6d198b9f9a3efecc3c8aa536ce7cc90d8c185bd3f5127fe41e2bbf36e","sha512":"5142ffaf7999e6e11d699241a4e8b713ef238f653718fd1f04d62fdc07ba188e2961cba551334c7d2a393e872334b33931933384492e1f524357c45b07b9291c","ssdeep":"1536:t72qrOZ8eHghX0CM5dVjeyzp13lwXzPyt9Bivlb4f8H:x2TZ8elCM5rjeUlwX+6b4UH","tlshash":"9173012dd2a01896fc8b871513330f201dbb3fa0557035da0dd6d559b8faedb1a62738","first_seen":"2025-06-22T12:57:21.139481Z","last_seen":"2026-06-12T00:18:49.650479Z","times_seen":13,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/main.379b11bd14c87887.js","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:25.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /main.379b11bd14c87887.js HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:26 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-206484\"\r\nExpires: Thu, 26 Jun 2025 14:50:26 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2122884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7d32ff14840fcd275f59817f00c80f93","sha1":"00775246034fd3a484143e766c1ee3061b5344d7","sha256":"3b8be2bfe93df8f01ce11d16ed56d0babb86738f23e50b2b9caf4fe8203eaf97","sha512":"5a6b9dfa39e429efe3b98f5f58833cfc76c9033e1adb4e15adb5911fe7615ac1b6c29ef1ec81e47769779d5115767c0b908f80fad01302f9682a70e8e2a46e95","ssdeep":"49152:tZ4NRb9nFjkbZcClqsm6dLUytKAOGxyRSbP7nNYw3yYLL6WWboIVUkNnKs/TkI9P:WHl","tlshash":"e5a56ca57220f0365ac745a660764589b33ca44cea03a09cf3bc9cec96dedd9627773c","first_seen":"2025-06-22T12:57:21.050468Z","last_seen":"2025-07-03T14:12:38.714112Z","times_seen":5,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":130,"dns":2,"connect":66,"send":0,"wait":133,"receive":308,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/games?lang=en\u0026pr=kometa\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=kometa\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48 HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"40cb1eb3a5efd5e496d360a4a1f329c5","sha1":"80d178c91f85283897610c22df76386aa69e47dd","sha256":"fc7b845c7a7817fd3062a4684d8c9b62acce4bffa1c96553298b8c51fdf1906a","sha512":"a5dc3bca71990f3743344154574ae9dbe06d61feb7417d9c925b8ed48891d796558fc006b7044726c1b0b527a54377b086e3a7e96f6cac15c4c6ecd552b4ae6f","ssdeep":"48:Yu+3HJaunioYaYFW9ORVNwIQTqFLtyRpwZ7+ODCHbqKPznIc4SCanXn:0pPnSFW9ajQn+4poo","tlshash":"5d22fa7a08280cfecb1725a51fa3be8e509c41c68acddf6415dacc0849edbf6450a976","first_seen":"2025-06-22T12:57:20.951778Z","last_seen":"2025-06-25T14:51:19.465614Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":59,"dns":6,"connect":31,"send":0,"wait":1069,"receive":3,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/is.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/is.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 751\r\ncf-ray: 9555471b9d755690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BErrMhUcM2eyUILbFVUFlhmMqbiEC8OInfsG4pSOqjRK%2FK9Qk0AOFWK7%2FCbzz3f0Kw7DiLqsFV0q1DPfNSprKNcdoRPeyrmmn%2FZQO08pKs7sGLd2n1sR0PkYL6Yaeg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3072\u0026min_rtt=364\u0026rtt_var=1681\u0026sent=338\u0026recv=239\u0026lost=0\u0026retrans=3\u0026sent_bytes=126936\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2031\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"66fea438872d90a09c45f31026641372","sha1":"bd510bc64ee50a63a2833f36fa5eb54587780637","sha256":"a2bd1aeef8f5c683bb35cc2174a85a04111427b6c099df4da6f3b9d0b6faa1ba","sha512":"70f036b1a35046c8412a0aa7c4de62b4844a7b467e74d9609a7ff5afd7bc9b6e417481883eba4fe00c24ed625acde0cc1fc0b6629a79c5f8b319541d7744be3f","ssdeep":"","tlshash":"b50165b782fa6be9e9d852704dcbc9a88b115111e7b041075741a6b165b02389e0d0a4","first_seen":"2025-03-08T14:29:59.784148Z","last_seen":"2026-06-21T09:40:51.227866Z","times_seen":129,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 726\r\ncf-ray: 9555471bcdcf5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2d6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 983914\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Bw3zU8TbqNl3o3ZjcWjqamidDFOsXDXT4V9SOyoVZAg26OcQ36DiQtmn4oqraABJsFW7pUBY1aJi%2Fqf9WmskKeNCFomzW9%2B5xbzHASGn58MMv72ZpYc5xQufQi%2FnLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1683\u0026min_rtt=364\u0026rtt_var=685\u0026sent=394\u0026recv=269\u0026lost=0\u0026retrans=3\u0026sent_bytes=148078\u0026recv_bytes=10932\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2063\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"c428b2b15a0cbe14f0593b7c22565235","sha1":"c9b0c9bce6302b1b157ee359b437cec427ac2489","sha256":"162923fb87c9b762e3d4355e1abf7a90030fc783012f4edbbb28374f42f78635","sha512":"ecd0b0cb9aaa1a92cea2ceb20f70ca9e905aafc0dc04ad3458352d059b6524bced6ef8a210e6a9ac7c7b599943e1f1d7fca64194e5d245848af41ebb63247144","ssdeep":"","tlshash":"d60160570a59b1a8e728c2242829bd203e28c0b66611103423b450b98fa1fa142c91b7","first_seen":"2025-03-08T14:30:00.008049Z","last_seen":"2026-07-08T04:03:21.399191Z","times_seen":125,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ms.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ms.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 757\r\ncf-ray: 9555471c2e6e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 206586\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aPnvqZC%2BeFln6azPSjcFZ%2FrVtQv5gQFAkkcS3BwwrsysX5laiyAtqy9PNa7AWcFbWTJaXnLgloXpt%2B38JWxIWm5APZ4zmeZniuAVXiTfWv6nvyOBO3SVLWFfX8VgWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1747\u0026min_rtt=364\u0026rtt_var=922\u0026sent=493\u0026recv=312\u0026lost=0\u0026retrans=3\u0026sent_bytes=185968\u0026recv_bytes=12908\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2125\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ff29cc71b25036442e392b9257a37a2a","sha1":"c57bf6d0c911f459b3b12a255cf1f007304eeb4e","sha256":"086b968d438e5b2b39ccf847c7a11c8b7fe2c92a2cf68ab4e3a4c95965cad708","sha512":"b00f08645d1204441b87ec5731bc43a0535afb4662d1df35d8be182373b22904b485c85b3dd5a7d6ab4390a51665a60e0e080b4cae373b10c7f1615c52b89574","ssdeep":"","tlshash":"5101bae2535b08f74fece0020056860ccb53dcd31c38c88d90e7166e275645006e724a","first_seen":"2025-03-08T14:29:59.945116Z","last_seen":"2026-05-24T00:49:22.610641Z","times_seen":114,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 714\r\ncf-ray: 9555471d08165690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ca\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 664767\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jhMDMjlJtkXRy9o%2F41hjCpU6YiJ0U8bE3Y%2FUlrR6g%2FTSHnOK39awGd8moIUbVHWJ839C2dtkFpA%2BIg%2FFg7c3d85%2BShFfIKwlzycZGb%2B9DlWSXK9hcAdMe1T6CK7BYQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1197\u0026min_rtt=364\u0026rtt_var=610\u0026sent=728\u0026recv=430\u0026lost=0\u0026retrans=3\u0026sent_bytes=276279\u0026recv_bytes=18380\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2272\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"35fc2fe924d26d859d6553069e8bdf9b","sha1":"a3cc0b3a89375db8226cd20ce5c3bc6d5efa7cbc","sha256":"234bf8f41bde11802f1d7fe9b6117ca9d0584f661252f43762117ee0b67646eb","sha512":"51ed62836457ed5ab7510e02a291f98a43c91b9b9302715af01735ed053504e82ccfd142a4ef11fb457a87003a38cd0c111b97140f209f0675a1f8cec369ded6","ssdeep":"","tlshash":"e80110f6c34a8d3686d242ad20fbe8c5a3268b715028e64ae0276e01f5492c178da1d2","first_seen":"2025-03-08T14:29:59.815184Z","last_seen":"2025-06-25T14:51:19.468828Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 631\r\ncf-ray: 9555470f7d365690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-277\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388606\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UWW00HjpwXSvQ%2FLZJAUDs98hSYcPBrnSrgHGxPIgg%2B9rY6%2FqZYzKY3Xf0qjufA86kdl%2B2k4dypRCwnezdWOgCu%2BdO9Qa2AzWExAz0JCpc%2F8ly9fVSR6%2FmZxvKkZ5YA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=9\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=3275\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=101\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"336f878ff5520c25142944fb576e2519","sha1":"2bacd60286ccdbf14d3671c4f0f1542a6ae2f3eb","sha256":"2f525756b4e434e0ed0507267b53105da3d2519ba697834929b7069c563c3d29","sha512":"0595d5a636743881f626d4c1d08e8084061b55eeee51c954d384911537ed975ff7347c44e9fb65696042eb1a9d019a4b71fc90c71a48c8a38641235533d21128","ssdeep":"","tlshash":"79f068b9b2e8dd91558a19770fa7510a8b903c3bc973121c52741e3105ddeb883842c2","first_seen":"2025-03-08T14:29:59.861831Z","last_seen":"2026-05-24T00:49:23.423392Z","times_seen":122,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":10,"connect":4,"send":0,"wait":34,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/by.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/by.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 621\r\ncf-ray: 9555470fcdb05690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-26d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321087\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UX1JoB6cBIOCGynymucFQImUq5SDWqF1IrPdJq%2FyqdVk1aydGA0UweiLY1KsKlCSER8BNVQFBW8iOUIwZH8uHGKDISjTQZM5EIi%2F0u4K3xqx3TWZdSRVBDBaVwuGdA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3605\u0026min_rtt=479\u0026rtt_var=4586\u0026sent=54\u0026recv=30\u0026lost=0\u0026retrans=1\u0026sent_bytes=21364\u0026recv_bytes=2496\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=149\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e9ac58c60fed8286867f2bbf5d6b3904","sha1":"3d1b30e543357075d0f8ca33f72d6b73bbe36176","sha256":"358a429c05fc5e92b2a7f293e1a7394d27612f6c2be8c8c7cb4d51598839bd88","sha512":"377c4f3ac9fc268401a4f573873374fe03cb3aaa3c8aaa147aba34486fada96a595e6d83b54177e4eeb94ce3af3003a232b12e850fb34416245b79cdeaac9551","ssdeep":"","tlshash":"32f062943258cf30cde2869b0a3bb844bf888237eb1501390e6ef95204a8a1c9a80103","first_seen":"2025-03-08T14:29:59.82864Z","last_seen":"2026-05-24T00:49:23.207507Z","times_seen":120,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/et.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/et.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 769\r\ncf-ray: 9555471929f95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-301\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321088\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7LCgkpBhN1lH%2FJ%2BRKStV0g6sZgvJLSNbELQXb5La9U4JStyMTDOYf2DgI1ncHASNlYTQoo%2FVHWoSneQwtEK4W60pNF704PSwDMTCAm977D96ysNnEG1pVHSFytO8bA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=877\u0026min_rtt=364\u0026rtt_var=860\u0026sent=209\u0026recv=147\u0026lost=0\u0026retrans=3\u0026sent_bytes=78372\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1650\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7d857990edbb143fd79f2611e7f636b6","sha1":"a87cff5f647e6c4007c3048b1f298d3bf1069b14","sha256":"ffee23829087473aa0253cf707c416a4a0a00bc5d5a0d2f17756deaf07a94251","sha512":"5f79978fc619e0df38ee0d45e40669fa2b629880ccedbb4ad8efcd2ea69e2088ca8bf96a1e8864979b7c0f295017524f0b0d669b69690f29d9f698baf2868c89","ssdeep":"","tlshash":"fe0175e88ae54a3da1c0aa450a1fe550ee9c13b2f42e265e3f52445211c265459ee14a","first_seen":"2025-03-08T14:29:59.89705Z","last_seen":"2026-05-24T00:49:23.056718Z","times_seen":118,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/hm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 809\r\ncf-ray: 9555471b6d3f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-329\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2367584\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LE0kynFfHnTLKyWVx3TsPMmSc6iPcRmJg4Qa%2F28NWfWyqYpV%2FzKUb8O2VG1KehePxyTsabhy99YxAp3GROov0XZBYTYlVs6Bg5h2z1KSo%2FexSx9mYqnsJMcJXCqgEA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3496\u0026min_rtt=364\u0026rtt_var=3424\u0026sent=319\u0026recv=223\u0026lost=0\u0026retrans=3\u0026sent_bytes=120875\u0026recv_bytes=8652\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2011\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2f955c4d01185ecb885bfacba667d19f","sha1":"04ac20ded46e706ef82d8b4c63dbb18f09aa4599","sha256":"efc8652635ec1419d6087101d524c6048b19a55ecfb2e9574d4a756759751102","sha512":"7e705660c482cd90d3b3c2e7d8343a984a992026c38b043e73ddf1b88cc0d854270ba5f092206d81d96b0b5e73675cc18251ecfdf1f14ed9c14e54900485cb61","ssdeep":"","tlshash":"b801c5eda709acf5fa80f43793532060e95440737403e008a1e8ad84a142214e6c7626","first_seen":"2025-03-08T14:29:59.906314Z","last_seen":"2026-05-24T00:49:22.939659Z","times_seen":112,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ls.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ls.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 641\r\ncf-ray: 9555471bcde15690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-281\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 887658\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oKgci3k3601kse8JSXN3IxG6Im2qMoOrm9D18tcHVlNLCXXdQxy3DTcfXYF7asaSDMObzNFIL992YR9lZVN%2FXuQcgSG4WtEZ7sdBWveqC3iV6ulwpiFeRNJ2waE%2FRg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1540\u0026min_rtt=364\u0026rtt_var=609\u0026sent=400\u0026recv=273\u0026lost=0\u0026retrans=3\u0026sent_bytes=150464\u0026recv_bytes=11084\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2066\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"46f74da80f4c6eb0cfe179aa7b1b241b","sha1":"a913961660272ed8a6a45a100cd70bdff8e800ac","sha256":"acb3272ac6957280c774649b22cc18201e615d2591fd1890465f599ef5e6c781","sha512":"c16e9209fbea5b830d75a8860d36915620070437da262cf8cc2ffb0f9b0a66ecc22b6e3c02e9845ccc53313998f4b64ac63de817bf1cac01a73adfb2eb4d646b","ssdeep":"","tlshash":"ebf06279eb7350a58c51003a887b14c3adeb4312f95d363f2050cd7603ae77687d99d2","first_seen":"2025-03-08T14:29:59.883874Z","last_seen":"2026-05-24T00:49:23.410805Z","times_seen":115,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/rw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/rw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\ncf-ray: 9555471caf455690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1073802\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bEI0OqbGUMfbDW%2FC9eQ0q7dGBRpHy5hAAL0OjOuu4%2FONovnTIqlAEY9Vzc4QHRmk3SczL4p6INrSAp8rR%2FEh4scowF1%2FUAtqmUbL7GA7F95GUHxlBkuIdzRVfJ7STw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1547\u0026min_rtt=364\u0026rtt_var=574\u0026sent=598\u0026recv=370\u0026lost=0\u0026retrans=3\u0026sent_bytes=225912\u0026recv_bytes=15720\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2210\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9dca0f7117adbade3d58992a06fd2958","sha1":"3fa50629e233ca53b33e8376853aac41f828dd26","sha256":"528d7df037c17b11bc9d745a8a06752d741099255cfe1aa77621e712ef7200f5","sha512":"f25e83cd1003abef90c234239e5ab25e8a4f9382ace7f43e745f5f0e6f4a68139ebe5186125d967e31aa4ebc611f032fc5c639f30ecb28110e1d505e44e9b0ca","ssdeep":"","tlshash":"73f068e1fef49dd22dcd835101166714ce2fe252e21e935ac3054d0d470913945a66b9","first_seen":"2025-03-08T14:30:00.00943Z","last_seen":"2026-05-24T00:49:23.132315Z","times_seen":115,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 799\r\ncf-ray: 9555471d0ffa5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-31f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 642469\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TPkyHvhfqa0%2FqT0dwIrFUTjub%2BrXv4VKWE%2B6ScrF42tBNRQcn6oiyXubCUdpmuFYoJsYEi5hANExrzApcsLqwyF5TSJ5m8%2BGlAs6CltqZ0CZykam4Ve7hRysTOI2Rw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1305\u0026min_rtt=364\u0026rtt_var=602\u0026sent=725\u0026recv=429\u0026lost=0\u0026retrans=3\u0026sent_bytes=274750\u0026recv_bytes=18380\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2269\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5652389a1d6b60ac8d1d71bade5fc0d1","sha1":"aeaf651354d2c2b338e4740a282443e52c042b14","sha256":"e7b886a20c86024179085ebf191f3678d7de6a80dc516d810284c3de17d2dcf5","sha512":"6a2da75db0e8d400827c237c5d0449162cdf665260c7df0a0200cf00aceccaadafb040abb3d66dc7153a340a5d2a35f64b6ceedc6ce31f474348f47034433f01","ssdeep":"","tlshash":"5e01751932d1d430d9468b31eb0c8ae2d4c7680770a1be07895f4a3ec1593586ddc105","first_seen":"2025-03-08T14:29:59.79546Z","last_seen":"2026-05-24T00:49:23.392706Z","times_seen":123,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/tournaments/small-tourn_desc-9.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/tournaments/small-tourn_desc-9.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 459401\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-70289\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":459401,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 950 x 276, 8-bit/color RGBA, non-interlaced","md5":"5717d0effb765f1fb4381cf06499f263","sha1":"3f8ab05e7878563fe3ef4c5190ca1d9de32ec2b3","sha256":"af94f3abc19f69f37e8e929d739e54500a8755da0bd0cf94fc748efb5d3c31b8","sha512":"80d572c6121dc1741606862559bc72b2c8bb9a1d0d7551ec7fdc0827542681d2035c9632ead6a7fe8b6334c642661d7f5b73e73962b61f55eacddbb0a73b80b1","ssdeep":"6144:Hni+HIRKET4QzsHI1sMojkr/RM2ccjlN0me49+TqUEUB7kHGrcMxbghf/OVVloW2:/IEETLtvo4/qFGZe/LrnFghfGoWeKYe0","tlshash":"8aa4234386246a0559ee5cc710cb0d4adead22f927f8d15f52086f6aaf02f11dddb24b","first_seen":"2025-06-22T12:57:21.209623Z","last_seen":"2026-08-10T16:41:59.332444Z","times_seen":60,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\ncf-ray: 95554710ff365690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137530\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tdFZSW7LHNO%2FJjNyOE4S3CepR%2FEZElyU7eqaxSgIl%2FucLSZNhiV6Uf3MEqWhBl075lPGX9dsgbOhfUwg6F3FFVp7OBbpbSg6HeJ1dECffFjXYxY98PHramG0OhPUMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2371\u0026min_rtt=431\u0026rtt_var=1753\u0026sent=130\u0026recv=65\u0026lost=0\u0026retrans=1\u0026sent_bytes=49932\u0026recv_bytes=4092\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=333\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"db8acd0b7ff0f488fbf13f2a6b169e71","sha1":"153d6d6666aa1ed17e04dad087d842cc71c66fa5","sha256":"4e5cb5d752827644e1af835d844b314959d6a3a1c85e4c8bb01d933c95f3d49e","sha512":"e5fd4d052c21b55fe2ddf6ba689e1813e6e1c557f842e77e0e9d6d9963714abf3c0c1e2340b17e163480b6f8f550480846174b4e92a75996ab4452152243b062","ssdeep":"","tlshash":"c901c8b89114acbc62e17354c41bc4a7fd023c58fcb5e2f0983ea8e1bdd074ba289201","first_seen":"2025-03-08T14:29:59.83609Z","last_seen":"2026-05-24T00:49:23.117165Z","times_seen":118,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 556\r\ncf-ray: 9555471bddfb5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-22c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7B4r%2BWdyBX5tb%2FFgbFOAvhB5NLh%2Fm5Gz%2BrJVmzA34g6Sq4pY2C4cQ8B9UbyTPCYkUtrnQzGn%2Fo78pRKxtBTEGS%2FQB9a49wKLH6Pe8gotrOXS%2BMJDwDRp%2FMhxgVm%2FkA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1254\u0026min_rtt=364\u0026rtt_var=458\u0026sent=428\u0026recv=282\u0026lost=0\u0026retrans=3\u0026sent_bytes=162091\u0026recv_bytes=11388\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2076\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6e9189bf2f5299a1649d51db8f9e535d","sha1":"b434fd848fa1831d2806904f1dea83d27bdb2f97","sha256":"b4ea1cfb40570b8b531ed3d2493bc20044b67e0fc8e329b9ac7ef570a9162396","sha512":"c82934aceb4827f439ff91076bb656aa5d89a1cf531fe707a8b4a158b6f65b57535ee9585011572d0d305a4cecf7202b540835eac8c2ac40609def10aad245df","ssdeep":"","tlshash":"fbf0269f012c4cdd8f51132f91576981711ea40f9185386b8136c521f797c84ae601db","first_seen":"2025-03-08T14:29:59.954742Z","last_seen":"2026-05-24T00:49:22.978631Z","times_seen":114,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\ncf-ray: 9555471c9f195690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-239\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 763158\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BPZVLdRDyYK7TWD7A6BXoOPcgvHJbDez%2Bbax1qX9YIGoqVm4nOY%2FYO4al2YcSCB8putmT%2FMQ1SlQNBayFqVyhc5NQrCiP2dzaNTqKKhhn1w112xXetWB2qr5ypRJGQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1667\u0026min_rtt=364\u0026rtt_var=1084\u0026sent=579\u0026recv=358\u0026lost=0\u0026retrans=3\u0026sent_bytes=220020\u0026recv_bytes=14884\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2198\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cdd5f904c135c26c4f668f6b0f18b1a5","sha1":"a99c944b0e924059de8010c6c5a05be88f273d37","sha256":"954b849dfc01ea8031abd8e5af4091235a6107aa4be372bac6f050470cdf17f2","sha512":"fe7e494642af78c7ac1b5d33d3586d8dc5ad6a291961fe6cf9fd743cfaeceab58b507207ea8f6e9cd7d0232c33f69cd9da8499ad90b8b402e8d9e0169b9b390f","ssdeep":"","tlshash":"e0f026ed0763ccb6fd87017144095b11d94462dadb41c33254eacdf4472b36a5d74904","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-05T18:04:51.799418Z","times_seen":170,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/runtime.24dc93cdadebef5e.js","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:25.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /runtime.24dc93cdadebef5e.js HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-e6b\"\r\nExpires: Thu, 26 Jun 2025 14:50:25 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3691), with no line terminators","md5":"029a7c2b5277363d53df3c98fc3f8b52","sha1":"af0a30b8aa999d2af86b246add973961fe2d0ad3","sha256":"506995ca859af2e7c604d92b00d2d02e9d082dd4e7601a924f4ba5494a088fbb","sha512":"a3414b607df2886e40d7e88a7d5057066950deab20ddbd1c6fc04ba3e5ae4451b94dc3622065bb3ffcf30627930894858b533e67f7a6edad3ac4c9b298c9de63","ssdeep":"","tlshash":"b47109782368ed7626f144c4583dc281b72c642b152ba8f1bb5bdc746578ee10836ff1","first_seen":"2025-06-22T12:57:21.205123Z","last_seen":"2025-06-25T14:51:19.479036Z","times_seen":3,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/win-15000000-lootbox.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/win-15000000-lootbox.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 395196\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-607bc\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":395196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"401e7195e5bb89825620d65e150ec99c","sha1":"f8216cbff4be600192536b6ed09d68ad4194544d","sha256":"34fb62a5e99ed593df60a3ef1a6b1629ea9ebf6896ea246691a946f582e77ba1","sha512":"6cfbc15b6ad2edadbc3d00f8c82ee0e05dc5feb593a17e14df4b0075ed993222f4b674b4cdd94d3e14758ec48c0bd0922f48ab443dc352764986181864ab5a4c","ssdeep":"12288:ErAm6TybOLF6YLXLdI/n5ap2iNVFoHTPqKp:EvbOTbGn02iuqi","tlshash":"ce84237341f449ee0126503b616bc8ab7e07de835d4ee8ed9fef98900ba25c5738d152","first_seen":"2025-06-22T12:57:21.016136Z","last_seen":"2026-08-10T16:41:59.299182Z","times_seen":85,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":90,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/tournaments/kometa?lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"OPTIONS /api/tournaments/kometa?lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kometaloft.com/\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/info-icon.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/info-icon.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-16a\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23a5134cff64ca5058c70c3290592e38","sha1":"507e4e9cce12ee5cfbe9ed8bd21f429773742e01","sha256":"ab11f22aefb8593b6c6b5d07d8d2ccc6a8a9acd92c1e62e278deb2fb1705fc90","sha512":"4de3e2e8d6e1a7850b38b7d11df4bc93df38cf1e0a0452e2855832ad3c42ff250e0c92ff351b545bf1dbb6b3ae7c3baa9fa85284db08e5d86f568ea89b59f4f2","ssdeep":"","tlshash":"1ae0dff4ef1cd5cd83018bb21e2a214c030ea0b770200183ab0c3ef0959ace1d943b14","first_seen":"2025-06-22T12:57:21.069946Z","last_seen":"2026-08-10T16:41:59.347601Z","times_seen":203,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 641\r\ncf-ray: 9555471929ef5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-281\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EktiSKlKNYRLAKpLoAVtkzAWaiDKi2XzpbDWzvQwcOW00270u3Mbj%2B211ulDchSVJWYn2HsJT1kaLT0RTHgJZzk2E3q3lJOBvlN2xcDYujYBgAzf4PBdR60N29fqUg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1096\u0026min_rtt=364\u0026rtt_var=1252\u0026sent=203\u0026recv=144\u0026lost=0\u0026retrans=3\u0026sent_bytes=75744\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1648\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f361e21d4e24a2ce70b1e72c4433e560","sha1":"793f2498f09c4124c7e06b96915fe17ea67e3132","sha256":"9c0043557de0c5125473cd01244f0b21bcc73e0c14f271033c451a1516477b63","sha512":"d7be0e9033e99a59398f6372d6493549d552d15607e4a22702d89f0691b42fa2a7bbb755ca53dc16d45a2fa70f41c7341094a78d61e0920d967b61d53fcb941f","ssdeep":"","tlshash":"d4f023bf1911a6aee82e4f0815298a9d54cb05a08211d8258b66c339f63675a6df2219","first_seen":"2025-03-08T14:30:00.010869Z","last_seen":"2026-05-24T00:49:23.25957Z","times_seen":121,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/na.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/na.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\ncf-ray: 9555471c2e815690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152715\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bSFfSF26GqgAMIv9pvxUyDq0IR1ZiWNz3jCbJVQNi6I%2FYuRyF6%2BQRXehT7BF8HWBv45sfyYpe8CzC8uH9i%2BXokLr1SgS4JA2hP8TaZwo47N2QfHHB3A1WleWAlWnhw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1443\u0026min_rtt=364\u0026rtt_var=729\u0026sent=512\u0026recv=326\u0026lost=0\u0026retrans=3\u0026sent_bytes=192160\u0026recv_bytes=13820\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2134\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c08c944edff4fcf889c48e370dc70638","sha1":"9c79c532343de995069544ffc0efb11d345c884a","sha256":"94a9ac19f016ea6e388d3f27861fbaeefb9cf8b249c78d11e07b175c2397623a","sha512":"6893f1707cd4806103853fd6cd9461f183c5cf60cdce6797e7b95156c766689e6508772127e0592861bba2bda12da5b332c739c0fd29376f550a3ec0917d7705","ssdeep":"","tlshash":"340165b252d8fc25e7042c14e4594cc582b321134ea515a89b8edcba2a12bf258d99f1","first_seen":"2025-03-08T14:29:59.849521Z","last_seen":"2026-05-24T00:49:23.319078Z","times_seen":114,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 642\r\ncf-ray: 9555471cfff45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-282\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 139593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0PlMa1M9zQc%2BETF9ZB2EuSa9Cx13xkmlebGHZuvalSG0BitLAR7Va5rWVMJXWXBdS%2FYF5Ty5fKIdYOyz3ulD70GrVMLwkZBz3OvlnYuRQndMCxuqGFCFK4OqZw2aZg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1357\u0026min_rtt=364\u0026rtt_var=653\u0026sent=693\u0026recv=418\u0026lost=0\u0026retrans=3\u0026sent_bytes=262483\u0026recv_bytes=17924\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2258\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b1a79f2b965aa83998aa3d4875948214","sha1":"02f27adb70e492ee343774787343d99a8bbdabb1","sha256":"e4b63aab8df78dcf906ad2db4e56a83ff0665f409c7a693ebb90bb8449834046","sha512":"8d94ef0038420a2607713d71a8b467668ca677453253bb9bbe0055f3cb636b3f2372ac2ee7c8262131c5ffa3ae320659659c1402496309098a230501a74e6f6c","ssdeep":"","tlshash":"56f062d642102cb4990b4cf90263c1d8b137d9ba13fac233ca89a0cb26a787007d1251","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-20T21:41:41.22273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ae.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ae.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 586\r\ncf-ray: 955547214dac5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-24a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2326002\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U7Kn56eCC0rMsNvsgqPsvOwCJZiT4a5W%2Fb0WLrleXcgeKG6pdTRPEXiIzywFrd21DGWjPb8E6kzl5bVlD2BukWRH0nc2JgS2iE2XSrm8yetIbV3CyMOUpAZHLvUpkA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1546\u0026min_rtt=364\u0026rtt_var=1202\u0026sent=765\u0026recv=454\u0026lost=0\u0026retrans=3\u0026sent_bytes=289966\u0026recv_bytes=19520\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2947\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"345a6f0b3c483eff6775d8d5d6c976ce","sha1":"685614506b8472f70ccbc92c4b05556353346014","sha256":"2266457a83c6c197a603dab6d3e45103933dedfe36a1aea0e8973d8b910b5484","sha512":"5f9b784b0003f4682a80488795d7bd03b0928dcabd9ffe29d75e7373384bc93b8e126dea195c046f1136d5722433e9d33e63054868382069537e17cdbb83241e","ssdeep":"","tlshash":"3af0414647c45ccbf0e5a23a8b4ba787742a54a479338402f1a3275936a1200298598a","first_seen":"2025-02-14T14:10:03.320951Z","last_seen":"2025-06-25T16:15:04.817956Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/TheDogHouseRoyalHunt.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/TheDogHouseRoyalHunt.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 86403\r\nLast-Modified: Wed, 30 Apr 2025 08:31:40 GMT\r\nConnection: keep-alive\r\nETag: \"6811dfec-15183\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86403,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"85be01ca421281e9410f72e99a70fa89","sha1":"41ff31e656d56896a05ab9f859c8172a63436712","sha256":"0224881420bf0589b29f229ca7e9f3c0fb45960d4909f1c714c76f61ec303ebd","sha512":"957a6a3a6702fa000d8d932cd822bbd315f24fbd05ac9ec4ddd6c390c5997f75774f7e963fb06620ec5d3ca5a4e9f15000a0eec0a6059e8de60a2e00b00cbc82","ssdeep":"1536:FpQ6wcmPClQ6k0qMwZYQILPfhJhFRxyXGkBoXysZai9patNckDt3rvko4ogSTI94:L3mPuQ6vqMwPwPfJFRxyXGkmWhvkzhhG","tlshash":"b083125c6bd7d472d5cf6e680f404b89f0d4b7b080ae82e726c03f2651b79e29a446e7","first_seen":"2025-06-22T12:57:21.041199Z","last_seen":"2026-06-12T00:18:49.53587Z","times_seen":23,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/arrow-down.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/arrow-down.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-20e\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da29d3172dc6be45aede4274c6ed8f50","sha1":"dcbd48f1f1d3b5345f09cbe15621923a623fbdc1","sha256":"78dcbbd3adcaa20f1a5b52688f49a77d19773322b1847ee124cdb6dcdd51991a","sha512":"abc9fdba293ebc3cf26d4cec1e4a6cadc2293dea7b7e9c0d2bbd1b9df24db9d00957b70cc09660d53b3e247608e69f7896b95cab29b6d989ed52d57798c628e4","ssdeep":"","tlshash":"f6f0c9e79088d1f1fe1a03a44473154a276e80b67b8604a0d9782810e122ac28f400be","first_seen":"2025-06-22T12:57:20.976504Z","last_seen":"2026-05-24T00:49:22.759033Z","times_seen":73,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\ncf-ray: 95554714cc5b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762229\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mBTQMEYP%2FrYpUyxaMvdsaOSe%2B6UqBDAThHhNEiBzg6KqnLWKqRcwNZgSLgOPpiraqzh9yngSbWwxX4xc2TIdydUKUMa%2BMnzQP5Bx6zb0aG7mi2ylj%2FpTlNnfR4EiyQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2219\u0026min_rtt=431\u0026rtt_var=2557\u0026sent=155\u0026recv=82\u0026lost=0\u0026retrans=2\u0026sent_bytes=58318\u0026recv_bytes=4700\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=949\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c93c882fa9793e7c3b1044c38d68c54b","sha1":"3866a6755daa8565cbfbeb977b96c19d5ad7599a","sha256":"c7df5c97e2b0164f14ae5aa4d61101d6f4d3d5d04577660690a67c6f1c2ccfb3","sha512":"5647649a878e9c708e84fc73c30e810f38ad0418cd0448d8a8d743a4962505a85b4f0a09a93f7648845c478b70f816824652cb67662388ae3013ce67de0385cd","ssdeep":"","tlshash":"010144690b28fd6c804a1f62652b8c106e759450dea94793c662693d3782385d299328","first_seen":"2025-03-08T14:29:59.829655Z","last_seen":"2025-06-25T14:51:19.48615Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 682\r\ncf-ray: 9555471929f25690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797770\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lGV%2FbTZEqmrJplW7fEiKNSq0bZUM0OeWRZ6ylWbDFVaJftZPDtK187lWdsHqW0%2BGMfAeIReizc3Q3%2BS87dzXilEfXcaoacMBaeUo8pvr6aDy8eXA2YcDQQW7%2F2OKyQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=702\u0026min_rtt=364\u0026rtt_var=372\u0026sent=242\u0026recv=175\u0026lost=0\u0026retrans=3\u0026sent_bytes=92155\u0026recv_bytes=6904\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1666\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"74bd14eafb11a3abf63a68641d027508","sha1":"5f7f887219ccd1ec126266a42571eada4efa70c6","sha256":"393807418900a02a9fbd1672e2d60d22ee442b37733cf1d2e6c1c383cf71b271","sha512":"7cb61c594cad2fcde1945ad7fb2773eb194655687aa3d5f48966f18bf2ceb7e03cd32175bacd5b73f8f5132f8622eb8d2915fb39d7eccd0f4a81f5f79acc044c","ssdeep":"","tlshash":"c3018391e2200e97d9b10061b25a56e665374d30c57be31602f6c8f3051d3d32fcc1aa","first_seen":"2025-03-08T14:30:00.048856Z","last_seen":"2026-05-24T00:49:22.712557Z","times_seen":114,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/om.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/om.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\ncf-ray: 9555471c4eab5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-261\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978210\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5Z9qT3lq23yQTYwE3ZpkkduHZkbiOiGYcqUTVn5MjaO6xRf%2B4L2MP2FxIMBeXOfWeuDz9ulih%2FF8ivc83lISG045hMromUCD7%2BFKVDG51k%2BkQusBVt4CZ3aPhwjV%2BQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1385\u0026min_rtt=364\u0026rtt_var=520\u0026sent=529\u0026recv=332\u0026lost=0\u0026retrans=3\u0026sent_bytes=199893\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2142\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5fdc6241ea9327140b318b774504a5ad","sha1":"b96f8b0e6e3fb962d42292f13eaf3c270c08bba4","sha256":"067748539a5cefd400f95bbf404f6dfa7b4eace6e033378624a125d0983f7e01","sha512":"d48e323e23193a02eadb4b319afb9f0b19eefda252023b24411d69c55e642963ef73b2770bcf250285f46610e97b1958ec601a3efa1f731755bac3c7b9ad39a6","ssdeep":"","tlshash":"93f0b7ecab105c13ddb1a3040fa8020475011248ef9d40cfe2f28de81718d1d53857d6","first_seen":"2025-03-08T14:30:00.001275Z","last_seen":"2025-06-25T14:51:19.487647Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 961\r\ncf-ray: 9555471cfff35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-3c1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2282499\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dqrHXGvrGtcvwfQ2Fy%2BJ9jaPwVOojnM0SoKU88%2B3dP1LGNyzamsD1vVpAU8L7RAUTx4QpD8j9evGIjEz3%2Bp8hSYD3sRAdWyb0yUlRbMuuoVV9u%2F1YLvDWfQ%2B%2FKtoJQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1260\u0026min_rtt=364\u0026rtt_var=657\u0026sent=696\u0026recv=419\u0026lost=0\u0026retrans=3\u0026sent_bytes=263854\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2259\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f8f3acc89cc04875d8a437f43a43c7dc","sha1":"1d38ac0a9454cfee0a739ae69c2a67573a8e4459","sha256":"f6ffc2063ab273612d71f5dd54f95d2237952b68ab23233c47cfe48470ceafed","sha512":"3a7a0a6e5fa964b6e09575195cbbdcc0b4d611150d94073961106f4e01519ed1a3208752d713155cbe559fbdd018ae67584a4871c9ec43c834717e4b5b3943e7","ssdeep":"","tlshash":"5511c8b315b5ccf7ced4cd6d1fbf4907c45146b8c44f0995524c5e19712e894db99350","first_seen":"2025-03-08T14:29:59.863905Z","last_seen":"2025-06-25T14:51:19.48831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 561\r\ncf-ray: 955547102e3c5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-231\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978210\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OFK2BCgF8STr0rQjo5rU6bNbnpIR85gBoiPtNfoBSoaVjQFuGZc95pRLZVgxiV957INkDOlIOI18%2BPGpt1WkTBuVl7YuWhub4QKxtMEDPar%2FOhygZAu6CpWRGHAbcA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2372\u0026min_rtt=431\u0026rtt_var=2077\u0026sent=117\u0026recv=58\u0026lost=0\u0026retrans=1\u0026sent_bytes=45044\u0026recv_bytes=3788\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=217\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"82c871df1e79facc9547b849be362bb2","sha1":"b3214d2dd59d7961b5c1f18f5ab1749734848720","sha256":"c5da2897a66a3d015a25dd2556c3cbb0f309546047a7e850e12a63dee7e3654b","sha512":"a76757cbebe8c70c1b1360d6cf25a9ce8131c3ddf94b0ab364579706e1f4ccda8d8d756abfbc56baccdc7a441ee111ca0ed129089b3186954189470b84dc7831","ssdeep":"","tlshash":"daf026f39192dc60d83b5205223a81c2dd7863740536104fca968cc46f39103622c291","first_seen":"2025-03-08T14:29:59.782804Z","last_seen":"2026-08-02T10:38:22.362968Z","times_seen":135,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 747\r\ncf-ray: 95554710ff305690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2eb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839344\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YE3%2BPQnfYuSR4ZDseGzUP5AUBMgnXeQ9Sa81ug8oH0OBIGMod163m1MPHvq2El%2FjxVFs0Gr1j7W3U%2BJT4d7drJAkfUuofm6dio0TIkoq2pIF7tLow7WA1ons8oTvhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2371\u0026min_rtt=431\u0026rtt_var=1753\u0026sent=127\u0026recv=65\u0026lost=0\u0026retrans=1\u0026sent_bytes=48676\u0026recv_bytes=4092\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=332\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"abd614c6e9377a8d00434fdff0e69f67","sha1":"e55ce6da3052dd14905805f0e6f419c9af357bf4","sha256":"7e38ab2d0d57acc6c3b797dae27687bd191039b71b0e410fb7842357447617b9","sha512":"01991dfbea9f22112d56a012b484bd822fcf4e7a04fb153365e6ad43b4d6ed2b38d607a6dca3667be31cc045fb554a1b0adfb004832085ca0605e0469825499b","ssdeep":"","tlshash":"5a0194ea3348aa15d7ee012fd68e3084da65620275bdadcb6e79581a41c026ed0df301","first_seen":"2025-03-08T14:29:59.873433Z","last_seen":"2025-06-25T14:51:19.489532Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/fr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 659\r\ncf-ray: 955547192a045690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-293\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 155898\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zzR4Zqu%2Fl5qsM2529rzhZa1k7TLplXJIeEVd8nm5PQXY7umcovBm4ys0LIA%2F392c88OJu%2BbPuJNs6pk3PhONyRTB%2BBefcC1uSYGj7uZ0PTY06RtXk5jcgmEAwgha1w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=738\u0026min_rtt=364\u0026rtt_var=376\u0026sent=236\u0026recv=171\u0026lost=0\u0026retrans=3\u0026sent_bytes=89612\u0026recv_bytes=6904\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1663\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"15741e3070023b66a1240b674fd4a503","sha1":"88aa6bc5ba1e5b9f7b321cef4d19e5e8927bb2a4","sha256":"6d84641559955d43b39d68511d4973cfb3f5799c202f2610871cd01c40007c8f","sha512":"2a0b886da59b07cd7a8ca1996e7c4bee2332a5faa9558f4c8a288a41d4d924d8ca22b87bc331205fddcaa3ea5cf379505a7c6ce04663f0a1826358909c0f7e01","ssdeep":"","tlshash":"3201839223962e3cefae427112edc930c3ef15ab40f1736d530e7046f2923808060adb","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-20T21:41:41.235455Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 667\r\ncf-ray: 9555471c9f1d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 664767\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K3niVd2dTdE7o5g33qpaFeQXy0LZsATu9zQeMkXpyc3GbuGU%2FP3KPOgqTZQY7YIWZY6%2BBEuG0kJPwc1XHQCXPsbGFHL2fME2LE8BP11RfcSDQ5xivsXCOt6y7fz7pQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1667\u0026min_rtt=364\u0026rtt_var=1084\u0026sent=576\u0026recv=358\u0026lost=0\u0026retrans=3\u0026sent_bytes=218624\u0026recv_bytes=14884\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2198\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":667,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e93c7499de2947fead94bbeef70bb15c","sha1":"d919947287f37ef75157d8b3803fcb96f978a624","sha256":"d6b2c2ba82a71414e0b4cbdd13346dff12db61a1b543e63a75e580450532faf6","sha512":"2a15e3cdb7ff5c4710b2b69c90ce64e2b0695b200fa4f8b5be8f9049ee7ac1b1c2e4cfe782e25af1c6bbe210434227864f926bf2409102f708abed15395c7458","ssdeep":"","tlshash":"1f0183336b1c5c38cd0f4a3b376b99b2e80305bc58c69d8398020a2b881358469e3310","first_seen":"2025-03-08T14:30:00.026249Z","last_seen":"2025-06-25T14:51:19.49055Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 599\r\ncf-ray: 9555471cdfa65690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-257\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1090215\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ifg8Um3vuOcS2Yobu0%2FM6XluvoGKpAIpS2RFOkweWnj9WFmBuQnv3vu0baIFu%2B5NsEJCuy5ipY5pInd7Jb3jw6QxymGTivKnML%2FA39aLVDOwfuef84M78qaibpoFrw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1419\u0026min_rtt=364\u0026rtt_var=1315\u0026sent=681\u0026recv=409\u0026lost=0\u0026retrans=3\u0026sent_bytes=258951\u0026recv_bytes=17392\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2248\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"eb6746083d88a2686df655f5f5b72a16","sha1":"c18e49c845dca64b20af8977d2f676e8173e9057","sha256":"43b657e4b13c968dcd26b087d57a5c213228544217353e68bae151c1cbf61b58","sha512":"ff31a7c67cd17597b5e12abf32c9362c9c8e059c9f4cd0259b6839252c68cc92ca4241a656f55358edc3e00e70d447245ed18bc0d65a2cc6c99528cf04bb74f8","ssdeep":"","tlshash":"c5f0479ec1335e2bdc788531d8c80181aa1785b1155f6991cfcc58afd7a00dc004964b","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-20T21:41:41.232851Z","times_seen":10,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ci.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ci.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 636\r\ncf-ray: 95554717c81a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-27c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3%2FBCq7FzitnAWQwWSLCPvBbvqTRUb%2F1dkawTe3lZgCzRIP5NIB88MIQQb6EWumv4nTam80BC%2BGd8XkgJOmEle9XCGPRIvQfioBRsg8nYW9lEvvc1uq%2BJxQwZ%2FakCgw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3383\u0026min_rtt=431\u0026rtt_var=5414\u0026sent=181\u0026recv=107\u0026lost=0\u0026retrans=2\u0026sent_bytes=68474\u0026recv_bytes=5308\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1423\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"7d30a4db029f3f08bbd68a4746e6c970","sha1":"d8db191d1c5b2e2102e6959219730e682250836c","sha256":"bcb427e2ba59a41432d57780ca4c599811ad6b49e883ef4fc12b63198ed88b56","sha512":"6163a95e28c198823378291eec03d31b4982f55d4bcdbcf6b8b0c515bfda4836b583d012106ca5b847233971050de28e417f51360d9213d1aab68893d000d717","ssdeep":"","tlshash":"02f02db710eea89dbfcfc64e44981055f82782384904cd519e2b8e1f29b8612c0a62f8","first_seen":"2025-03-08T14:29:59.769984Z","last_seen":"2026-05-24T00:49:22.657917Z","times_seen":115,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/fk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 752\r\ncf-ray: 9555471929fa5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2f0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1694706\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=acGthgCFiMfcpm8S291g1vk93mT%2BjX3wVtaYP6%2Bb1FgqNviLmme3a83oWDm5WP1R1sdKHzXicD9H0eAvKS94nOT3u0w%2ByYNzTip518K%2F7uVp4npWHZ%2FpoVyfnQ8vcw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=877\u0026min_rtt=364\u0026rtt_var=860\u0026sent=206\u0026recv=147\u0026lost=0\u0026retrans=3\u0026sent_bytes=76894\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1649\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6248a2b95c9cd018ada7b3b13eb248bd","sha1":"23f5aa83e8c7b15f6eb5bb488c91980198cba9a5","sha256":"59877daae9eed4247b68ee5e9c71d02c63e2b04271f3d73b6f31453ec6b5ac27","sha512":"1ff79c6ad51497b150d4539d723c9029a406a6a7e9f62bfe8c08cf314f9034c2bf87bc679abcabe2a0cb33610da7da6212ae25e61809415d202c7d13baee6840","ssdeep":"","tlshash":"1b01b58d31264d5c8b7cba76d7282ce80c298ce812062b1109508c36d0f6d010e3a466","first_seen":"2025-03-08T14:29:59.918201Z","last_seen":"2026-05-24T00:49:22.847555Z","times_seen":114,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ge.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ge.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 701\r\ncf-ray: 9555471a0b195690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2bd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1528317\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C7fmir8G1gio1YTv3DkvsM05W3dRB2%2FwqqguXIKr6xr5DCFkEWTBe1ALgUq1kXwOh3sNaLOut5F15HXlJJ3HszbvEZ5uSEyv8LRzfXFUwGLwux4j4FK3druRVwOZNg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3881\u0026min_rtt=364\u0026rtt_var=5351\u0026sent=271\u0026recv=194\u0026lost=0\u0026retrans=3\u0026sent_bytes=103379\u0026recv_bytes=7436\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1782\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e3ebb76cfca19ada25c2d24c9606b891","sha1":"11fb5ac82e9a988dc602e1f41105d68591aac7df","sha256":"6706e356e059f9cb35260d6a786f3d00921b9f56f94dacb9972c168e167e5c79","sha512":"838a07357000c4b5fde06cdbc8dab05b03e6b057a7cdd1e0daaf13e34a9535cffc12df7f7488b90780e816a214ffa9cf2530c2666fd9f9510992d3d48de24b26","ssdeep":"","tlshash":"070144f67f42f47984611595e8435a99e4e202329e9594126b70bf33b43d4a85584f02","first_seen":"2025-03-08T14:29:59.924357Z","last_seen":"2026-05-24T00:49:23.081858Z","times_seen":115,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/us.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/us.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 813\r\ncf-ray: 955547215db95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-32d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1591403\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BMYH20SuIX9SdLd41rjmqkX8F6MgggisX0XmfOS%2FdPi1X3hq%2Ft%2Figu4RdnVfEbiL06%2FB339%2Fl1b6LEC63nAR8jhFL3h0Omvl%2BgIBMx3izUithOagc3OjfEDwlY5zDQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1458\u0026min_rtt=364\u0026rtt_var=579\u0026sent=781\u0026recv=462\u0026lost=0\u0026retrans=3\u0026sent_bytes=296293\u0026recv_bytes=19900\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2954\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5268ee5aae7f14ddd7702a8bc977eeec","sha1":"bebb1819975a1e9f54c36854c55ee7d4a9106693","sha256":"d2fc9ddf921f60c3d09f272e85a550bfad3283618ace26451646073b2a943355","sha512":"a514a3c377da27ee13b79570d0422f2c85944acc0e2130c04d3183b6c71b4e834738e9fb3f88fc42100fca647a875a502ac43e718fa45f0f7f6656e5bba58c8d","ssdeep":"","tlshash":"7401ca37219500fd552a8a5fad4dc204ecf45b2bb73a4405e41dcc6101d539ce7da6e0","first_seen":"2024-12-21T16:40:12.670346Z","last_seen":"2026-04-29T00:02:11.945454Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/zm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/zm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 688\r\ncf-ray: 955547216ddf5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1705761\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IUkmFxnYaQIBEYeUr82%2F%2Fd5%2BC9CAbSHgYh%2Bfjza%2FAqIbqU51QoDXA1YFvd%2F0Xa52IZIwD9csCf1WN23A5R1W%2FGgop0qywss5hItdS0D5B%2FF2cSMntxZiTptLjLZu4w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2157\u0026min_rtt=364\u0026rtt_var=1641\u0026sent=813\u0026recv=473\u0026lost=0\u0026retrans=3\u0026sent_bytes=310183\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2975\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"4c74a4699a5db48c932e5e8626ab45c0","sha1":"24b1c16919e1eaea149580f8bbb1c71cc54c2997","sha256":"7676ff4728809598bf9ac9763a1c5146c469f472e3f51efc531635675f047684","sha512":"618b9d4ba66c11d1037f727c9744f83314e67b51aba6ad15bf43b9154c0a05dcce2e23cb63b84623052d64d041a3061adbf7cd4069b5cde66e0ce642cf0ef62d","ssdeep":"","tlshash":"310149f7ed734c3d52c815f46e3801655881a52d26317acf940758d050d8f0400dde56","first_seen":"2025-03-08T14:30:00.059247Z","last_seen":"2026-05-24T00:49:22.692238Z","times_seen":114,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/DeadwoodRipNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/DeadwoodRipNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 57786\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-e1ba\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57786,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"9bf3bc96569465c6e11fb25760fe3d74","sha1":"d5817fac9971a4b3cc2daf8bae8166d52660ff4b","sha256":"9e40bc332d7979c61a7830c977983bafe96257ece7e9033a5931a052c005b6e2","sha512":"03da3c7b7dadb8f2ff58b93b7642709ad98eb166231ce62a4a1fa6967467836cca04d2e76cc6915c9143f87d9cbaaf488c481f60866e9add5d9c0f54c9ccbbe7","ssdeep":"768:QG4dHj0Bf8s5njeKfhKpf+w0Gg/E3JNkjA2osXNDgaQfzpRIG4h9j9hofRlc2qv2:QGYjUf3/4JhwE3pyXY3wh9j9h6G2","tlshash":"0243f1d5d21f05d8f9a148bedd329dc115fc5ca9c507761ef5c3302aa86eab22ac8620","first_seen":"2025-03-08T14:29:59.797664Z","last_seen":"2026-08-10T16:41:59.369405Z","times_seen":208,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/5498cec/chatcontainer.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:45.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/5498cec/chatcontainer.js HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 63357\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6852b46d-f77d\"\r\nlast-modified: Wed, 18 Jun 2025 12:43:25 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-25T10:59:59+00:00\r\nx-node: m9p-up-gc54\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278898,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"16c5cd555c87abb393c1050bd02b7bc6","sha1":"ab48d0411069f64fc1d07f355dee243c66bac9af","sha256":"5142a4a8611b5865203d98d34b01bfe6c56c1a3ded05b2f14f1fba0499be494c","sha512":"ffc01b5e2efd8bc762fddfe3e1f986607f85daab3b1e21c972b9ebe35ce4709fbd376b8183e58f475bf402f51ef8c391893c9cd633fdcf93618362e98ee645ea","ssdeep":"3072:xwnGzQHx+JY0fghjeaBESJLqg8MXDemBvCyP/AZQN:+nGzQHx+S04VHvduQN","tlshash":"5c542b9071e0ecb806d641daa83b1204f3291c3df419bd58f3f9ddcae75598a2265f3a","first_seen":"2025-06-19T14:21:53.787729Z","last_seen":"2025-06-30T14:38:02.234144Z","times_seen":81,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/categories/popular.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/categories/popular.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-24e\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad3ab692945a93c4974467c3373d236a","sha1":"64e77bb4db1d16ab111fd65b2fdb3d003bcdb1ec","sha256":"9777eea65b8ca55f74b723ed796e04bce6dce9ba08ebe21344097df97d479a1d","sha512":"f762ff835b5e6e6bd39f240f39c2c3507d3cd306ba5ca409814711f095b6f7ee5f99f4d2777b39a7c555c4f51744d85e56404c78f97bb4f4f1a248bb5edfe6bb","ssdeep":"","tlshash":"28f04ce6c20843bc60ce4e9ca76c7124633eb0b6749540a1ee8d459e44035d0f9ab918","first_seen":"2025-06-22T12:57:21.087647Z","last_seen":"2026-08-10T16:41:59.354476Z","times_seen":144,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/tournaments/small-tourn_desc-8.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/tournaments/small-tourn_desc-8.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 42410\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-a5aa\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 950x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55c3bb0cda5c5bdbc89b1c5673d92a63","sha1":"96cf5e165649d5f76af8e39315480abb1fc53d7a","sha256":"d9d4e49d1579b9970df3ff5ff8015c55696d23c677439f00f69de63b20ba4ab8","sha512":"ae661190b42af6e74534df69f5ccf7670185f2f8fe67d28597891ad31ae20747f12302d6c9f0f7d39969887b3e75825183ef67937ce3c5bcfb0708a45b378cb3","ssdeep":"768:eqwYUPJyZrGFCONZub+dUaS8q22i+ekVqjfH:3wbW6FCXgUde21JEjH","tlshash":"671301e753e311bbef5b3dc0238782876f82a145ab775c93b4162617c92cf08f99a844","first_seen":"2025-06-22T12:57:21.058626Z","last_seen":"2026-08-10T16:41:59.382218Z","times_seen":68,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/tournaments/sec-tourn_desc-10.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/tournaments/sec-tourn_desc-10.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 65622\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-10056\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65622,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ac84863ee532dcec143053399e8851b","sha1":"134ae21a78a4173f78174dd3f80d660a450926fe","sha256":"a0d6e48c872671a610e79b5f4941f6202abc35682427c273e8484e5947abcae8","sha512":"4b852555c3db797ffc280913a997890e582d744c1aaea21996f04cdd9d53a2c45e0c785d886863f4f267177306b78d73d81f1e4837fa7ad7ae375eb365c9f74e","ssdeep":"768:E+9dsm//eSF7h4Kq5tcryXjMuX2yTMkkNnd5OtJpl9C7t/gPSFZUlK2n2lIqlM54:EU//RFB8OjuGTOs/+EIKkkwFjy","tlshash":"94530291faed1358abd09f4cd62f0801f7a60641e5335fe1b2ce59e4b2a568fd6e84c0","first_seen":"2025-06-22T12:57:21.217775Z","last_seen":"2026-08-10T16:41:59.329618Z","times_seen":66,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/am.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/am.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 601\r\ncf-ray: 9555470f8d595690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-259\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614664\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6YKlP0tAHFXWwt74ke1qdxCwx9HhU%2BeaNssVk2Ou4iTDW2L4Fqq3tiEFlZgmErmtWw2d4%2BFBd%2BZqnPUxQd%2BNwRAPNtSg5AyHrr7HPD8XVbMtlTUa4pReLLB2VOy2VA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=34\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=14220\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=112\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bacd9f3c914a837c831adcc6bc289fa9","sha1":"7ef48ed22b1ae7b20c1b0103fb6a33bd9073e3fa","sha256":"4976c3974b1c8ce6d92615b074e50caf1a8081a908acc1b3aaf8111c86875c6a","sha512":"3578f195b55a12b233a4c5e16f6035b86d63883f7ec8214e5801c9fdf86656839e18f48f6aab7219eb44de781b3d57ee87022e739c47d6a8a0b4375b5a1c6211","ssdeep":"","tlshash":"faf047d363381a7bef9677f803970d696810d7d07108d7d017a9c6d24b1af6240ead19","first_seen":"2025-03-08T14:29:59.827682Z","last_seen":"2026-05-24T00:49:23.073104Z","times_seen":116,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/kr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 747\r\ncf-ray: 9555471bcdca5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2eb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 140621\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hoVZEGa2ki53HRVtzGj2Z%2BlLh%2B%2Bw3GmeeuF8OfSXRdinzv7N8hfA%2BJJnL8MGLjXjn9xnxqYCSf%2Be9l1WlornpOp%2BCJpWM4Rxg3bnQKuOWGSH6orUzo8%2BsSPUd6t%2BDw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1683\u0026min_rtt=364\u0026rtt_var=685\u0026sent=391\u0026recv=269\u0026lost=0\u0026retrans=3\u0026sent_bytes=146787\u0026recv_bytes=10932\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2063\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"eb305819ce2f4a6fbf08cf5f272f1651","sha1":"5553c01b530df5ba82fb1f70ff946332420620cc","sha256":"21b490a0640b1fc6c1ba746149133f5f7f2f9b92dd97572f59c651010fa62952","sha512":"5b455e0b0fbe36db6a4e71c6b1e2a65feb6ad8008b949270f453ded474df899905615ba4ddb1f8fc39c26bf89fdaa76bfa986b91b86aefe870c8b4dd90ef98b4","ssdeep":"","tlshash":"450165336349acd0e871061604a7fe9f5c394320792e15ee0461cab94c881d73e0bdeb","first_seen":"2025-03-08T14:30:00.039544Z","last_seen":"2026-04-29T00:02:11.946573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ve.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ve.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 634\r\ncf-ray: 955547215dc75690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-27a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1028012\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BHnHVV9nmsV%2Bx6XOR3%2FB8zOK7DDi3vPqSc7%2FebgrNfmO7fpYBdzqP4yGerRb78O60AOtEvgRhsc1LD6H2mthb7i8uo38QcyqtmCMGMb8Uj3uyVwP1cDbXGFi63TTHQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1411\u0026min_rtt=364\u0026rtt_var=447\u0026sent=805\u0026recv=470\u0026lost=0\u0026retrans=3\u0026sent_bytes=306291\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2965\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7415a4288508752dae39eb4515fa548c","sha1":"f3c884f01b279d938dd852d717a9e85ae19c2a78","sha256":"ecd51b77bf709b69e0c9bff61a240bc8c87240f6bd25c802508eed4ec542f536","sha512":"155fd370cd915c51ceeccd1c06dd89662e5a81ca0e0d397c500fed11538e1b20b87cb4b97373c2529c7efd9bb5c7fb29bb80481986f3b290855f58787ad537b9","ssdeep":"","tlshash":"89f0c22081072f39be84022b8d2a5682ede28838f823c5038d8983b68cc417040e63c3","first_seen":"2025-03-08T14:29:59.802206Z","last_seen":"2026-05-24T00:49:22.688963Z","times_seen":120,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/wtp/loot-boxes.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/wtp/loot-boxes.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 27722\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-6c4a\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/km.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/km.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 791\r\ncf-ray: 955547159d415690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-317\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 232879\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7Wbiger0TRaTJ0rIlul7504uVw5Gigu%2Fwkf2Ke%2FXkSfj4PT3k2S2EFxgafOPdOQXIV%2F6rs0vQ1j%2BqWW6TLOIOmhfK0hgoAXF7cs7IuagUTINegTW1F9A%2B5G269xVGw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1691\u0026min_rtt=431\u0026rtt_var=1287\u0026sent=167\u0026recv=93\u0026lost=0\u0026retrans=2\u0026sent_bytes=63251\u0026recv_bytes=4928\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1078\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":791,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"273c0c1e7718c2e838200b0f895653b4","sha1":"84c09fe321eccf749aad6616f4f394298f07829d","sha256":"703047038f7214a470e24fa1b67f98282c8d0f7355913635ab15388fd44e6f35","sha512":"dfd5ac0064be1d69d292e1293b22e21e3fc27a7cdf72ff1d43ff973251bacf8baf6cdfb3609b85f18ea3259db3b4026afa563436e1d7c4c4bfb43738f98b1d47","ssdeep":"","tlshash":"0a0175fd7795553c4b230a52d3424b65cd1a809c4928c717461d8e753a0254d7bb58a6","first_seen":"2025-03-08T14:29:59.76297Z","last_seen":"2026-05-24T00:49:22.856179Z","times_seen":120,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/im.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/im.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 536\r\ncf-ray: 9555471b9d855690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-218\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2DN3TqpUeFCSCNYGvlNkRC8XOFuWgjd5z8cIGYWZwiXLPjXdxTzmR1m5MjH%2FHwATCmY1ElSjpTZlQPHhq5XfRbMANrV66tLvrA%2FBph50q1wlQ41%2Fpf5Ip3evsvinrg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2722\u0026min_rtt=364\u0026rtt_var=1222\u0026sent=347\u0026recv=242\u0026lost=0\u0026retrans=3\u0026sent_bytes=130660\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2036\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"563193a286c3017ae25cb457f72ca2ff","sha1":"918af13ef3ad67271b37546048e7249759ba80e5","sha256":"128fa5894e903b226d145eafff5cb7c7c861a86b91318bec42c409e7f052bc85","sha512":"09f1dbe1341caaa2623d2ff9da4a812658fb8b4e9f5f9f9b64dca7b693c36c1bb0c2d95de04d3c7e216724cdc646e09d5be03c77492d74d2a88594309385d48f","ssdeep":"","tlshash":"f8f0c0a11b43dc27ee2a92aba41b4612401d706b436a581a8843be24551d6781c74666","first_seen":"2025-03-08T14:29:59.784791Z","last_seen":"2026-05-24T00:49:22.670942Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 593\r\ncf-ray: 9555471bcdda5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-251\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321089\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xjah%2Blhm%2Fo%2BqH1WezJBIQuxKSTkPlzjJ3WnF6J%2Bu52GB9wtQ3mz8pUY6FL7W6JANBdBC1Wp6uBMy47%2FS7tmuX4YxDYR8RlNWYiG6oLKJWcFvk38ZUOT%2BHwUiSdqLXQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1485\u0026min_rtt=364\u0026rtt_var=500\u0026sent=408\u0026recv=275\u0026lost=0\u0026retrans=3\u0026sent_bytes=153976\u0026recv_bytes=11160\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2071\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b24ac1c72ab893237555010b810c5716","sha1":"9d990479323300948d854333617a2c6dc1a9380d","sha256":"dec34e82883d4b9e6389e248f8724e91d2416c7dc82b4c7e41bea321144ea4f6","sha512":"dc397b38c8b0a5d5b1523ce948211a43919f8f9fd04d56f313617e444736c9ef1d06ad5e0ae02d5fa6f5f8b699dfb7439bcb44e26bed19e063909a182568c59d","ssdeep":"","tlshash":"61f047c0682a5c7cc968a63519a56181d6e0021487f54197186589b7a71577cc1e11b9","first_seen":"2025-03-08T14:29:59.831652Z","last_seen":"2025-06-25T14:51:19.501486Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ro.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ro.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 515\r\ncf-ray: 9555471caf385690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-203\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 153796\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V5mtFMVgVP5qeb3LzsjDEc9Xb94Nq2th0uRjTNY6ttwBJJoHB04rhGLxXIxHAk%2FY5SkfuN3qHdGBP%2BoCKff6Njj6SD4aYjWtQl1hh2qNJ%2Bj6RA8iarjl2sHjMekALA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1586\u0026min_rtt=364\u0026rtt_var=662\u0026sent=591\u0026recv=367\u0026lost=0\u0026retrans=3\u0026sent_bytes=223596\u0026recv_bytes=15492\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2208\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"41e80d8c304dea783d42ec06b6023911","sha1":"f813521125786f75d58ddf39be6147f87accbf8a","sha256":"a547bc8fd2468b22e1fab78e3b204eca1e4f9851685d0b63e0856724bfbb56d3","sha512":"e703fa7ed48f534a109276ab68c91082984afcfefa9153a6fe0afa6d804522812f2f3979d05218fe694db28621aa949a3036e4edf94ff98f170c8dd0a2241922","ssdeep":"","tlshash":"81f075d2203c746bee0b38068f50ad088dee2686c81ec0a09cb68835f201d0431029a4","first_seen":"2025-03-08T14:30:00.036671Z","last_seen":"2026-08-02T10:38:22.372557Z","times_seen":150,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/agent_message.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:34.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"682eeec0-eb0\"\r\nexpires: Fri, 27 Jun 2025 09:07:07 GMT\r\nlast-modified: Thu, 22 May 2025 09:30:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-05-28T09:07:07+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-10T20:59:18.866967Z","times_seen":16737,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-sber1-az3-20.jivosite.com/widget/status/2256902/ziqY8DLV0e/62243f10d813df58?","fqdn":"node-sber1-az3-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:45.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2256902/ziqY8DLV0e/62243f10d813df58? HTTP/1.1\r\nHost: node-sber1-az3-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://kometaloft.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 184\r\ndate: Wed, 25 Jun 2025 14:50:45 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":184,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5cef939ae5e61ae749a6e8f374397ee3","sha1":"da90b2ca9c0c49f34690760ca6a868756bd41449","sha256":"7ee3d63110e48bf74ccb7bd711a06dfeff63231e6a1b7aa935072f81ccfd11a7","sha512":"b3e8392196d1deab64b3885043910aa699a611a1c3d60ff819f3303d87bcbd020866de07e4b78ad060d8db9da12fb495f247add32b6fded7c072b65bf8938a5b","ssdeep":"","tlshash":"bfc02226483a05650ae896b0b0f73f0a043801023dc0e51e9114a848002f083c00f003","first_seen":"2025-06-25T14:51:19.412628Z","last_seen":"2025-06-25T14:51:19.412628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ca.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ca.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 606\r\ncf-ray: 955547110f5d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-25e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 146697\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cbU%2BFaE2VYfkhET%2FsNSiBeX6TeEfmILSC2erATi1I%2F7hLS1x3uT1UHA6XqrL56GfVZ%2BKS4WqhuB3SS6%2F%2BrdMi88UenNjmOecY3HBPYsw87JwUpJL3WCVaqZJUPPmoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1901\u0026min_rtt=431\u0026rtt_var=1457\u0026sent=144\u0026recv=73\u0026lost=0\u0026retrans=1\u0026sent_bytes=54908\u0026recv_bytes=4472\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=356\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5b490048faa5531ffb8f588f73651c65","sha1":"6cf3a771eb1d23cfce02f4a350153ff0c902e202","sha256":"898f651f4b6c0ee4ff82576bc233dc6272f48093cc49f3ac571a127df7e3e484","sha512":"84a269b5d1984076975cef46e33a217fca2ea93811e99dd57b0c8a82691d8b6bcc6abd3e1d028ecd43b13fbbed737210b924e9d2da2078c98c2820c2413d7c78","ssdeep":"","tlshash":"ccf04742b3205f34cc9a0934b534a862d75b8475877c54931b91ba336417811b450d5b","first_seen":"2025-03-08T14:29:59.922162Z","last_seen":"2026-07-22T00:37:09.362536Z","times_seen":152,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ga.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ga.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 704\r\ncf-ray: 95554719fafb5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 232880\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=D1zKr64A6IIeSUa5evJcyflCjlAmKZQaId9EeVVSsSohwRPvDVUvg4s7Yb1SKBYp2%2BJ9z3CL7fythXyLmshyBxDA1ElxPlMyD9tXyRodlOpYldfQus%2B3oSM5nSdthQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4574\u0026min_rtt=364\u0026rtt_var=7378\u0026sent=262\u0026recv=192\u0026lost=0\u0026retrans=3\u0026sent_bytes=99590\u0026recv_bytes=7436\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1772\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"869387612bafc1d5ebd5b34f28d939e4","sha1":"31007e54ee5d0c14244c3d7393c6aeba1eadc550","sha256":"2e4a368d10da4273b065523c324ede91c32b1c5fdf147a3d5507d68aa9bc5411","sha512":"6e5be061c104272656014ba55de61cd1d77bd84e174009ee987b35a75105745ca6a2053c51547009df455379cfd100024640cf082d7cadc6eba62c6d06bef3fe","ssdeep":"","tlshash":"6001c85f5f4a2fa01bc7bb305a39c2c148787f903245871a0c94bc12fe358c572ea913","first_seen":"2025-03-08T14:29:59.943024Z","last_seen":"2025-06-25T14:51:19.503925Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 695\r\ncf-ray: 9555471abc415690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 664766\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZqmBl4sWj9VGDtgrBqL9Fn%2BI0PIAjtF29SlvwWgjT3ud%2B4ph1dfKG0X40P5DvXhw4Art%2Fkwhrk4R7tXaxkgg1Bmeb2UBEesxNEmrtHS6XsNEgRIWSMgllIHQnv%2BFow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5437\u0026min_rtt=364\u0026rtt_var=6385\u0026sent=298\u0026recv=208\u0026lost=0\u0026retrans=3\u0026sent_bytes=113507\u0026recv_bytes=7968\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1895\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"324947f253132081aeb99656cac29a5d","sha1":"80d9ee7826116f4caccf50868df08feaca45034e","sha256":"cc0d77456a61eef69ab39a087c79edf270eb844cc0b7ff5d99e78868a231b821","sha512":"b524c73bfe5faa76a0e243b6d4f4dbc0fa4ac1ebbb8f1f0f9cb86cb15eb0c9e6fa3ad6e8a6e9214028631132b9cc6c5ede89e0f9fb31c2b58df5a135e23c81fe","ssdeep":"","tlshash":"160194cb791cc968be3e64300a6b5b218d602d3ce04d4b81600641603d7140376c6c21","first_seen":"2025-03-08T14:29:59.930818Z","last_seen":"2025-06-25T14:51:19.504522Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ws.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ws.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 485\r\ncf-ray: 9555471cbf5f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-1e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1613041\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y0hesg%2BZmuE6lq1Vzpqbk5rbD4mrZcA5QFn%2BAEArtY2WKgAqewk7gl%2FjsAEBUjrdkBtktu8mAklTrgXdttNLr8ENcQbOKCnycxOTYnRm9UwFtVYlqVa3OLQnhfeBtg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1334\u0026min_rtt=364\u0026rtt_var=715\u0026sent=623\u0026recv=378\u0026lost=0\u0026retrans=3\u0026sent_bytes=236335\u0026recv_bytes=16024\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2219\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8a068f6bbb4c51713f95f4e8d035fca0","sha1":"9a8c2ca7631e508c5cd473d08e7ce5ca6b80d338","sha256":"93be89705551d5c91a08b4a6464433f0f04b490e09bee105e5c7c13b93b9c8be","sha512":"04c8bfa8340323a92b5b00d461d58f94e4ab80ca5398fab2e3978fc4d8ef8d6cb2d7350507e3406787b1501783cf442e2337510d32aeedfb1b5870c32c5720c6","ssdeep":"","tlshash":"0cf00e4ad217dda899d64721869e8f98d63279f09130a084cca5f2a0af0140adfd0004","first_seen":"2025-03-08T14:29:59.952652Z","last_seen":"2026-05-24T00:49:22.705413Z","times_seen":115,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/play.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/play.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-1b4\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":436,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fc5a576140e5f382849f839911cdc79","sha1":"87a8d2c5adf8db75db685a4c1b2e42954d10a1fd","sha256":"fa9e09f5a8f4ee8040af6d12e5bd9e7076c1501c199427519cc090605aab3422","sha512":"3377dbc96a3dbb01ce07f225dc97c0c6b3eba25ffec4e2edda7d629415514a582d3ef362b3417fdd1db5099982a0a51f9f25000c180ff47f6e7f17360513b558","ssdeep":"","tlshash":"1fe0ab90c99ce6b0e4161fb0e93c69f9a4653090b6180ae84bf02bb8b830cdfd04ad85","first_seen":"2025-06-22T12:57:21.095257Z","last_seen":"2026-08-10T16:41:59.355419Z","times_seen":68,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/bg_main.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/bg_main.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/styles.4eaf80b61ae0f399.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 17304\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-4398\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17304,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"62706bc8b5d9d4ade922f3a7f093a959","sha1":"ee6df196e64020009878c84b7bca012c8a5b894d","sha256":"12b335ee9d70bbf7f5b56eccb07c4b2266d672896e737bcc7c3668264d3171a9","sha512":"002660356581c0bb95b97dfe89dad21828011e6ef18f73ae16271617facf439a602c44c5a18c63c25a10317cbd96158c6a9b81fc778a7a203a39dc29676e08db","ssdeep":"384:PKVwOCBom5K8Lvs7z34NQOuyF5xchaDnIWmVomKfPBHkFk/fcJNU:DL7L01DJWs4BAJ+","tlshash":"5472adfef18f954673e3e1cb10e5488ca603a094f47e2f8bdf59b0642d85406236d8ae","first_seen":"2025-06-22T12:57:20.975336Z","last_seen":"2026-08-10T16:41:59.374768Z","times_seen":87,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":84,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/ecopayz.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/ecopayz.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-166f\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5743,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adc048ea24eac4cddaca1d246a678729","sha1":"b43921a8921566b6a9577cdb1bdd7a227fdf4512","sha256":"f0c9dceb77ae14050c497cadebb3b457d2390b3773c70bb23a97a273afae1a3e","sha512":"95d647c92eda1a160bd0a81fe5625d3726722432109fa5fa0420764e93a979548edf8bbb9ea4351423142e87d55abbee56af29ebf3940e7593434854a150dedf","ssdeep":"96:SJHwrwEB1ByzBfzm/Jc8TwqdEN45u/aMx86M8/1z9weTmMQMQu+DLZVLF:S1wd+V8dE7/aNIqeTpCLrLF","tlshash":"0cc1a3ec377893f4f54ad7ff872654b5340360feaa4589dce3a86c29a48155e1c84ac2","first_seen":"2025-06-22T12:57:20.997339Z","last_seen":"2026-08-10T16:41:59.282249Z","times_seen":152,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/al.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/al.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\ncf-ray: 9555470fedd55690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1912967\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0MVvgZMocUN3fD5EQewho1vqeHJOLggstdGamXv76zDeeL0NViD9Pf7BL7Dbga4T%2FT0%2BOGy3FyCOENnL%2B5GW51YxQ9oFrVl9c5wsZt%2BGmmzHvFuPbtm%2BmH2V5QjmJQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2657\u0026min_rtt=445\u0026rtt_var=2595\u0026sent=77\u0026recv=44\u0026lost=0\u0026retrans=1\u0026sent_bytes=28690\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=165\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0d918eb764ffabd2e3aece61840df662","sha1":"79e045b7e3e3277e82e74c2d8b1e9c4e77d1221c","sha256":"f6b0544bf9fe9bd153ec8fdb2823ada5bee06f7d409c3b9fb8cb55a57dd01f4a","sha512":"09d508e80a1d3978464d75588042650011110a1c7563c48587874904b36108529c8876d182ae32907e89b22fb551b600ac1dd0cba902d16f998c2c82dbd37a15","ssdeep":"","tlshash":"bff0c0b245a58ffdec25907620800f406c8089887221f3b4e65e5a3eae4b11969b5882","first_seen":"2025-03-08T14:30:00.036037Z","last_seen":"2026-05-24T00:49:23.612252Z","times_seen":118,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":17,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 686\r\ncf-ray: 9555470fedd45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ae\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797769\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rVjoQNZApgUsHlosBq%2FKwzJD98iE6JrkgCegdZhty3%2Bty0RDDOAbCVEJCLXso1aPAvuoe1b2avF97TIiLeBwTBJJRhsG7uylQbjjVRWHgnRapAdnhag7Mjvcs4RioA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2657\u0026min_rtt=445\u0026rtt_var=2595\u0026sent=74\u0026recv=44\u0026lost=0\u0026retrans=1\u0026sent_bytes=27265\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=165\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c63a61276c26e59e90982e54ae14db04","sha1":"18b4a1b87e2c9650ce35a44cee4819c00c1af99f","sha256":"960d6c32192ef67b60dae5818ad103cb9a30d419ab33f286ad007c954deb3051","sha512":"a8ff5d6443306a5674dfd5b39cc6327c26c4e856a3e60a79c9b342d205c220112529087ade934f5692094ccbbb961a71d8e7d5e57aea22124a4c464e1f45aba8","ssdeep":"","tlshash":"32018884bd55845556e8ccd2c30f6c15611d63c4e53d862fd7078f3c2a2b42550dc316","first_seen":"2025-03-08T14:29:59.790169Z","last_seen":"2026-05-24T00:49:23.46596Z","times_seen":117,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/jm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/jm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\ncf-ray: 9555471b9d8b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1186185\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nDhYOkWyPILYR4g5Y1PLX0NIl1whQHarPElQnJzXHvJxmdJSfFY%2BfpgaQ5arvQOtfLxrgMdMmwTPREv61G9BbMxiNFzDJsGRJZMkVuH5NY7rAfQIKTllldEEZI4usw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2083\u0026min_rtt=364\u0026rtt_var=1082\u0026sent=365\u0026recv=249\u0026lost=0\u0026retrans=3\u0026sent_bytes=137607\u0026recv_bytes=9792\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2045\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b369bada4482ae4832a03390a049aa9a","sha1":"fbaada27f0224c06e662782fabb3c746320ba37a","sha256":"8d2e55ba1706aeddc69e5ac704b278853b939daad18ad146c6b2812f81b2b18d","sha512":"fc5ae63f3647fb6b9fcd221c2001f535f0232a1144745817d22423b4ec0e3f8fd4b510e9418891181e39228748f6d8e93cc393e2e3edc1b38b80b3b60d510d85","ssdeep":"","tlshash":"a20144679928d828dce432f8da45ccede117632c1892811835299df6af6f35154886ad","first_seen":"2025-03-08T14:30:00.013979Z","last_seen":"2026-05-24T00:49:22.787244Z","times_seen":116,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 554\r\ncf-ray: 9555471c0e455690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-22a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1200716\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OKw%2BX9kNmqCymByKCr2%2BQms0KWe%2FRHrHiRUGceq%2BVqeMzv1jKWddknTmRELgpGouFrLZAKbIJ%2F7S98Q2ywZVUcFX3b2mDiOHupH1zV3Lk1KnolTO8G4yzHSrYz%2BJ%2FA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1962\u0026min_rtt=364\u0026rtt_var=1511\u0026sent=473\u0026recv=303\u0026lost=0\u0026retrans=3\u0026sent_bytes=179251\u0026recv_bytes=12376\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2113\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3f28cf45bcb108c1745e80790cf72c63","sha1":"ae9bb81306ba94eb5e9cd7105a32877940868291","sha256":"e348b789d7521cfd3e78c3c4bcf134f7d62d74652fcd556cc8a67413495605b9","sha512":"a4745a70df206e8804140a17874e3f375a69feccb3d3f96c9c9afc8d53db1855f91b5207b7f8a82187a28213daf3126f012f48c47a9a32295cc86e58c9ce4c88","ssdeep":"","tlshash":"3cf020ef179d8d5cc286ae34cb066e11006a968904eab4c77515c96f1724242896a54f","first_seen":"2025-03-08T14:29:59.950637Z","last_seen":"2025-06-25T14:51:19.509735Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pe.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pe.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 545\r\ncf-ray: 9555471c9f155690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-221\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3K5Mv9mURLh3CwdqRvG3Dgt%2F1sdxphd3q%2Fba90RXFlsffZD1QQk53btFnVpxUc8LjhM%2FnUPqb9WvX5%2FJeNYQRAADrGq5KtjNQztRu7MC4%2FWIvHLJaSndnZuuA24ZIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2030\u0026min_rtt=364\u0026rtt_var=1350\u0026sent=570\u0026recv=355\u0026lost=0\u0026retrans=3\u0026sent_bytes=216302\u0026recv_bytes=14808\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2196\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"409637ba81a828b0db864d4827671201","sha1":"4d5d5b461844c5e04b8876189347d782c80ec7f3","sha256":"8d7c36788298b41ab53bf75e44436763c1a9cf94fe799392e2705330ee108334","sha512":"b3a3acac9dc94eb8c2828370159e17956a8fd372ce4f506ceb2806f576b533aa471f5a127f523025d49bde1aaea87f96f40089bb8041444705d1979d09bc860c","ssdeep":"","tlshash":"82f02665dbd0909dcc9e50aa60d35c24b154b72d545e870f3e30552d379b109b144493","first_seen":"2025-03-08T14:30:00.057685Z","last_seen":"2026-06-06T22:34:56.604884Z","times_seen":124,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/PossessedNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/PossessedNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44551\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-ae07\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"cd4d0e00ab7cd5cb7e7018f54c153360","sha1":"70c351d2e74031ce1755e71a9d1900ec93a16a81","sha256":"8eb183ea336abc5b13ac8ea743ecabf5dc77acc7a73c7169732f7e34d7c83367","sha512":"b7683d4d35c3be17206c02e17cbc0a1dea22a6a22c75def3b83b09d7dfcf9d9c5ded1d0eb1a8f8f0a081cfee18b2770b4589724be0116bb2cb1ff0a5fb98c7f6","ssdeep":"768:wBQvTnlhe+vjum4lBr4pvxbCToTYxfdZdtGuLLxljqCAbZdWOurxFA4nipjJi96:dDlDv3rTzuPNAb+9NF5nipjJi96","tlshash":"3b13f1fd84f911d4bbb909f6de416d2af2d471187cb024d373a7e85c2c9f31482a698a","first_seen":"2025-06-22T12:57:21.102304Z","last_seen":"2026-08-10T16:39:18.768307Z","times_seen":200,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":90,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/game/last?per_page=30\u0026lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"OPTIONS /api/game/last?per_page=30\u0026lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kometaloft.com/\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/gift.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/gift.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-820\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2080,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df0965768e874ad13424fca1d2919468","sha1":"8f9dfbb6d9afd849e7663b2248b3f926eecbc928","sha256":"3709b5b627f54ca4d5b6ddcd70ed8238d58dbe96d81e26ea24b1319571ea6dcf","sha512":"400f1d7bea005ca1a151f0fede6ec6607ef348131f0c77959e44c2beb1799d5641a386c39747e8c9c1138e4c62679dc579c281fa2dd4bfbd78f65147492ae5d0","ssdeep":"","tlshash":"354176f44140d4e8564bc9b49d7a7c94f72e34f65c24c0bc0163dd6adfa43e6ca1ac66","first_seen":"2025-06-22T12:57:21.069194Z","last_seen":"2026-08-10T16:41:59.36675Z","times_seen":144,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/tournaments/sec-tourn_desc-9.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/tournaments/sec-tourn_desc-9.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 451440\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-6e370\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":451440,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 420 x 600, 8-bit/color RGBA, non-interlaced","md5":"02f69cf9e61c3405bb08808c6003b3c3","sha1":"9a8f34003bbc659d6873f938605846612e5d618b","sha256":"0848ebc90bbc0e7d437f1b34484fe8e9195fc585f0c74abf0bdec22c1efe5628","sha512":"e9220439952ac25e6165957f9aa117da4a3f2264ade33034e73d7190d50eca2b6cf803d9096c2b37fb7a2acfaff1b1eb532fda4d055b414e9f68b5989b3dba32","ssdeep":"12288:dCmpfZiuKibE73bFhmsgEsDkKun3Z4aRDCeu:dLpfZiVi2FfWun30","tlshash":"0ca423a8d968747188f9d5352397d0e20b38112be7fb35bb5b46bde13295cb08f51238","first_seen":"2025-06-22T12:57:21.037982Z","last_seen":"2026-08-10T16:41:59.308211Z","times_seen":60,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":62,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 738\r\ncf-ray: 9555471abc3b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5FIUTujE3Im912m%2FeeaTx2LXJZvflgG6zYXogFlr%2B%2B5fCPyyOEdFIptzsFHBeXRMiuDj%2BigLm9KPIEVibiXXqNRJB%2F%2BntLgjDFf3N5R5AYJ0Sjc8R0abIdPV%2BAuycw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6036\u0026min_rtt=364\u0026rtt_var=6915\u0026sent=292\u0026recv=207\u0026lost=0\u0026retrans=3\u0026sent_bytes=111058\u0026recv_bytes=7968\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1891\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"dcd01af2a9e2bab78119769eb77815ab","sha1":"c5984c0504219b01fa41c1ed87ca2eb224b49a1e","sha256":"6226081e9539ba1da4d61f5485c097c127e61c1559bb03e2848fe81a35d80810","sha512":"baa4240087cd67208e0c7206bb0e0f7c22db6f177fec6743aa63be99939abde017bc291a063f7313c752ced77b6be37887672c68d12eb3c033a9e0f1f982209b","ssdeep":"","tlshash":"270165690a70ec04e98c793d1836fb9d787253ddb182681d260206397d7e38619f08d4","first_seen":"2025-03-08T14:29:59.982486Z","last_seen":"2026-05-24T00:49:23.482978Z","times_seen":115,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\ncf-ray: 9555471b2ce45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1462322\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H%2FA41fKs1NbVwsjN%2BC97tk%2FqIWmR%2FyfSQ8xx%2FdLd1kghPzknc5mzR%2BSMq0I%2FtUsuVjdCQfItjBh2wNPh43nf0DtvCptKvoHAuvCOIkFBUXUSVlwnH0%2B8ez6WPhLOJw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3721\u0026min_rtt=364\u0026rtt_var=4239\u0026sent=307\u0026recv=215\u0026lost=0\u0026retrans=3\u0026sent_bytes=117299\u0026recv_bytes=8196\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1966\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"1b087c1c59cb806d0014db517f5d89bf","sha1":"59ff2d03dcecb9363dab5668cdbd5ffa4758a0c7","sha256":"6e84785f1109be4d557432c45e5481e2948aab183016f8dd5c3c74931004c808","sha512":"55e6ef95101516d9867856d092bd2f53ec9ea21d30f62a514eb2ed8e865cbdd644ef3e345f26944af0a626d99a7f0a9ba024f7bcc8a65cea33267ea238111a3a","ssdeep":"","tlshash":"e30144abe0bc3efee1c51232da5c16cfeda611241df140293ac9f9525d2130d40d176b","first_seen":"2025-03-08T14:29:59.810384Z","last_seen":"2026-05-24T00:49:23.535894Z","times_seen":114,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ir.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ir.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 643\r\ncf-ray: 9555471b9d7e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-283\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1439345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SQhO4G1R8k9NHzEHwJLYPNLahDkPdnhe1LT0P%2F359F8i9%2BSx1zvid2f8U0F1FPGiCAd5%2Fr%2B67ah%2BZAejU1loQHrF7UZDkBdP8E%2FBI4YldByaabr9SxicdtO%2BU4A3hg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2083\u0026min_rtt=364\u0026rtt_var=1082\u0026sent=368\u0026recv=250\u0026lost=0\u0026retrans=3\u0026sent_bytes=138816\u0026recv_bytes=9868\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2048\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"22d174c3eb3cfec8360b298e85a9c077","sha1":"ba7b722f0d832bb5c8d62f3a12b2930008b66085","sha256":"baa29efc96113c826768db2fbc085a8f33f34c30df25a8fdf4563b39c24e7eee","sha512":"4d65b018a6145b1b0e372d03f982086e1b1b6c953d8e855241b5155115fbca58d7186e94161cf38bb4fabe91209153795ded82f893dd3d313dc495eeb5f6251c","ssdeep":"","tlshash":"9bf062c40757fc7cd8968fb3e069d1c56422a9bacc6b30281ecbd49c7d3660a10da4a5","first_seen":"2025-03-08T14:29:59.86726Z","last_seen":"2025-06-25T14:51:19.513609Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/nf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 630\r\ncf-ray: 9555471c4ea45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-276\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1751795\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kT0dn32bq16on6ydv6N1aGzqtczzXCfpVT2HnaC8B%2FUmvVmsDVHbQozPTtljaBVcKW2eV4ldS2Nm%2F1kpdug3nPYO9ss1iUiCBrdqJcYi3yZrOlfbIubsVzck4lo6vQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1312\u0026min_rtt=364\u0026rtt_var=406\u0026sent=540\u0026recv=335\u0026lost=0\u0026retrans=3\u0026sent_bytes=205084\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2145\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"73766ebc0478107bb0e2f1d66fd496c3","sha1":"ea8dc3fb83e004cc77d50e8af90754cf02fa0c9b","sha256":"896d662a098d7d9604bdaef72d384455a811e7feb6b5881a9118fa29dc230b35","sha512":"3058e3aef2962f27c0b27719218e7e8e91fd807aa4a8144eca31f72fcc72f14cb1b6f5c1c3890bcd2a1d890fbf8e83489d63a648efc7a49bda7e077ae7a60e0b","ssdeep":"","tlshash":"eff06285de71cd889b4aebf03b9264e684b6a35dafaa120222e3f03083093106591913","first_seen":"2025-03-08T14:29:59.878274Z","last_seen":"2026-05-24T00:49:23.727962Z","times_seen":114,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 693\r\ncf-ray: 9555471cdf8d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 593481\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DzSpMYLqZgCghHzSW2XI%2FBH6VMrfI2oBw48lOjCzmSiwh7P6UPJJ%2BMmy67KHvdc1LwuI29vcLTS3yYQXFntsM7EC1kMjXpBfIRlXJGNZYRAWrFV8GzYSUyvNzX%2FtWA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1277\u0026min_rtt=364\u0026rtt_var=414\u0026sent=660\u0026recv=400\u0026lost=0\u0026retrans=3\u0026sent_bytes=249790\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2236\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"fd540bd2bca94a73f165029852d8ad87","sha1":"d1d58643730eb1649f59973a1989bb738d027e1c","sha256":"1e92f825c7a778cc68df84581a0c98f1271edbce2e632b225e38d3c02b437874","sha512":"5367e49fdeadc49c4dcae48f29bae62ff0aa2d8dfce16ce3f7a168c68c62c9aceaef83cbe06ce8b2953ffd76e6cd37490ec2341cf19dbbd2695affccfe90b7b6","ssdeep":"","tlshash":"ba0194151a314dedf534e390860a9c11fc152934901be60bc5a6dc22e9c3224a2f8142","first_seen":"2025-03-08T14:29:59.850406Z","last_seen":"2025-06-25T14:51:19.514987Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ss.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ss.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 717\r\ncf-ray: 9555471cdf9d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2cd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1471276\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tQEF2suJq%2B80R4u1j7A6yHKzNkeNIGo8%2FqXB8AAgP0qSnJk5TD7whP3PpODMoKsmB8Jn3jgXIWMUZKgamMoGMubEQ8ao5G%2FU8mpwJ6d9zR8R1uOFNNSzmX32LMjTgA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1448\u0026min_rtt=364\u0026rtt_var=1045\u0026sent=684\u0026recv=410\u0026lost=0\u0026retrans=3\u0026sent_bytes=260065\u0026recv_bytes=17468\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2249\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d369f2020db063caebe66dcee855e423","sha1":"534ea928a162b151b54cad82c9fa2b95b694d707","sha256":"ec3c2e71a790b437a59b8cc36f55fef1542c70cc0a1daee104fd6827765c0672","sha512":"716a29f56700ef33ff573ae4dcbcca6baacaee61e8ab0816e53d8e6eeed08072e751f55a30d8cec149ea6c031893e4c094dbf3e6c89658b64e71ad5d8eb17e58","ssdeep":"","tlshash":"0701995007124dc66c334355904ff17ad9702298c9d986ca5f071429af704003ca3169","first_seen":"2025-03-08T14:29:59.879086Z","last_seen":"2025-06-25T14:51:19.515446Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/vu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 638\r\ncf-ray: 955547215dc15690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-27e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762231\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FZVRs1C%2BiDPjGAYTxd2kLx0%2FjwEpkVHW0xiRwt2Rhk7FRJ2ybmcOw190aQdPxtn3PER8shGNxaecIk2W0YXuBeWNxvuwVyKhBOshf1xnilzZNhNtxlSmApam95mutg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1466\u0026min_rtt=364\u0026rtt_var=751\u0026sent=778\u0026recv=461\u0026lost=0\u0026retrans=3\u0026sent_bytes=295144\u0026recv_bytes=19900\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2953\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8630fdc039a80b87aa4dac33d79d1dd0","sha1":"2b3a0b1fdb4ba1f5aca30562d5e8472be7167fa2","sha256":"14df13bcb23da7c685017fda2668f446c03b545c50bc0fea574c54f5153d1fe7","sha512":"e648140bda72e17a666af3f6b6d7567e7a34e68bcdf4a45b6d08adfef198d3e510d9a2d2f537746f22969a7842fc5ccc32d6d8eb6e1feafa2518e5a27e05673b","ssdeep":"","tlshash":"58f068fac9832817c7e4535e52e61281d4430c8deca631a5b756c6211294545d1cd8cd","first_seen":"2025-03-08T14:29:59.786874Z","last_seen":"2026-05-24T00:49:23.299504Z","times_seen":114,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 751\r\ncf-ray: 9555471c2e705690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 642469\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nm1vf5a8ba5Cc%2FHGBBSGOPGBWoet1gaUQ4xsrOaZE386vMLX8oGMPhL53qWzYCn5HxtltGAHhawhI0XtK9Rb5Ry2XHzwuK9oJ4opgkEp47Ctz702CVwAvQd9Xi18jQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1595\u0026min_rtt=364\u0026rtt_var=855\u0026sent=501\u0026recv=320\u0026lost=0\u0026retrans=3\u0026sent_bytes=188680\u0026recv_bytes=13364\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2131\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"54127ec18b852603dae5a3b1392938b2","sha1":"d70c4b1633f74fc3cdd9481e2b52e7481c5dc8d9","sha256":"e426518a853a23741779cecfebd4112303b35535f3bf2610e580bb3b25b8a4d9","sha512":"6fc78ce1ae11544876a944b8ab8a6e31aa7f62bd778115356b386b0e747733e015d9fcb588f690b2c75d5dc6768f5ab1a0859a42236219ddae25f1f1803bd26c","ssdeep":"","tlshash":"2a01b59b32850b28ccf1932b81383aa0f63a66b6d401b11d4b95f4a10b197080120a83","first_seen":"2025-03-08T14:29:59.81356Z","last_seen":"2026-05-24T00:49:23.167334Z","times_seen":116,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/favicon/android-chrome-512x512.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /favicon/android-chrome-512x512.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T04:56:15.004331Z","times_seen":548700,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/bg_desktop.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/bg_desktop.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 8986\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-231a\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8986,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"31a914fe3846ca9eb31d7c3fbb31b050","sha1":"2dd41f8f9ec9c19e1e2954d2ba59f4d854931383","sha256":"4567da126c9c2b84d39840eb42037b716e72c89dca976d60e9de86162329c977","sha512":"d0e24702ff1e39dd217cee0989fcc8e0bfd0f2c6294bba2061da8e9e3f7c29b6df67837459656c736dd1ef7c9726776954595e08ee59de19adf7d83b314bd529","ssdeep":"192:DxttTcmmGfRJ3GAxfjVZyDWNT5SJ5qFO2Iq7/YYYYYYYYYYYYYYYYYYYYYYYYYY1:DvtTcMfr3FxanqFO2r/YYYYYYYYYYYYJ","tlshash":"a202af8363188af29d48d31128b8bc650199c125341fd47b4a22faa7c2a7b71f9d776b","first_seen":"2025-06-25T14:51:19.518822Z","last_seen":"2026-08-10T16:41:59.289227Z","times_seen":81,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/tournaments.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/tournaments.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-6a3\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e15edb0047f98d1b64ce4a4d4a79c670","sha1":"9fffc6cf696913da48da33d1ab1703c4d9785e34","sha256":"5e8e6239d9dae59cf44a70227be537098b03dc422cad8aed17b24decf32b0c45","sha512":"15e8ff6bd2aabb1248d7eecf2085b37cf721942bd404f74461c1fc23a712e3869e72cb8f4464268b7d06595ea0d78e6bf01f2b4507263381786f78fdac14b2b0","ssdeep":"","tlshash":"803194ff4710f9c8f187cbbade132d21316968bd5d8282ca2570e6e0f830351c959c88","first_seen":"2025-06-22T12:57:21.026936Z","last_seen":"2026-08-10T16:41:59.37311Z","times_seen":143,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/fo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 724\r\ncf-ray: 9555471929fc5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2d4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1528317\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dtpvuM4e30BKdoaeRwyWobJ1o4EnV1KCzgLWh0HG15i0ED2CoUB2ROAIa6hGNuXQoN5sN2SNc2U7Xli1rpVyQf%2BaI1YK49ZmPd5f89K87bR%2BVmNo2Kw4o7FKfswYSw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=913\u0026min_rtt=364\u0026rtt_var=525\u0026sent=251\u0026recv=180\u0026lost=0\u0026retrans=3\u0026sent_bytes=95878\u0026recv_bytes=6980\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1677\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6f78bebc1b8179b587b6a61015ad536b","sha1":"85f1508a867f44981d5d92976adda6e6ef2c95a6","sha256":"9ae95c70a0b9f538afa206e01d92203072b3a39ccab0b8b922d62d45a8dd3dd4","sha512":"10d4803304d35cf6ca515b2d6f52578eda7ab48782b8522beb6f000512780df4b54d5e13ab3479ded1897fccb0690d4477f7a429eb5b87f25d88f9a2a1fea06c","ssdeep":"","tlshash":"280165898b24bdfc99784513076b69467d013e90b97ecb4a104206f1a843e41940ce30","first_seen":"2025-03-08T14:29:59.89799Z","last_seen":"2026-05-24T00:49:22.597119Z","times_seen":113,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/fi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 663\r\ncf-ray: 955547192a025690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-297\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 792169\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FWwe5UmM3vTKR%2FyWFqw6pm5YufbDUusPPyuj7vO%2F5dCEOS%2B7g7FSnAM4tMWEUIwNJpz8GrfaO31oyScjA8mzC4mr%2FWVElJ0AoCcp%2ByaKcsNztjusXK1RoYL%2FaaYYPA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=843\u0026min_rtt=364\u0026rtt_var=511\u0026sent=245\u0026recv=179\u0026lost=0\u0026retrans=3\u0026sent_bytes=93343\u0026recv_bytes=6980\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1668\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6349b09839520cddc48ff8230dc31e37","sha1":"e37504b5d6802a37cffb6eb1b6e7478c6eca69e7","sha256":"e66d0dedc2c4c07ba0fa2469787d3e2deb88007f541a82a989bab393d7f57982","sha512":"4d7aa28d8de1713afe7675313a372f43cdd31cab7a68cac20e57de893dab2b27ab2569b873baafc9cc27843e87a303e127ca1bbe4dec5024a8ad7f84b3afd019","ssdeep":"","tlshash":"630168d02fe40c18a7f2c911460de04899119f07c046cc0381d7c6fc062352e4e9e527","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-02T10:38:22.379368Z","times_seen":141,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 733\r\ncf-ray: 9555471b6d3d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2dd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 761495\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZMjxhH%2Bj6rFGAeCJJ8tSKbF8cDHbyrroifJx5QKOHBmPC4JdLvuVjZfzllkMVwcqwOWXPWS5uZjjKCK9aH45m%2B1c%2FRqqcL5loF8dcoSkP2jW5xoZd39tJ%2BR2P2EMBQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3889\u0026min_rtt=364\u0026rtt_var=3516\u0026sent=316\u0026recv=222\u0026lost=0\u0026retrans=3\u0026sent_bytes=119624\u0026recv_bytes=8652\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2009\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bb3c907a9424bf3b5b35e9be7e593707","sha1":"db2e21d1d134b20c66a5572f34d62087b59dedc9","sha256":"ca0a9f5fde816c11788cb89f1945f0894ca19048013e04bb6f581fb05907a304","sha512":"3036174d54fce948091974c08d6c1ccd59456bae43df94c69b8dfb9902f9fc0447d5d24348ee3dbe7002e8d9382404ec185fcd499943addd711a3311e11df7ad","ssdeep":"","tlshash":"a20165e283d9a9ec7d206661a25a1638c02919758e787311411045f7969d91c5788efe","first_seen":"2025-03-08T14:29:59.953728Z","last_seen":"2026-05-24T00:49:23.614388Z","times_seen":115,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 521\r\ncf-ray: 9555471bcdd65690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-209\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 245324\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wtq4iNNPM9q9Xjd%2F4RK0tBhZPeLbb8p9CKOFkmrK7cFVKQWVkK1VSe3km6beordQbM%2FLidFU3jXDL9Sxyibja1I3Zn1sctJRpM8aO8d01BOtCsjzMvIkbXAPRszP8w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1244\u0026min_rtt=364\u0026rtt_var=444\u0026sent=422\u0026recv=280\u0026lost=0\u0026retrans=3\u0026sent_bytes=159895\u0026recv_bytes=11312\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2074\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c37f7269d562514c0ca74352e0940d0b","sha1":"9a4ab27acd3d1dfd659b698dc3d41e300b3b8a5d","sha256":"21104c4670aa6a345e43aca28b251a9687ef8bf364fc6594d1006d345f56705d","sha512":"48d9fe4982056e46ff4253e7d26d72a0bcc6ee3a57e4883ae71181e248dc76b413470e45492dd14643d5579b72775780e5bccdaa48492e3a9e5277cb819f6064","ssdeep":"","tlshash":"38f020e0e3e10e34e8bec760050960009e15a0c4862e93cf2da8a5389522011a2b2a15","first_seen":"2025-03-08T14:29:59.799342Z","last_seen":"2026-08-02T10:38:22.367997Z","times_seen":133,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/qa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/qa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\ncf-ray: 9555471caf305690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-23c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388602\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xJdVIlekmTnQw5EbDYycs5qNLuL1Hb5IdsPMKvdO3HXy6QwNVk3e07zWHXlvL0UEkB%2Bu5svK01yaLNnYo9aPV20arofNLV3iyfSrEj611E%2BZ0ZTXsDiFt8r5T2tFmA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1500\u0026min_rtt=364\u0026rtt_var=551\u0026sent=607\u0026recv=373\u0026lost=0\u0026retrans=3\u0026sent_bytes=229555\u0026recv_bytes=15872\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2214\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"649f7096cb28b802d2c68c55f8f51d16","sha1":"36e1143b98740c284227b2ec988f1088b431ea20","sha256":"60d8df647208a17429f39eecff2e23dc5c7f2301f8bf29574304dae2598bcfcc","sha512":"6c9c2df8ca620d58855c54050e2084234b1ad32fa9e5638d7382dd8b2f0df51b79667891a93eb9b451486ce11a7d367e7bc84b8ac9b8415e22dea5c050b9ecbc","ssdeep":"","tlshash":"ebf09645232f4d650f7cc4372616ecb46c389e5ce23ce08082d25565342438c35fc780","first_seen":"2025-03-08T14:29:59.821766Z","last_seen":"2025-06-25T14:51:19.522774Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/st.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/st.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 746\r\ncf-ray: 9555471ccf685690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ea\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321089\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W6YZijM%2FRtRkUQtWqLsOuG8RDlGltrcZ1Jef5RBjEJEftSRFAW5KFGce0f%2FuXsSHvGFO1gavWH2CZSeDMyiHTVRPwsyLomYCO%2FpIPAtNOcIby5%2FJEXMoarknJfcUeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1277\u0026min_rtt=364\u0026rtt_var=414\u0026sent=654\u0026recv=400\u0026lost=0\u0026retrans=3\u0026sent_bytes=247499\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2236\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3f8c73459bc37715a3ec4a6dd5b2d9a2","sha1":"58fdfbc2fa11a61e20a8f89ceeca9efb2ca8bac1","sha256":"a8fe63aa18d598852bd3556bc503120e1e31ab32199cd248dbaef3fcbd5c44b8","sha512":"6eac6eeec73b2c06b63be883f6c5982b4b5540807c5e291087a9a74e3edc9a06450400a2dc27f0b80afc42080508c8a57bd8d60f8e8e68f2867cdc4ae782fb84","ssdeep":"","tlshash":"240144ff46b69c26777a0432c70ed068c9548f99717bb0178143e67b023a216f6e359a","first_seen":"2025-03-08T14:29:59.927496Z","last_seen":"2026-05-24T00:49:23.434725Z","times_seen":114,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ht.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ht.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 592\r\ncf-ray: 9555471b6d3e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-250\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yHzKZJz3gk%2Fhq5hTwGamXYesy%2Fjfw9IIxMZFo7s7zRKv78GbDyCVPWCpgTjsxmQKmREnYmRQGa1VVFRo4BaEuDGLhtnWiSjnhGyisMC6Xbrtq2V1yP0D1ujAVPa8Zg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2974\u0026min_rtt=364\u0026rtt_var=2882\u0026sent=322\u0026recv=225\u0026lost=0\u0026retrans=3\u0026sent_bytes=122415\u0026recv_bytes=8652\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2015\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2efecb13f3eaad19c5949ac5f73259eb","sha1":"efa47d4792c39656274264b067c0e38c81943c3d","sha256":"1362df024fbe38416b49cb63b42d2bb51b49ca8e2ec62fbf15950df537e10353","sha512":"dcb48542f997b9b187ce26e596407ea31094b160c98d579df38fec3d163fe283335d46c0744869334dee73d77cd06ae276783e0cc6e53919753f58f924eaccfd","ssdeep":"","tlshash":"3af0478da2e86f254cbb3c72d0027d84e711455651075118d751ef6b56fadf1a20068f","first_seen":"2025-03-08T14:29:59.975621Z","last_seen":"2025-06-25T14:51:19.524229Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ps.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ps.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 693\r\ncf-ray: 9555471c8efe5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1875663\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3uQMVtRrGsNF9rir96WlvoCnc7Lam7iuMHW%2FhKVADcqVbJ1TaEI4sjLYQcAf9FO6UGpyilAznXGos8TemZ5bj4bbOEE2c2HyIUOEZ4yCmuvBgdf0Nm0OMXjK%2B7FOFw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1480\u0026min_rtt=364\u0026rtt_var=501\u0026sent=555\u0026recv=349\u0026lost=0\u0026retrans=3\u0026sent_bytes=209993\u0026recv_bytes=14580\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2185\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"66a705c58e4b44b9bd4deab52edd4c8b","sha1":"44e076644baef4ba18d795652a810e8d077a261e","sha256":"326f3a8b4b5700bcfc1e078cafc59af5cace85151203d6b52f675b7ff8008d7e","sha512":"bdcfea4e6a202f53833aec1bf5351963978e7936c10113c59ce6ff07adcfcc47f62c11bef16b3b4d096389875a83a27e52cb7c5be87291c95f5f2d2ee021070c","ssdeep":"","tlshash":"c901883263771cd090111c92018230d14e156dbded5d3325455c2d2edc5477d8d8526f","first_seen":"2025-03-08T14:30:00.057103Z","last_seen":"2026-05-24T00:49:23.129609Z","times_seen":117,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 618\r\ncf-ray: 9555471d18335690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-26a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1585780\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uGncmiY8QKhUrzQq7kehrnzHuxjyigZhcaDSPyDALtX6NEvZPSCasQjzG7CxFCeyFEH7njP00tveYs0aIAMwzWWnxjknvLlxV1%2FRrbI%2BL4b9wPgh5vxBrVX9UdcFDQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2158\u0026min_rtt=364\u0026rtt_var=1941\u0026sent=749\u0026recv=439\u0026lost=0\u0026retrans=3\u0026sent_bytes=284789\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2292\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e55fd833ae51ade88ae45a34d940a2aa","sha1":"c6c2fe7e57bdc322c9f4e57209ef162ca041a725","sha256":"76874aa87ba90e4e98871eac3e2597590680590cf0ba7ca35c6edc94e2e28197","sha512":"09c30e65cb1acb7d3e3f1c3b61247078be1565b2826d145280188ca4573e207926e284bbec2e7fd3275f1951eb9ef694612eb1170d818dccdbcc8d7d38f71a22","ssdeep":"","tlshash":"38f002af06de2c9cec1d466988a86572b744100e3c95e857ef1cf406431bea812e1189","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-10T04:02:25.234779Z","times_seen":205,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/zw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/zw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 844\r\ncf-ray: 955547216de35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-34c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1741357\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YOIEj6vDP9b8bGD7ZWjM2lk3d7BAbBw7NLIkY3LGhTCuq8EwrsEsZxYuK1ZFTmTAkwpw1ta4zvMdmZWHHLZMXhILeLcjh4%2BTRTznT2T%2Bip5EfR%2BInYUB5wvZPPPBLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2277\u0026min_rtt=364\u0026rtt_var=1869\u0026sent=810\u0026recv=472\u0026lost=0\u0026retrans=3\u0026sent_bytes=308820\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2973\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ffff7387c2e38f9abc1876c5cda5116d","sha1":"e22dcb556e950e7a5adceb20027e516fd64aefab","sha256":"8a10ec9b1f437b0c76125f07b2f9fba1fa760f92323a9c095e3cefd01ac6e4d0","sha512":"ea5bf92ba14903412bee5f2c368d011277e6bf3dcd999e54f6f9c33655db77aaf782ca88795146bfa3c4e2c92ead0b9cdd1dcfaa9004a551ed99d89e6cfad4cf","ssdeep":"","tlshash":"110186df5a452c86c74430f8d549036d5b2c83126e2357369a069b626f6986d1cc7791","first_seen":"2025-03-08T14:30:00.005489Z","last_seen":"2026-05-24T00:49:23.439382Z","times_seen":122,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/welcomepack.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/welcomepack.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 280096\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-44620\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":280096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fb5bd7cac8f95afa08b49ed900c29bb","sha1":"37960313995a5ebf9725cd188610dbb1241367c8","sha256":"4f256ee2861be86bbeeb4e95b6fb2ac6daa612a60d7ae234dcc2ee3d7303ca14","sha512":"0a892c95f7c74e077f2bb2020de0ba15bfd31ecffee1b036af5edabc353784155c6eaa311639bf8ac34f57da54bc7cad9a5c018df93389805d505581cfb2b7c3","ssdeep":"6144:JLqE8NJTq2vK7M+PNPSBaRs1gFPchED/PGYeTQcjlsohaQnxI:JLqT3e2vKMyM8s1ukhED3ETQKsoLxI","tlshash":"d35423049a1c8437f591168f5781ee96becf734be2a9e70681aa7de832a07747fc3150","first_seen":"2025-06-22T12:57:21.216453Z","last_seen":"2026-08-10T16:41:59.364832Z","times_seen":85,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":91,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/promos/promo.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/promos/promo.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-428\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1064,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc4e77b9775ef0d163160a194166b907","sha1":"1dc259bd1cd1ef875ccde831d5ed20b53222f552","sha256":"6d284862b3a44b96248fdd4f2e0be08402fcb7b3c37df72d20c8f901153a599f","sha512":"5f545fd0fd930029695c26312220f09da614d2606a24df265914e7e0713d9b45c96b122bac9b563376f03079c13235e62a53ce1d430958d215d5bde11b4d386d","ssdeep":"","tlshash":"271120fab154a2f080069f75c47392a1b94b34fb3ae9c1cd8390e854aa2a125c688cf4","first_seen":"2025-06-22T12:57:21.196403Z","last_seen":"2026-08-10T16:41:59.380388Z","times_seen":144,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ly.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ly.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 614\r\ncf-ray: 9555471bcdf45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-266\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z05VvSy2o0dSf6MJrA3Jc1H9m7iZ8w8LN3fYRuikyZtxcVShXFgWr7h8FsTMmrflzm94Vt1xTyQIdU%2F2JjHMibZcbUAFXiASNimAYi%2FmZfE63mktsr8p2P6YNOZWqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1365\u0026min_rtt=364\u0026rtt_var=486\u0026sent=419\u0026recv=278\u0026lost=0\u0026retrans=3\u0026sent_bytes=158752\u0026recv_bytes=11312\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2073\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e883dfdaa4cef41ddf9a81cccb1a0609","sha1":"5193323797d58e1d18a65725e6e4e1c2ba70f74d","sha256":"c81d6b85ab92dd7c7d67fbde59bff6604f3ebdbe51330391d5b78bab5633445e","sha512":"93420705560402b09f42144f26109ba46ed0b81afc5adebbab5d9bee4082168e638e547a72bf5434ed01da23fc165160a6b1a30a67ac931915ef0e36c074e532","ssdeep":"","tlshash":"b0f0023b72d14e29cd5647b611ac45b1c4b4b156852c18c74608d7ba81e1304962da5c","first_seen":"2025-03-08T14:29:59.800096Z","last_seen":"2026-05-24T00:49:22.715352Z","times_seen":117,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ru.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ru.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\ncf-ray: 9555471caf425690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-230\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 986347\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I4abpE6YBMhKJDS%2FJqceu68L8f1lzZFwJ2a9KzfmtB8jdfKwKGFhRKdBYaIUHO9WGfmTgP5D89cdK60yYYMjbOuw%2FF4JN7LYEtL79KkQOfRYNS9wiQ9sZwZViqvEEg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1547\u0026min_rtt=364\u0026rtt_var=574\u0026sent=595\u0026recv=369\u0026lost=0\u0026retrans=3\u0026sent_bytes=224624\u0026recv_bytes=15644\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2210\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cf2ccd7570934b878109d4e7c81b93ca","sha1":"485d6eb55b6a49a42e2608f17c88e56283a9db82","sha256":"b6a4d151b0be57dc0af9965bdac80825aece4bc47c077989d0134a0d37c5dfc8","sha512":"56fe2dfeae16e69afd40fd19fe68e00b7af9a9128dd6149d7b4d4b8362a5f7fadde260fb87c031921090ac665b3763c8acba2a19a95b7e97ef06d5e8dafc61fa","ssdeep":"","tlshash":"0af026abda35dd88df2a43f2855c415bc866566449275b9258000793149d609d279863","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-08-08T14:37:37.681448Z","times_seen":168,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 650\r\ncf-ray: 9555470fbd945690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-28a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 899794\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uQ9G7CoCb3DG%2Fpq%2B8FgK6XBk8qitNr6jkf9N4Q95Ow%2BuzDwhHWKiykyWQ%2FQ3%2FawGG7V0nv9i7%2B%2FvwfrIUDEtNrGEQl7wDAoEu557mKvRXpbMWJIq%2BJLix5Becc1THg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3008\u0026min_rtt=479\u0026rtt_var=4738\u0026sent=47\u0026recv=26\u0026lost=0\u0026retrans=1\u0026sent_bytes=19089\u0026recv_bytes=2268\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=134\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"eb29bac0ef7ad31d882428436f9996e5","sha1":"dbf13e3573cf1bb6b1a0a04b19bd7f9c841a2e3d","sha256":"0c00a79a5fd880d60ec743221857f7072ef0a6e3801fe7335f892693d7e84822","sha512":"24c2aac4a99892e924da4e64325ab4a603fc8ff6e5db1993ab6c85b6e95da3365dc4cdcce250c7521dbf8e4004978cbde2ab72e5f2dc43cc69b84dd01f6ebd66","ssdeep":"","tlshash":"0af068d77bc79fe22fddaa2ad37da5b12d550a0cd465258e42152f3402a2f9222c09cf","first_seen":"2025-03-08T14:29:59.806629Z","last_seen":"2025-06-25T14:51:19.529991Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ky.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ky.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 736\r\ncf-ray: 955547111f605690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aV2FJjGAMacTWZQjvGnIwfQJaqF%2BYqjK8tKRqEMKkLHkmBmbN8BL37N4cOlRh7ieLnY7Gw4WyxmbAzWSFtTTBXmzVONn%2BYblN2%2BnNy1KaP6Ia4M%2BadlLWOYw0aoG1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2103\u0026min_rtt=431\u0026rtt_var=1452\u0026sent=138\u0026recv=72\u0026lost=0\u0026retrans=1\u0026sent_bytes=52211\u0026recv_bytes=4472\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=352\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7bd66a1bc639b2dcb030dadd45f59bd0","sha1":"49014ff6fae178d820309957a55b7afd0b19493d","sha256":"014358b878abbc7c8a56a4c3945d0a1d9ea37f0954fde228cc068c722785adee","sha512":"8a43c803e90e7c7818d4fb8803837a448ab02f80e115e133586beae4696089f3004b75628bf08ca0fa3152d97a141d33264b22350382602450182e1264e4d95f","ssdeep":"","tlshash":"4d0199ac4bc2e79bb82ee7b3050e4dd4ed0527f12541330e00a977ec32327441946177","first_seen":"2025-03-08T14:30:00.02156Z","last_seen":"2026-06-04T12:58:41.54735Z","times_seen":120,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 709\r\ncf-ray: 9555471c2e755690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 910045\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BTJujBXWk2yrY3GQZPZOwowe5WbOXoK8PGEQBOy%2F8km0uOGr8DvbfRvpMIIaN6uaOLQi66KF2Za4uDeLeLhe0FUfdekYIDTNMwF%2Bblpn5%2FbAO0EypchfIIRUNlt7OQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1513\u0026min_rtt=364\u0026rtt_var=923\u0026sent=496\u0026recv=314\u0026lost=0\u0026retrans=3\u0026sent_bytes=187241\u0026recv_bytes=12984\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2126\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a378d814802587f85ede3b27cb1adc99","sha1":"823fe21ee09dbb19819f047661d39eb76aff75d7","sha256":"0f63c0840c85250aa36bfb74d7ac0a099c63582b88706b0a97336dede602ff5a","sha512":"3bdb143086d72e48e31dcdcb516b86295b7eab55565efd5c2a91a6f227ad558d96dfe992b33f8b54beeaa745da4f6461987b26bcab03d5723f4f5de65fa67dea","ssdeep":"","tlshash":"9401941467b9cc61c12105658a2ed81c1df527b54c268e96e614cce91288489b74583f","first_seen":"2025-03-08T14:29:59.898996Z","last_seen":"2026-05-24T00:49:22.744819Z","times_seen":116,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ne.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ne.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 614\r\ncf-ray: 9555471c3e9b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-266\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l9%2BLy0DTQ9hmIA94P8kifRiEvPBVaGqU7SUXoWUUAoE2vKgtvSA6%2BnTP4mkc9GDkHoCko8ssuPAHyLIqSIHh3KQKkBjKCXlT863goIEo7znUtuCG2hTul6XfsgVIEQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1450\u0026min_rtt=364\u0026rtt_var=728\u0026sent=523\u0026recv=330\u0026lost=0\u0026retrans=3\u0026sent_bytes=197343\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2140\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ebf243de633c303f6503b15aef8189a8","sha1":"48c823d3fcb2c87e0716af40546a4d2363a61a55","sha256":"126668646604f568532ed36bd23d3d9cdd52b090ab46ad4a46c4adda35303f82","sha512":"cf0bdd2aceef7366d9c27bdd0421f1706fa97775801552a85382232af2257f05645b57e1a5e5d94d33d117d027c8a613042bc032557660270f42bcf404138c4e","ssdeep":"","tlshash":"dff062e62ac4823ecbce219963899e026a2e2249e9f1e80d821038f00fdbb130690210","first_seen":"2025-03-08T14:30:00.025641Z","last_seen":"2026-05-24T00:49:23.037998Z","times_seen":117,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 743\r\ncf-ray: 9555471c9f1b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978210\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XpMLx0coPf45ZVlopOyEdZmkE6v%2BMKvjAwIw9hifyUJUX97viw2OO3pYPrO%2FoVwhPcFunhiUmaQ3%2BENBCLEBGnob4iZatYdpQc2y95R00%2BXqRMNgeSpgX9mNLyb3sA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1862\u0026min_rtt=364\u0026rtt_var=1347\u0026sent=573\u0026recv=356\u0026lost=0\u0026retrans=3\u0026sent_bytes=217365\u0026recv_bytes=14808\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2196\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"63858be7976226af72413ce837b80cc0","sha1":"9dec6d06616aae9193cdc90e58e9a8229946cb61","sha256":"34ea6d323a589eff23363872d3b9d5a29cb81c3970c854a09ff7777917eb4a94","sha512":"2e427d06645d16d07813a64d0e33a4d1d214d4c286aeb331a81abaf4ffb7b3e6fd23ded37095e6646127bddd462db43d1785088fdb347f7f54d38b0265827d3c","ssdeep":"","tlshash":"290165d589c79c32ae49d3618750a724a51f13fe9f028b642c01c9b08d00fef8c4b386","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-20T21:41:41.254793Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/translations/en?pr=kometa","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/translations/en?pr=kometa HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nskip: true\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102555,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"196ef1917de73b80dff745aad0570df7","sha1":"3b34f2807faceab8fad1283b6c2e595b08e12877","sha256":"51a7b8eae37f92c6f0283d32cc20bc76325e5f0a8861660c4527890bbd7f6267","sha512":"9814456b5c692766d08dcfd8a687db2cbb58a5b58b627f79f6c59fa4304335c58c0a6ac5c355a2e9d2b36e23b2160c004c7161531294c08ebc2e2296b2054f9f","ssdeep":"1536:3ufmr38WOGc6mLNtUVugpA9WKSfFDG7/ZfAfl7X78B0W82eZ+8dnNSc/CCq9FfrI:+u78BNtUVugpAkRdqrR+AH3hgn2kL","tlshash":"8ba3f89fe78813b3079203d07a8f77eabb7d50682321d5a478adc12c2359d365a739d8","first_seen":"2025-06-22T12:57:21.122292Z","last_seen":"2025-10-24T13:57:14.442155Z","times_seen":55,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":8,"connect":47,"send":0,"wait":70,"receive":46,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/ethereum.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/ethereum.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-1c2c\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fe499243090a7dc549b24c1b9429f7f","sha1":"3b2d21f6225ca42bdc073c72232d1a993b293b1b","sha256":"161524c2c8f622ae04f7cc826368f931e489fe7a990b68db701aa81dc8159f71","sha512":"cfa25450d0f995b67327ad5e9a1c6a516bb421a2b026257aa7e22ef9d96b166bf24db0e3a8c7a44b9c8bbfe2f16840b9a94f7fd3623786112d969c234775c5c6","ssdeep":"192:Ax6geMbCgSrnuVk5RnK7GdYZMlQXVNlLlN:x9gqumTdYSlyP","tlshash":"d3e1c7dd1f3107cce884d2fb6f2694d9318ac9fea5488885d3ba8d3aa4d14b44d5acc3","first_seen":"2025-06-22T12:57:21.20873Z","last_seen":"2026-08-10T16:41:59.300897Z","times_seen":228,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ph.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ph.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 671\r\ncf-ray: 9555471c9f165690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388602\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WybE66Q2foiZQ9iQVxs9kVU%2Fkkm%2F5QhrG8ydtNlkJb6XMC3375zAfdx6XP7uFXl9A1YRq9gBV%2BAX4oIrplTxuvsdUXyWju%2BpDJMVeJWp0cq8o537NZah8xO%2FthhIwg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1546\u0026min_rtt=364\u0026rtt_var=818\u0026sent=583\u0026recv=362\u0026lost=0\u0026retrans=3\u0026sent_bytes=221130\u0026recv_bytes=15112\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2202\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e7200873e4aa3c39facb829d059bea0c","sha1":"79f866395d6316f2f29a6b90cf349346ec726471","sha256":"982c777adc8ad593920c2a8a57231bec05198a6526fe3738f264f66ad1b904f4","sha512":"6ac359c6d8f1f98ce4e6dac24b1e1a8937697e6016442566f80395c9d96f25b8b780413db64d0233882972514d087557449679e9b4118ecd81434fe91e6d99c8","ssdeep":"","tlshash":"fc0123c6fb5705634f20a9f6a1578c133e79812c909e715adf635a228a15a44e6f8483","first_seen":"2025-03-08T14:29:59.926406Z","last_seen":"2026-07-06T20:32:11.979715Z","times_seen":129,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/rs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/rs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 786\r\ncf-ray: 9555471ccf7e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-312\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388601\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m1JYHUoCIlTB7cqLZAQmp9G0i25ws03XixcoYqImsImyMP7%2FrNmhgnYaig5FOu4sfXtNc%2F0hu29EAj9c1KBbGFlhdwwJZCKPXIJc2jyQvqI%2FCnJzGB94xrFZ%2FpPUQg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1134\u0026min_rtt=364\u0026rtt_var=531\u0026sent=639\u0026recv=395\u0026lost=0\u0026retrans=3\u0026sent_bytes=241316\u0026recv_bytes=17012\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2231\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a0a141e99dbed7626c18b5b802303b80","sha1":"f92c69d821e62c2e667c7a189bb1ea301006393b","sha256":"373c0224c40b02fb523186a6bc4bcbc09768937de85a9691d7d3c8432bae2ace","sha512":"3aba8d9dab9e3f9b5b50b245b7caf550a3e2aee742c5fc9351067620252d206a99e8ae50d0e0ba2ae75811b5fd5edd5687bb32d010d55aafc0572c8afceed95d","ssdeep":"","tlshash":"3f0175e5e6b855d1f450d2a3812b2b682a0327170edad799d9a876a0515409cb1e4741","first_seen":"2025-03-08T14:30:00.045027Z","last_seen":"2026-06-06T22:34:56.619172Z","times_seen":120,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/uy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/uy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 739\r\ncf-ray: 955547215dba5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797771\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CfFyL7BQAFDCh3dw8BJwKhtKzFiAcw3LnTi2Xam4ZxitLlC2Qhm7MoiEbylk5kA2GwIADvQkRTWLAXB16j0SDFanerWRl0SHyW6dIazep098yRwL482K%2B0oDdUx64g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1383\u0026min_rtt=364\u0026rtt_var=465\u0026sent=784\u0026recv=465\u0026lost=0\u0026retrans=3\u0026sent_bytes=297608\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2956\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"90ff18926e7aafb0a4de84be6d9ef08e","sha1":"8c9b5f17b21d27737e5255e3d55aed263b31c607","sha256":"3b4ac421acfcc8fd9e4b3c6dd4eb2947c621c45577df0a53a1a33a2ba70bdd0f","sha512":"e0f412987ff67713be650647dd71cc5b025bfb12357462cfc31ee0ce63be4efee804c2dd254ed9e472a17b2696678665454845faf36d256798577400096017b0","ssdeep":"","tlshash":"d50149efb775ec7cddae140552a0462769d2d33b8274d6531f80e42331d9616254dd06","first_seen":"2025-03-08T14:29:59.92853Z","last_seen":"2025-06-25T14:51:19.539425Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 802\r\ncf-ray: 9555471c9f185690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-322\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1181146\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vRq2MCRFR0oFrB7UjKCIlZTwYRFaqa9mS%2Fd%2Bj%2FKarWCb58v%2FkfxqsNAP%2F3xkjfd0FqaGYzK1WJxQr%2BKFqoeq89VCLcpL7SAFQRL3Br8zNMyozDAfgb9Xds5b%2FNJmGA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2129\u0026min_rtt=364\u0026rtt_var=1534\u0026sent=564\u0026recv=354\u0026lost=0\u0026retrans=3\u0026sent_bytes=213749\u0026recv_bytes=14808\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2195\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b59d251529b578be7f2fdd5e6e61a946","sha1":"d8e6d973e9f9002841afd466d8bed357003f62b4","sha256":"d7a618b9c113213f1ea2d2857830142b0f6f0a19e4e02a6bd8f4d750377d13fb","sha512":"b28586d21be8f91979c530677dd79d208ba3ee2e53c5dd59ded0e8048c96540ea892c3a905ba34eb9993d055e91d6cc5a4c3bfa47572d028c369c00fedfbd378","ssdeep":"","tlshash":"0f0175c1b2a3ec094ce105e1d3bc849d5a9016944c6aa3ab7196c96ad74a264f1f0f12","first_seen":"2025-03-08T14:30:00.008648Z","last_seen":"2026-05-24T00:49:23.389496Z","times_seen":113,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/category?lang=en\u0026pr=kometa","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"OPTIONS /api/category?lang=en\u0026pr=kometa HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kometaloft.com/\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/categories/jackpot.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/categories/jackpot.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-620\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a4e89a0753176e69c7b10e5eb228f50","sha1":"d0369f1833402c8f3b8be020475afea464c4c3f0","sha256":"b5ed7d7f3aaad87c44f321de6a5f3de85b000d010d69cd67ef25ce65d407c838","sha512":"8966d6b16c4afc37f1753520633d5088d69351749cfa719e43bec32673c660f2f9e5bf4cc3143d19918cb54ce320fd35fefe2318d1ed3a55e29258624b041e10","ssdeep":"","tlshash":"c431cdba921ce2dc04cbefbccb36d4a1270e6091f9abd7a4d89e837104778d9d487414","first_seen":"2025-06-22T12:57:21.044943Z","last_seen":"2026-08-10T16:41:59.376349Z","times_seen":144,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":223,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/tournaments/small-tourn_desc-10.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/tournaments/small-tourn_desc-10.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 39472\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-9a30\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 950x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"96f3bac0e4e78b9f6446f50f0c54c13f","sha1":"9f803f56d3037ebbe9f5695cb8cfde1486d171ba","sha256":"5b484ee71184da5f0f87532a9763fb3f892efb27f68dfa952aaf74006b0faa5e","sha512":"bbc1ba457de219b7acf75ea6fd4ff920a46fc805b7fabd20c055c83e8a4f9e11cdc9371534a9457e1e888a1104778773fc23084ca60d07e153cb3a16f8e405de","ssdeep":"768:ZVqvMm/8HU8x36J+x2uyRRzYcLyyecwyrjkgrTNlpbdThTs:Zov//7+x2vRzxW/yrjk4Jdg","tlshash":"d803f1c123cb8b9636373bf45d2a4b005f0a84c2221e1dd6eceb0246daef596a755d89","first_seen":"2025-06-22T12:57:20.989864Z","last_seen":"2026-08-10T16:41:59.294392Z","times_seen":66,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ao.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ao.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 717\r\ncf-ray: 9555470f8d485690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2cd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1611665\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n3aQW5LExl7srFGE%2F%2FDdHNgyGqpYc4rx0jKW9r3A5yZsx9T19nOdh53HJk%2F9oG59tCsiEycQtn6lbDmxMbiEv87k3fX0vFbq2l071neuTbZ8hTJsZ7jAdKFh8hcDpQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=11\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=4686\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=103\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"60b64b12262f515fc81cf3cd539907f7","sha1":"112253e003d497c07212a894cd51781f8a4e2841","sha256":"d8acf613a4836a0c40a7709ff1e9188158557dc4962c612a02a277219546bc7e","sha512":"b1a8bb85146aa74e306658f87c2eecb9c2361bb3b88c7e16f554d3def3f90731025bd0fd1f9877abbdcfe52b47c76bb5018528cc5563386cdca8ee3802d3c74e","ssdeep":"","tlshash":"dc0194e334ae11acc9890070f203af74f91b38b4a32804360622df65160ff8b52533a1","first_seen":"2025-03-08T14:29:59.773553Z","last_seen":"2026-05-24T00:49:23.028468Z","times_seen":116,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 751\r\ncf-ray: 9555470fedce5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1947668\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LmQ08837IDg8bSQkrMQ%2FjuBj3xUc3iuAZYETWTyBOUSOvFsvw4OvWEpJCilkHNkzWEYf3i8jCjGI8bJ9NlxU9%2For3w2l4yODn6NbWSn1yjBKQOXHUNZgPzoKzU3FAA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2702\u0026min_rtt=458\u0026rtt_var=3340\u0026sent=71\u0026recv=43\u0026lost=0\u0026retrans=1\u0026sent_bytes=26002\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=164\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f8ee398f383937ff67598e46ed2b9d63","sha1":"203bbb3fba9e9b74b2e035defe303377e854938b","sha256":"df9f8f34a5b2e27caef03abf84c6f460d6ac0d09008b8ce8ca3ef185681729ce","sha512":"26bd51cdd7bf47be9a419d21f4c0b730a5117faec52d7cf05274002b66776132dc220fea6d93ea0a20005336e717459027de476e5725ef873efe3f63ecc3b0f5","ssdeep":"","tlshash":"c50165920fd4b95c9b3c826784ce7936f9b6e21df3487b390c1ecec4752990d1265207","first_seen":"2025-03-08T14:29:59.993342Z","last_seen":"2026-06-04T12:58:41.654832Z","times_seen":120,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 571\r\ncf-ray: 9555471adc705690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-23b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1613041\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tfzZnB%2BQVsu4%2FsICaADkt6XsBUe62XmEO1NX2CPsyoZx75xZSoQOBOhZKSMdy%2FWNAGj0%2FjRxAjpVUgktyl5480SIB9S922ldoOWJFZvr6Zq9B9SlO0nQTbsKqjFNHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4457\u0026min_rtt=364\u0026rtt_var=5266\u0026sent=301\u0026recv=211\u0026lost=0\u0026retrans=3\u0026sent_bytes=114719\u0026recv_bytes=8044\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1918\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6fc998cb5a0daaf3e13c19bd29d08914","sha1":"5923d9b55d59b95ebb1742121a77e258ad904d9e","sha256":"1ec6889ae646a6dcaf346819a2b4504f1b9282db9933f72d5b278fc5740fd8ec","sha512":"5fe23bf926a0999adeac75029fdb723009f63d315ed328d07340beff03eee32373d74daa810b546a955887124a65cc6fc8831b38768ae16db21b0dde97cf6fb8","ssdeep":"","tlshash":"97f0419ecfa30c86d8add46a14526300440d0b20ba30d3845164f7244b122645b1b98f","first_seen":"2025-03-08T14:29:59.768602Z","last_seen":"2026-05-24T00:49:23.292686Z","times_seen":113,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/nu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 912\r\ncf-ray: 9555471c4ea35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-390\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lnIh5omfqK35xyP483i3EZeBkzFihN7F12GIQ5KqfMIRc9CAfkiqWcIVLwjzDvPrio7zK52Ap3OMBilEBRR3QgbGqh6oIn8mVaKn%2BAaA71W7amGNCnpovVcc4QJ7rQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1385\u0026min_rtt=364\u0026rtt_var=520\u0026sent=526\u0026recv=332\u0026lost=0\u0026retrans=3\u0026sent_bytes=198471\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2142\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"d906cd726f786a9f32487e8b4a12518a","sha1":"f202a8446e730c5eeb8a615826be2f1452168c56","sha256":"da1e94dadd163143b4d3c8c3a24e9bfd7db7f2c176a9d0a0400f7cb0c49df3b5","sha512":"eb408a8fb0c88ea8889c5dc9e44b88eaf6313d663c16e578128e63a0b05cafa24dd7b0ec32887bba9a73a0ef87007183e9b41c44a8eeeeaadf3ec5f5baf97a22","ssdeep":"","tlshash":"7d11849e57c04819c5621ae5733a6d35ef3621cd31d880c969007ce03ea9a504822641","first_seen":"2025-03-08T14:29:59.863175Z","last_seen":"2026-05-24T00:49:23.185658Z","times_seen":114,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/pg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 690\r\ncf-ray: 9555471c8f085690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1496524\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ALq2Pv45EK8y2gHsAksMQ3ymRsFpduaWKe6SkRWPnhvPUMCNi%2FDczYNAEAUz9ch9Qh4ZvYOhgvIFvjiw9W6x%2B%2FXA07r%2BYiCh0AxNde6GG9DYC2bZmWR6RUxPBq2JPQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2129\u0026min_rtt=364\u0026rtt_var=1534\u0026sent=567\u0026recv=354\u0026lost=0\u0026retrans=3\u0026sent_bytes=215095\u0026recv_bytes=14808\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2195\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4a867878150fe1e681693f83e823e06e","sha1":"12b93f8e83cae5e106042594b5822131caad3ff4","sha256":"14e6aa3b1889e76a18e9c7069aa31687fd0caf7dbb0bae31bdb2856aa8d54794","sha512":"cfb17884bd0f15944bceece023d74669c7185153a8b81a1e8f1ab9ddeed6535a567ed5004513b863b30be4f00ba98dfac2c3b4da8c9decdbe9187341da622d6d","ssdeep":"","tlshash":"bd0188a27358dc9ce0dd9775a60e1cb0dcb0500cf95d7401c2cd57638646389f45ce83","first_seen":"2025-03-08T14:29:59.781512Z","last_seen":"2026-05-24T00:49:23.475289Z","times_seen":117,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/EscapethePyramidFireIce.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/EscapethePyramidFireIce.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 65202\r\nLast-Modified: Tue, 03 Jun 2025 06:13:59 GMT\r\nConnection: keep-alive\r\nETag: \"683e92a7-feb2\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"5d1325a56aae9ac02e7afbc73b5ca8ab","sha1":"49d69883d835e31b4d495c7389bc76d4ac4e4e25","sha256":"9d9dc395a698e6b14f1b27465cfba22f7e5806da18484ad47859ed62aff4eb3e","sha512":"22161120214dee0cb458156a48c3ba985b3a8adfcef7e19584b84b63b751ed5eea5d65ef1d01519974db1a1088074ed968f3bbbbffd346cc85e6d9f1cb03d343","ssdeep":"1536:fNXujjMeyIT5yg1o31qZljOLdWtNkIuJFWmbkZQbygLSGkcKMVT:fNXujny3pmljO0NkIM4nOPLSGkcKMVT","tlshash":"ac530212422d58eb775c16339ced8e29d8c4495ef818111a563daa42c0e7faf8639e71","first_seen":"2025-06-22T12:57:21.015021Z","last_seen":"2026-06-12T00:18:49.639353Z","times_seen":10,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ax.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ax.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 727\r\ncf-ray: 9555470ffdef5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2d7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 687070\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aag31bQfjCRPZdGWWSWrgsaKLkl9WzSuIikQYLLfBjsZeQnjyZwdmVsWkO2McY3C1IJ0kbAduNcM53ISYDGJ0DtNLsqJTD9IlUGHAjPAM57a6C%2FfQJ%2FkmhlgZiZtrA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2642\u0026min_rtt=431\u0026rtt_var=2033\u0026sent=86\u0026recv=47\u0026lost=0\u0026retrans=1\u0026sent_bytes=32169\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=174\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a19592240e06ab1b38d225316b62561a","sha1":"c1db2a47a766265572577c8e087513ed66f9f5a8","sha256":"5ce590731962d351ab4194b7c6a3622b125920311d76922f94b5f57c79b00259","sha512":"58908ac65eb4835e113a3d0b369ad51cb72ea04b75c20783ecc772be18ec03b435e6603c0fee0963c223f9ac58ceb8619b1b7fe4b0d448ddbb7278cfceedba0a","ssdeep":"","tlshash":"5901652e2e6caba57bdc47ba6558c864a49210b1ad3d6d730a82c8381d46b14816220c","first_seen":"2025-03-08T14:29:59.862521Z","last_seen":"2026-05-24T00:49:23.37613Z","times_seen":114,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":14,"receive":1,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 663\r\ncf-ray: 9555470feddb5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-297\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152713\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cgpUOjL172u1i9QeWsRD9GBMXDyMeHTd4XvQjIFTSZ4KS%2BNuf5N3aFLH6LoFitIMjaTSD1mBMAOmf1PnqVYxtqi9RoHcYdMkksKi5jc2rHEbpsP2XNb%2FJQ%2Bzl36vyA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2534\u0026min_rtt=431\u0026rtt_var=2193\u0026sent=80\u0026recv=45\u0026lost=0\u0026retrans=1\u0026sent_bytes=29754\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=169\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"67c1fa89897722728dc4d1f97be5010a","sha1":"e79c9ab4cf0a69dcbb5479c8868432191b10e079","sha256":"bbdd86c0da02f09adb78861af7b1ff74624846abefdd2625a2ced944e052c5c1","sha512":"a61d9a800122271775f1f95f9ea81d9b72fd84aa1a7a4a169b3005c97fcb5c9c919c2a98959e0628da48faae94d49b3e2856db2142da0d4936d1c9d23e5de3c4","ssdeep":"","tlshash":"db0123844571494fd28fcf32d0cb08d29f2198999001d12d234619fc691ad24bfa29ab","first_seen":"2025-03-08T14:30:00.014597Z","last_seen":"2026-05-24T00:49:23.425962Z","times_seen":116,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/nl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 530\r\ncf-ray: 9555471c3e8b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-212\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 896519\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qq6uHapZ0GfjdzlmmnfBD0ejnborfQVSvUN5lGl7MPsNfKF1%2B%2BG9Tk3XZN7LVZcbla9QYfbmdwCEiWxupBpBOccUSS1l%2F%2Fmr4FuoUQ9AHwcqB%2F8%2FM3IYGbTD%2BbUE4A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1251\u0026min_rtt=364\u0026rtt_var=727\u0026sent=515\u0026recv=328\u0026lost=0\u0026retrans=3\u0026sent_bytes=193423\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2136\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f6b101b499829be26540d5a79bc3cad2","sha1":"6cb928828072be64ce51bb86a608ecd070089576","sha256":"5c9dd2327a2cb034716f46a211813f6d1bd9917d4c10c57f06b0386fdde532c4","sha512":"f256fc35de6ceb6b7371db8552abc9632ca70cf9e5ba4987670aea3a54cafed6853411860366b6005bd0487e23b102c265af93b26f4acd666d9ea401670d1649","ssdeep":"","tlshash":"1df020ff86635c34eb3b256c8e98d062e1631eccbb14093aa58afcb80b0d42883d0305","first_seen":"2025-03-08T14:29:59.887622Z","last_seen":"2026-08-02T10:38:22.37628Z","times_seen":164,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/HighwayToHellNL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/HighwayToHellNL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 74119\r\nLast-Modified: Mon, 26 May 2025 10:21:08 GMT\r\nConnection: keep-alive\r\nETag: \"68344094-12187\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"5ded884204573e65f4fb3c50e586eea4","sha1":"7bd7f133fb89727bb115aefcd7d6cec32ba12136","sha256":"02256db07b14d96ff41497b08ab59aca6a6244850b92563f942fd080a8b14f48","sha512":"6853eb090f2c8ac9496e7e55f4f2259b027115e0b55974a3447db01f82a98e976979b9c0f9628926d9cd95143c3b1c9e58738f25c8225fac317c13e0febef5a9","ssdeep":"1536:FvZUUhgwLczqGzOs2ziuVkqttz3inFDk5EwB:Fv/iwGzSzxVttzSRk5EwB","tlshash":"0a7302aa5d3cf8e7b0f93eb0976d1ba679e042d544366c43f68a6edc242602c9173c34","first_seen":"2025-06-22T12:57:21.16385Z","last_seen":"2026-06-12T00:18:49.552239Z","times_seen":12,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/translations/en?pr=kometa","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"OPTIONS /api/translations/en?pr=kometa HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: skip\r\nReferer: https://kometaloft.com/\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: skip\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":119,"dns":6,"connect":46,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 750\r\ncf-ray: 9555470fede35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ee\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321087\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HgHnA%2FUP%2Fw6ZKLMjnq14REw9OKrEd1qi5yBzn8xvyNG5TC%2BKXOcQQycX2WHx9v5O4GamUwFitBcLeKV61mUODf86wE2XEPZAASlB1uYluN7epdxy0sMnKgy2skmwdA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2461\u0026min_rtt=431\u0026rtt_var=1887\u0026sent=91\u0026recv=48\u0026lost=0\u0026retrans=1\u0026sent_bytes=34763\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=176\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3ee90f6910664bf8bcd55dbc49962a50","sha1":"344cbd653a532155d958a1c4b107723ec3eacfbd","sha256":"626a57ac73bad3455be645ddc4e77c15c88307fe71acde893f8adc334921c57b","sha512":"f2ff4fe37538857749f29c4109dc0dc73af8e4fb5aa09cb4b1f9b0ea44bd295eaad66468a8a56554dd38fe70522311289b1f96a71643f1daa52b2f953398ffd1","ssdeep":"","tlshash":"460165e8bb36acf51d0e37a4d34bd118b51236066d30580a94c0eff6965f58321f03e2","first_seen":"2025-03-08T14:30:00.054855Z","last_seen":"2026-05-24T00:49:23.517254Z","times_seen":114,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\ncf-ray: 95554710aee05690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2df\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i6A6oouGR1v5Birc%2BybSpXJnciUylGuEPdxLxmjBJ9qJSuS5%2Feu1JhGj2PHgdvYM64CS9A%2FrGZmwQ3oFcS8PJbUAAUxqd2Zv1%2FGZoOv0jATFH%2FKDbg%2BXH%2BWccYl2SA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2508\u0026min_rtt=431\u0026rtt_var=1971\u0026sent=124\u0026recv=64\u0026lost=0\u0026retrans=1\u0026sent_bytes=47429\u0026recv_bytes=4092\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=330\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7f8520b1ad1cd1e6403fdade929f744b","sha1":"427485609218fad359c3530c6c672558f78acee5","sha256":"422f21a7cc734ae6e446608d3391410f226dfa48d11fc80a68fa1c513ce06e46","sha512":"b601acc9384568aeb062de015653305b51726e9e37b09d494b1a432fcd7726fa97cd6f89d659033e7376ef3713516b48b95a52d4b2e556ed1cb81648cef2d2d5","ssdeep":"","tlshash":"480194f993f4ca1a0dfb56acc761a36aef709a582e42e80f09051cf45a1271b14f6712","first_seen":"2025-03-08T14:29:59.936606Z","last_seen":"2026-05-24T00:49:23.237964Z","times_seen":114,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/nz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ncf-ray: 9555471c3e975690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-28d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 978326\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3Qdq7N6Z4d5SKXrr6rJSJBZFRPFdYaxWDLFM7%2BPQ5tbZWDyh4Df6m9yrnxcjlESZw024MKpQD%2FHwuDxFTS3W%2FKGKIlg%2Bj8JAQ72%2Bpb7LhcaB%2FYlRhRg3TmbPwl0qlA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1408\u0026min_rtt=364\u0026rtt_var=858\u0026sent=520\u0026recv=329\u0026lost=0\u0026retrans=3\u0026sent_bytes=196169\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2139\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"01b662581d064b15d11850a732ee5dc0","sha1":"9294ee95c17e50265972de38edf314bb8ba92e59","sha256":"ad88586a6213ae75d021c6d7ed767ebb342bc62caf3fb68247a0c8421edb29bd","sha512":"47f70b2e6aa48cfff01e69e2ce2c18edc29e5e3af613b995e7978f993075fe0dfc220a12703d57e25007e3790ae5c4e12b5285c9ef7e267cac418c5d680e5080","ssdeep":"","tlshash":"07f023d25e945d208c959627090194d199a26d5dc02fa8d5fd164726195e700dbe12e2","first_seen":"2025-03-08T14:29:59.776388Z","last_seen":"2026-07-22T00:37:09.239261Z","times_seen":139,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 968\r\ncf-ray: 9555471c4ea85690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-3c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 761373\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jW7Z3Ap%2BeKOrrIGjTXsKSOAV89jsmBsPGFkfvPQWhSBWgjbF%2F5JMm3XK9tT5BW5IOSpAzUqdEmKpJ5WUyAMMaD50QkpF5MKhqOstHLZqfY2FrJthZkJncc4QBX5GaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1280\u0026min_rtt=364\u0026rtt_var=454\u0026sent=537\u0026recv=334\u0026lost=0\u0026retrans=3\u0026sent_bytes=203601\u0026recv_bytes=13896\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2144\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"727029e70bf85d6f956c713653b78d4c","sha1":"d256b6741e0e333d868f8368af3f8ab7729fd151","sha256":"8cba52048b185ff0184285e84a87d5342303a7d4a08b7591b003e24a26a4e3be","sha512":"a660912d565dc98f722fdaacd359f7a096ad77d8f12c6cea2741220bbfb2d55e02899171005d265dfbdb48a66c34cde330c27e12ad0e5a1e4cf0a057063e9992","ssdeep":"","tlshash":"0b11c82e1187560ca77336f088e41826cb7d0c5911a4bdd95810d5daa9cf21570e5b79","first_seen":"2025-03-08T14:29:59.859794Z","last_seen":"2026-05-24T00:49:23.112247Z","times_seen":112,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 585\r\ncf-ray: 9555471d18275690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-249\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 232880\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mkHUYPbRT9E1noo1EXfJew8jQtieG281uvXZTnbCdZnSY%2BsXpUpjT96PRwXGXLsvsKTOccxJx4rttfFT6Nl44HkIsvot%2FOhM%2FzeWdYqzzGv7Bz9Q768guHKbOADJqw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1402\u0026min_rtt=364\u0026rtt_var=810\u0026sent=735\u0026recv=434\u0026lost=0\u0026retrans=3\u0026sent_bytes=278625\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2279\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1528aff1b35c1a07eee3bc085fafb85d","sha1":"a076e3d6f640f354f3429c5c6f416b47335c69a2","sha256":"7dcc495290dac28c983c21aba5af32c019da82ac2014b0846f2464efdaa15faa","sha512":"9b9d9074db4d8ea9958cc7d433f6a8dddbe53c1cbaf92fbd470d1429133008a77dc4a9a2358c7674cd9568fe0b3d07aa8568c53f8e71211a5c0b611c26bc7af1","ssdeep":"","tlshash":"32f0416186b1bc3fee1940735bb68d79a037029ab628d0960003943b9f1a5a010e2006","first_seen":"2025-03-08T14:29:59.913596Z","last_seen":"2026-05-24T00:49:23.650418Z","times_seen":114,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 730\r\ncf-ray: 9555471d28395690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q8oTQqsolYSWOpwqYf%2Bd27i3OVqtyQ2pHPtVh%2F4Kw5fCmHQMVDbeP7ow7%2BUTNehDSaZ2QPJO7w844zj7l6Q3NPU%2BzLVw3OVK%2B82%2FAhcu2jJUWs45IWr0PqelJ7chxQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1367\u0026min_rtt=364\u0026rtt_var=661\u0026sent=738\u0026recv=436\u0026lost=0\u0026retrans=3\u0026sent_bytes=279725\u0026recv_bytes=18608\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2281\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8c6a093ff90ba04824ec02a0bdf06243","sha1":"ff32054894cce13aa693189a0f028744cc153e53","sha256":"548c0e06368e600a8fe6bd5c7a74c801a39671676485a1d075df4ef02822d9e9","sha512":"1409c88ba2e9b4f4b923ecfa08a77fd9e941eb515df3d6b25b54085181e2dc73b70fb4089fdc89987ae8b33063812c1af35019340797469c9b7fd6f5292cded0","ssdeep":"","tlshash":"6c0194fa2b4d2c2f2f90830685eb09c8cc85fb32ba84f4284c1c60698b125de3d50da1","first_seen":"2025-03-08T14:29:59.879935Z","last_seen":"2026-05-24T00:49:22.74923Z","times_seen":118,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/mulish-latin-ext-400-normal.010c30bc62bc9d6b.woff2","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /mulish-latin-ext-400-normal.010c30bc62bc9d6b.woff2 HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 12612\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-3144\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12612,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12612, version 1.0","md5":"4f34f0c29ef320b535bc4a258318b5c1","sha1":"b75380be26940aec716323a8537ae4c1b2e4252d","sha256":"bd31d387808eab8b6d39d6cf8ce3c11cdc69e93df8a3998b8e218a9427d4b6e1","sha512":"fb4ad84d88ea933dfafcd04e9e736c3893e1e90b56850c7d76f77a4c618c34db4e331d152276071d3432f05a8fcb79d5ce377405fa133f296a075ea687f6c034","ssdeep":"384:rbBt7eesr8mpH68SNdMusAHQOhU0WEumyhv:XBtXBmFTSBwOy07yx","tlshash":"eb42d0721f8981a0d31a3878157f932f46ea9448f2741f04ab4fe320e19d997760fa67","first_seen":"2023-09-24T13:57:41Z","last_seen":"2026-08-10T16:41:59.28622Z","times_seen":79,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 685\r\ncf-ray: 95554717b8135690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Mv4dByFdxl03F9ZiHm%2FPBM%2BH2bY%2B1yzmHa8ASkW%2FZdXmFJneSRbaQwxaj6ygcjMP%2Fg9fS5vNimU2Hzxd36CMG7NrY7X4Hs7pHy8ff9vSDGbI9DG7wb9rE9x1eKKWWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6936\u0026min_rtt=431\u0026rtt_var=10802\u0026sent=175\u0026recv=101\u0026lost=0\u0026retrans=2\u0026sent_bytes=66074\u0026recv_bytes=5308\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1418\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"914d7efdb10a8a4c35ab89621efde769","sha1":"994ec24a2d978ead8319a701baeedd02e8e8fd9e","sha256":"08fa774cf7103e3658b2ff73c974a9f83643af72a3257b894be5e5ef6bf049b3","sha512":"bdfed12c4d9b2e01b413f4e4f8de0aec6c2f83301fe5dbedaa82eb2de9a9560d7164e8c7ca0a2c782ec4658b225728e002d60431272ed7c80755cddb90343cf0","ssdeep":"","tlshash":"9401d8ac1ed605a9df1fe73146910ed20c2e79304d98c247082f5634c4a37310138523","first_seen":"2025-03-08T14:30:00.023573Z","last_seen":"2026-05-24T00:49:22.761412Z","times_seen":115,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ye.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ye.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\ncf-ray: 955547216dd65690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 687072\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jrtB5Y%2BZq8VRftuYLhe7Q7RmYUQZdj7xGuLKYd%2FUehyEvaYOMPw6g2HhPc1c%2Bv1MYYrPZ3uskNrG%2B6Ln2MWcphsHeFHqwTWddqEZzKy3HeJEV6h5Bi1RPe0jU97EXQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1411\u0026min_rtt=364\u0026rtt_var=447\u0026sent=807\u0026recv=470\u0026lost=0\u0026retrans=3\u0026sent_bytes=307670\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2966\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"badc4f27ab8e05c1e347b1898e05ddd2","sha1":"3c760d17fde20efd2ea4f3304c02967547d61769","sha256":"e0172bb01de015a4f2383f11827673a8350f30c5e47aa2701b43d659d528a146","sha512":"f5a699b9123643b1563e5736cb96051d43b77979c559e0e5b2c89ca3736dbec5e11ffd3148de8eecf72034b2e4342a6fd4f6382cb1f5d73a9e598af8481c91e0","ssdeep":"","tlshash":"daf068f372d04c77e6d54db9b45da144de85b23a543801db988cc86a6f30b6c00502ea","first_seen":"2025-03-08T14:30:00.017304Z","last_seen":"2026-05-24T00:49:23.607784Z","times_seen":117,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/SanQuentin2NL.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/SanQuentin2NL.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56812\r\nLast-Modified: Mon, 14 Apr 2025 10:54:38 GMT\r\nConnection: keep-alive\r\nETag: \"67fce96e-ddec\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"7c3be9ab175fbb005271d657123d6244","sha1":"2c2561015aa712c6a8f10c21bade1e46d31565a8","sha256":"8c44f54e896fb647f8b6db93f7d8573458b175d1866490cac1a38135255aa57c","sha512":"ac31799b906c98a9e05ffa02c0af72f23c7937083618b6099050aff7dd1ee006c46e0353c2bda28f080a45d2d37be5b1bf9ab33d5ec4778cb911a06246f4b854","ssdeep":"1536:jHZJMb952AV1n7WSGOWhFF7hMVEPnUGdhr7xIGeYNLavOHYf:jXMbLVKxTFVMV6UGdhvxJvNuv9","tlshash":"b5430188b1b149cef4bd5a744fa5b4dc80cf03855313241be2cf2a3bed556018a5abaf","first_seen":"2025-06-22T12:57:21.222338Z","last_seen":"2026-08-10T16:37:06.237436Z","times_seen":214,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 782\r\ncf-ray: 9555471bddfe5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-30e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 152715\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=M82MOB1%2BWPjTjvx4Tqbhs8QfxugjFsz%2Fb%2FanOf6wdf0IwkR5qGSSNIuxdvFrsZaGFvL%2F23hfiz45cy%2FP7ijMX51IIXRsxHWaihSDxSt55EgJaMfmrV5esRgbJonK%2Fw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1209\u0026min_rtt=364\u0026rtt_var=434\u0026sent=434\u0026recv=283\u0026lost=0\u0026retrans=3\u0026sent_bytes=164545\u0026recv_bytes=11464\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2080\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"12f0757fb76187a72f4908cccf4f19f2","sha1":"e78fa9cb3c235d81d07cff7ec0e98584e245713e","sha256":"5338a1e1f0dd319af1c6ff9e5c2bbc5fbf35a108c7ac4caab891212ba2e58cfb","sha512":"7d256bd86bf253e756c91ff5af5f443db77dc7c435e6d053fbcfacd97f1834f32c94ff6d2e6baf5ee32360a14c40b3b1eada4494adb3c36b81f2613a95335c4a","ssdeep":"","tlshash":"510175f787501c369a3d5b391c7e461b59f066fb88614a4f869c054e392de18f3d43d1","first_seen":"2025-03-08T14:29:59.907295Z","last_seen":"2026-05-24T00:49:23.555848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/mulish-latin-400-normal.163c0baceaf56d2a.woff2","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:26.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /mulish-latin-400-normal.163c0baceaf56d2a.woff2 HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/styles.4eaf80b61ae0f399.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:26 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13508\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-34c4\"\r\nExpires: Thu, 26 Jun 2025 14:50:26 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13508,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 13508, version 1.0","md5":"dde2379a58b73aa459e27d560b35ee4f","sha1":"8eff2352acb3b2de206c0444f4f704ed46cfb134","sha256":"9e7fe0edbc32bbda00bdef6dc0241bc78277a37d4ceeab5991c64d11915746b9","sha512":"83ed52c35a95b663e71452a250675a71e1f4efed85d732cdc6781dd13afab1bfe852aaaeea765165f615bd2d153bec4ef167934d31c20d9632e18c87d89b1778","ssdeep":"384:qNfWn6GyNb3qnZTRAaSqnoNxnMKoaUzQwwcNlc:kWpRRDPo/MKUfXlc","tlshash":"7052e00e6eeb6923639f12f4c117254fc24bae01e78dc26e84450693aff38a3521910b","first_seen":"2023-09-17T10:33:05Z","last_seen":"2026-08-10T16:41:59.268718Z","times_seen":459,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/bitcoin.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/bitcoin.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-1673\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5747,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee55a8b8023b414560960992a34fea69","sha1":"53b955b7d1b3f5998369e6a48766e420104a4e10","sha256":"1ebf0d67f8863af08c2fed6fa33f7131899291c493d77d7f0d878be130fa5b6d","sha512":"b7e7db9ea04ff24740d29a7050ebaf1caa1be7c2f1918f0287068fa208bb01777db4cfbdd80d651e2ec93b1182d07fd3a4261aec37ec2d2cd5912c56c4c63a47","ssdeep":"48:9bVg6AqJuPwLoaOZSGOVJGsbw4Lxs6cFdm72L91FE2rUMm6rfluTROYknvgjTXsE:tS2nVSzk7t2BuO7nHYSsP0e","tlshash":"17c1e7c033aa6489f424d7eb5f5b903a7822bcfeb9408814d3e88e64f1d149c5c25ed3","first_seen":"2025-06-22T12:57:20.945168Z","last_seen":"2026-08-10T16:41:59.373944Z","times_seen":228,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/litecoin.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/litecoin.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-12a5\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93edb733903adf6957e1e50757d1dbfa","sha1":"684943d3832a33a7bee11defa4db5cf07f69ac29","sha256":"9e01176bab3a1d0560eadcd93ac75b3e7e1ac3298bcd32006e102c8f486a10f9","sha512":"6daa6b99f3352e6a214db80af8d4016c56b4404ab783a26cf818bf2f7a236b38bfd165de4903eeff7bf3ff43b4f16d4ae42c5126c24fd79248c03807c0984293","ssdeep":"96:CgxAH/Tjy0GAV7ukw7NvZh1oamyP7qENbMWR3Xz+bXTeF:CX/60xV7Zw7Nhhi2DhKXKF","tlshash":"dda193ca37e464ecf488cbf64b57a0d92102a1ff55458a1cf7dc5e64aa5081c8c276d7","first_seen":"2025-06-22T12:57:21.198549Z","last_seen":"2026-08-10T16:41:59.327756Z","times_seen":228,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ai.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ai.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 683\r\ncf-ray: 9555470f8d4d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ab\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 28447\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xP6k54ac9TbuJZz6iF2YG6jDLfqaxrk%2FxbDIQKjEc1gA88fSNZYXNyXvki58bDd6ep0BXiYaWQSIbXFlYadcuSalkUQ5NwQeOA%2BhyVfVgQrezcuFk83jhbGI1Qfr9g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1152\u0026min_rtt=479\u0026rtt_var=1368\u0026sent=25\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=10725\u0026recv_bytes=2040\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=107\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"35ce333222e15605603faadd1eb52093","sha1":"a456a311ae739038fe112290c09c157546d6b00b","sha256":"d199a2531a33db028e22da6063363c736f69f9a958fdd42b487555bdb50732bd","sha512":"d5cd8c93dc44d43a614b7e8a1d3681afe67b11768def6edf1a249aff907f84802a63f3f69016a3928968ba4a96c67702adf6ccdb19701fa78d8f9916a13a5e3a","ssdeep":"","tlshash":"f401888e6ec0c8501ccd4a53a4f554d1d741475f452c1dcf00092195cb3d3b215d8e37","first_seen":"2025-03-08T14:29:59.940835Z","last_seen":"2025-06-25T14:51:19.557257Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 544\r\ncf-ray: 9555470fddc95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-220\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 123711\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S2GcqckDeh%2FiNeXesUqDboKy0upneSXnm8dlq4tgRQARnuX3FTlYMBV0yERX0hirZdtd%2BEbTet6kk2z7ER1oHWzNXdwAYi1uGLwTmGIzZ3nE4BdYAvEipFVCxiMevw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3023\u0026min_rtt=479\u0026rtt_var=3599\u0026sent=67\u0026recv=41\u0026lost=0\u0026retrans=1\u0026sent_bytes=24966\u0026recv_bytes=3256\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=162\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d366402e49ebf7e08f2df0a2ffccb410","sha1":"ef08064547dca861e9175749de4b3abc78f39730","sha256":"99e70aa27435cbc26e49d1e905847ecbd5402c0ed33d05af62b6ced80daa10ff","sha512":"2464f238c296e95cda98f840c78c61299f236b0d6d7c6dc97cd851352df20f85abde17e3e6044610f458610f5ec812a5882cc646cef38d8dd3fd1b7cf453086c","ssdeep":"","tlshash":"ecf0ec44071c8c30ea48027300548d4fcdfb43574c720644ce76d51b4404b6913b1052","first_seen":"2025-03-08T14:29:59.820874Z","last_seen":"2026-05-24T00:49:23.100789Z","times_seen":116,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/hn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 809\r\ncf-ray: 9555471b7d455690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-329\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 123713\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BIQkL02G4hx8OcOgCSxvMPUDta3XUkbGJU2hcm%2BvqtDQ%2FHNYxTT%2FW%2BDx2hk3NWvlZ9paClyL2hDYI7ic0wRZrPb4%2F8p1s7740KFTukY5L%2BG8eDT6xf2eR87Ta3KuxQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3159\u0026min_rtt=364\u0026rtt_var=2531\u0026sent=328\u0026recv=226\u0026lost=0\u0026retrans=3\u0026sent_bytes=124552\u0026recv_bytes=8652\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2017\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"db7cdb64ed62773a546a14652402dc94","sha1":"27f1782269383f81ac2729cf392ad6ef5cdb5829","sha256":"6e12080317edf8dbd2241884a069e058e60047e8a697f09beeccdf44bb29d314","sha512":"90a01f844cbc822edd6f1eb7a15a3d158162671dd2786ec0ea3859621f9a4e933975f1ac408d609b6cafed5c09f17341286ad1efa26117d9f73769f344bb1797","ssdeep":"","tlshash":"7b01811591c72aec0fe8b672c8ba00c1f87601971844c3968cd17f5bd9b292c59443da","first_seen":"2025-03-08T14:29:59.883175Z","last_seen":"2026-05-24T00:49:23.139536Z","times_seen":115,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/id.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/id.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\ncf-ray: 9555471b9d785690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-215\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dD1tR1CFyKm5jV%2FV0Xupy%2BIK7FQlqxzXqrLzc3jrU%2F8lJjf4PLLL%2F%2FxhxTgzl%2Bt6h1NkiZnwGcCtJBtVtATRaQ%2BdO%2Br9s79zpuCGkFVq39V%2B0gy2YOtXRp9MuMuH3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2942\u0026min_rtt=364\u0026rtt_var=1520\u0026sent=341\u0026recv=240\u0026lost=0\u0026retrans=3\u0026sent_bytes=128415\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2032\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8d1444e3a9b371cbf8c2701c06d96ea0","sha1":"02911f5453c344a42789b2e6a8acc1370787ce6e","sha256":"27f46dbe30f6434e6a0ff334c85ea8ff3f1d7a09ee919568b2e2908f328ac07d","sha512":"30505fe89ad5536d44464faa4a20b0afaea3ef2fbb171c43813af481b28be2f84d8fe83a9cdc822dc744a3748d63f45618ac4f1848b2c0c910632be526346630","ssdeep":"","tlshash":"71f0c078adcd559ddc798b356118b5b9d872322c7b944d0e1708f951750e31ae48b80a","first_seen":"2025-03-08T14:29:59.854247Z","last_seen":"2026-08-10T05:22:39.912344Z","times_seen":385,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\ncf-ray: 9555471bfe285690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-230\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2282499\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8aT6oLih%2FMhdybpTNQ0YFEA68l2dXjvpOl5Nod7NGjQI7lxWoy5gaclanABlrCxkhEPBZ8zFJJ1nhtisaNYYdHPL82FWZ5Kx1Ef25BnV%2Btn924LZfqy4B7KEUvRH6g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2010\u0026min_rtt=364\u0026rtt_var=1361\u0026sent=449\u0026recv=291\u0026lost=0\u0026retrans=3\u0026sent_bytes=170610\u0026recv_bytes=11768\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2096\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ceba21aff293c574bce76dee9cb23280","sha1":"1a8931aba52c7ffa1603c6918136ad69dec596b1","sha256":"e9ecd347c1c8311b871b2e0cb0c1d13633e228a6a06baf9a61ee1f7f344d475f","sha512":"bef9dffd66f1e17e466f7859495f7d2a8bc485fd47240efbce54273d64cebe83984bf602db29ba3b1c0a99d7a593581ebf91c375b0f4a2f9340b80d00e82626d","ssdeep":"","tlshash":"12f026d515899e63e8e9837e14935882fd51806863f44c7f7751ee044b9503454345d4","first_seen":"2025-03-08T14:29:59.868036Z","last_seen":"2026-05-24T00:49:22.717682Z","times_seen":118,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 705\r\ncf-ray: 9555471bfe2a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 761373\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HksHZ5wxsM7kO2xMCFOGtFqYzNUmdWF0cG4S4LNFnV2mr6%2FpKARIMQidUhYutreQiVFerVCUrxiOd4DXpsRQqHMcdFNRD9yfjnwd8tlIDyiYabsy%2BWNLJVSpQqiTow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1919\u0026min_rtt=364\u0026rtt_var=1468\u0026sent=460\u0026recv=297\u0026lost=0\u0026retrans=3\u0026sent_bytes=174210\u0026recv_bytes=12072\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2101\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9ea1878f0fb9e977a376784eefabf5a5","sha1":"0fe472df663f23f57db1c439af35190a697d1a02","sha256":"ff6b089ea1c2437dc0c571c7541b05de8a66f10d9110cff103385590b2200a11","sha512":"7b16a62b18570c18ff4ab08a3fe71ba2a06cf02491b456f61d3a6f0ac9a5c23599526fc72485d7d206c142c727801a09b46d9481a45176ac070768a56c969179","ssdeep":"","tlshash":"d20194fad2466bfdfa4c53776654ca0be1de51bb9d32ea268f4008e90200896d01e620","first_seen":"2025-03-08T14:30:00.00045Z","last_seen":"2026-05-24T00:49:22.557735Z","times_seen":112,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/search.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/search.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-38e\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f5a854785afda978a96ea6f5b5ee8bc","sha1":"f2a49a6b59bd659e580a9e3feaf3f5a6092c7e45","sha256":"f2efd3e71cadfbea169bfe3605e04606d486a6d1a6408c5cfe8c3a5bf37b0f1b","sha512":"965e7f8ba7d5420957303dcf17ee28d87ece5387dd9cf69677ddda066fba7176ce7c6691c63ecfaaff8fd071d0328c7ab017e0b069e8698c019a5a3374e45cda","ssdeep":"","tlshash":"851190f9f7a436d06893d7988c5f59667d3335fc6764874c8abe4a0033101fd45a6880","first_seen":"2025-06-22T12:57:21.009498Z","last_seen":"2026-08-10T16:41:59.33742Z","times_seen":68,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/countries?pr=kometa\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/countries?pr=kometa\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19207,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"284893f1dc7e0b9d29bba1ac67f626d3","sha1":"fbe1139f52f5ceda000d858b7f47f5f9b9ec5405","sha256":"becaebeabc334a74befb0d8336314f0cba794e28f72aa00a3936f1b406f81096","sha512":"87971caddc8c808e951726a0fb2c5b91c5992d2afbafaa26f84321123e5ec9a8a70e0ad2c434d8a07b3b0aeb60445544e153b80a2c2ceec0b275790d27d552ba","ssdeep":"192:G7E4IrZ1pRjj/E0X808R0y/WYJ/pyofA/wh9wNKSAEWV+R98e0SN:GTI7pNrRJyuYyoE4wNjAfe9N","tlshash":"9c8279a96e9edcfce52b5d9015af172c65be1d22b6ee1d850dcd0f2c46a814af00183f","first_seen":"2025-06-22T12:57:20.925952Z","last_seen":"2025-11-14T12:08:07.730498Z","times_seen":21,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ad.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ad.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 603\r\ncf-ray: 9555470ffdf35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-25b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1847813\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FDupJs1ccHAVzFwDplNUowJvqaBHByJ8h%2BrQ%2FCm1TzPTjg3ZZNa79Tu6RNL0FJjwe2Egc58hrsdbAvwN%2BATgIY7yCZFyd5mhJ5o0UWkG6pHcDRk%2BCtsGKD68r%2B6e6Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2642\u0026min_rtt=431\u0026rtt_var=2033\u0026sent=89\u0026recv=47\u0026lost=0\u0026retrans=1\u0026sent_bytes=33407\u0026recv_bytes=3408\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=174\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"61eb5c20dd58d155fe1381cfe10c188b","sha1":"c66d8ce691c1766cbe36f91c8e245baca49541e7","sha256":"c225b8e3ef517a72fe8d7563ef4cb4e5bbb96d02d6ef94841bc2ee101d8e9c1c","sha512":"f6e0af3bac1f0fc474580f60f76ef7828a8bfa119dc53ce09626eb4c44cbc85aa3c6c0daa5b4bc07af75ab8786e2fcb3a9efd7958de8454db7f82be832c4e124","ssdeep":"","tlshash":"46f047a44332c964e5171e3318404ff1f00dd93392bf48811e3edce76741f95d051116","first_seen":"2025-03-08T14:30:00.020126Z","last_seen":"2025-06-25T14:51:19.56286Z","times_seen":5,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":13,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/br.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/br.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 713\r\ncf-ray: 955547101e295690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797769\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZR1flDQQbu8xkajL61I2cb4vJbUSnW6224qw2f1sLto0N%2FEMAsJ8mFI35URHX8DpuydSErqeXlPP9%2FDxcpZY2MLRzk82OLK9dSz%2Bq1DCtdkVo3TZKkLHosoabHC4Qg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2978\u0026min_rtt=431\u0026rtt_var=2568\u0026sent=105\u0026recv=55\u0026lost=0\u0026retrans=1\u0026sent_bytes=39562\u0026recv_bytes=3788\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=201\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4c139174566d26ff1ea889f1b98788b7","sha1":"d7c0eff678e4466d7863bdd3d7485746a785b45e","sha256":"48396a888f232c36efeed7e519311a9890cda8c17ae6ed78bcdc25433c9c2326","sha512":"9d971117d546e141f29c4333d814cb30b466a534c02a6c8e9469a1dea919996787b005be9f4f6fa3addd360b0fe13c423b5d3159732e8e743395763af1ffa5d3","ssdeep":"","tlshash":"3e0149f144c0f4ee544c06950111c178cdfb5035e7762e356b45524056dd66917dcb94","first_seen":"2025-03-08T14:29:59.949722Z","last_seen":"2025-06-25T14:51:19.563576Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/super-sonic.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/super-sonic.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 385906\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-5e372\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":385906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e68945bcc8ec48ced33a11be3c7c3266","sha1":"90e346ce10eb78a4fc6955db6821ca90fa99ec05","sha256":"8900e70eef53676b6cd53fa20bd55baf357231c6979692e27c223f98ebe53505","sha512":"43247f103a76b1cfbb454455f0d35ec5ce1cd977c7161dcdc64e2bde0759bab5b2c9b9d57b458c08df146066c2f209c19aaf5975a18622e4a6718970d48c77a6","ssdeep":"6144:Pl2VLOPNQfQVCE1NiNRbuvC+vNfr6qO75k/xNFKS2NejBZozEP3sYy0VhrLQi:AVLOPSYVCSYu3xr3I5k/xNFKSJrozEPz","tlshash":"53842363960887b9a48990dd75ca14b91ed8235c0bfc7f835d0bd62df4b60de53aeb08","first_seen":"2025-06-22T12:57:20.924152Z","last_seen":"2026-08-10T16:41:59.324959Z","times_seen":85,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":66,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/master.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/master.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-348\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65c3e82ff58fc44a441f2f66a98b468d","sha1":"a44fbbaf538a17bdb70c2c2eae6abaf4bbc2a47a","sha256":"54cc8b9b5ae72dff20e674903762c4f25668bc87da2c55c2a3978691e43e2cd5","sha512":"19da66a80cf63453e02b62d40c5705fedf190ff9b425f31c1bfe16a03546aabc904baaa0cad360d38323391345719a687b0e053a2a5f1862086bbab0125f204b","ssdeep":"","tlshash":"8e0188ccd27c91a8fc0c53c98f24246c3e4aa23e5270c1daf00e98a496d6c95c410ba3","first_seen":"2025-06-22T12:57:21.081259Z","last_seen":"2026-08-10T16:41:59.281262Z","times_seen":228,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:30.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\ncf-ray: 955547101e245690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985622\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hrA8utDJYm56GdZd3Uetl92U%2FepDcyVRVrq3kAkj01KcGq4q7CpwNUbw0I%2FBsQ1%2F5WRUKgClCJIBRzdro%2BYc6cpdGe0M7vNxCTel60Ub3R%2B3vZR3jGnDC0rk6ou3Lw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2978\u0026min_rtt=431\u0026rtt_var=2568\u0026sent=102\u0026recv=55\u0026lost=0\u0026retrans=1\u0026sent_bytes=38378\u0026recv_bytes=3788\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=199\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9740043a6ac2a5f2512dd196263e7af","sha1":"8a56b456d3851dd06003845ae859aad228c3c0c8","sha256":"c07826d3a8286ff20351850821afa5e1fbfc39c1ec29e3fbce5a0b91f461ac51","sha512":"9ce9ac1835a769a10bb623b912c8eb382bd97342a6185a4efd34338638e57d5a4719a9156a78a6f8906e1e8bd8ddd4680015081a7d30c0647cb340ce94ffbbce","ssdeep":"","tlshash":"4f0123f614c1ddd0e7fc3326a37c92c25f50c4f6b755611857966e213440f42429930b","first_seen":"2025-03-08T14:29:59.801518Z","last_seen":"2026-07-24T22:01:00.731307Z","times_seen":168,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\ncf-ray: 9555471cfff75690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 718864\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UrYr1yGA2ihtvNPD2hkHVbSkBXiq6WefOdM6uVDaYbOKKh%2BHRqZoTnE5ZhpNNwnPmIxw8PIh5ybwUx7xMJSuY75J8w%2F29jLlz88Y%2F0sUX09m2tV6kUwdzGdTTo%2FAoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1548\u0026min_rtt=364\u0026rtt_var=907\u0026sent=708\u0026recv=421\u0026lost=0\u0026retrans=3\u0026sent_bytes=268560\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2264\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"335234fb23b818d84d06e84f42a3dece","sha1":"c3628e2d3fd8a63c18064c9e337937c338c2c8f9","sha256":"09d52fccea3a4078407c304e4717224d3cb68ffe904e3ac0893500cad66342f4","sha512":"c905228314e4d7be7523eb2e8a134ea070d9276c7541ac010889acc3907bee6a2e32dd4716a105a5951632408525c73eb398e85b8dd899ed7ebce4c24ee0db52","ssdeep":"","tlshash":"c301f4ee1f27754acca103385b3fd68ce976160545b1568e661481464502612506f46f","first_seen":"2025-03-08T14:29:59.814372Z","last_seen":"2025-06-25T14:51:19.565386Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/vg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\ncf-ray: 955547215dcd5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2321090\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QowYX3MX%2B1beP0Ulyq56BWa9hZIk3Yr5rjLw2BkCCEEyL9x1o4MIdr0CjGjpkhBbhE%2BrM4AV4rX1mmF83PAv2KssyivXwtfqpKpu%2Br6lnbU4H1M%2FWPmqWZo46L1QbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1337\u0026min_rtt=364\u0026rtt_var=440\u0026sent=787\u0026recv=466\u0026lost=0\u0026retrans=3\u0026sent_bytes=298858\u0026recv_bytes=20052\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2958\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8195dba032d4b21f6e4fcc3114f7c3ba","sha1":"97f59dfadfb42c1fc2c9da587a85ed40b55899c9","sha256":"fa7efe286b5409a26ccc2f8eb5f98da4090ed4945f393d6a420286e9fbca30b5","sha512":"f8c95cd96b5c5c530038995786d4a744fbbaba1aee1793704400746ac327c9153b5f5f42ce49bb9023992a6e6f9be340c19ea162f1465e649eafa81816e2c647","ssdeep":"","tlshash":"cd0165462ac95c699e399a33e68a4e48e1fa512cd9d4625f10ad13d6cb3d20fe1f1207","first_seen":"2025-03-08T14:29:59.803043Z","last_seen":"2026-05-24T00:49:22.771757Z","times_seen":114,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/ResurrectingRiches.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/ResurrectingRiches.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 104990\r\nLast-Modified: Wed, 21 May 2025 06:07:18 GMT\r\nConnection: keep-alive\r\nETag: \"682d6d96-19a1e\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104990,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"6d5d75e1aa4e49590b63ef64ca013c5f","sha1":"5cca032dce8896c96ee2e8fdb2485b949d4468e8","sha256":"22337f050cce9ed22aefc4d7e5f3cbd67039214ed3fd88a7d399b2a916574ad5","sha512":"824f8245622e0b59c8ba2e6f3265820ef974c6e5ef2492d8000b704630150d873a546b6f871012c4eefec6414449e6dd216257142adaee4d6d6a3edac8fc9c1e","ssdeep":"1536:mYFd5emY4GAiHmoi452MDHSlfB1awDguYPOFmPMoNFXLsFbu4WO1F0W446J/lGQT:ymWAiGMDQKwD8POFmt6xHmJ/lGQ/BG2P","tlshash":"a2a3127129041509f9109f7dcf10cab85b1ebfe5b4e8d6b764e8e9a0309d31a2fe6885","first_seen":"2025-06-22T12:57:21.113183Z","last_seen":"2026-06-12T00:18:49.481925Z","times_seen":13,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/mf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 659\r\ncf-ray: 9555471cbf535690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-293\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1471276\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4jsNB0bTQAO8HPCqNS08n1yvIzEzS7VBalk5C3hN3pRjQ78nQj%2FWO%2FX93A6RL18Po%2BhBI0N0HaGlwKAcRvDaQDgYA5Py%2F24aU7abAKoSYKvZmzueTDTmv%2FwMrq%2F4Lw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1455\u0026min_rtt=364\u0026rtt_var=707\u0026sent=620\u0026recv=377\u0026lost=0\u0026retrans=3\u0026sent_bytes=235156\u0026recv_bytes=16024\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2218\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"15741e3070023b66a1240b674fd4a503","sha1":"88aa6bc5ba1e5b9f7b321cef4d19e5e8927bb2a4","sha256":"6d84641559955d43b39d68511d4973cfb3f5799c202f2610871cd01c40007c8f","sha512":"2a0b886da59b07cd7a8ca1996e7c4bee2332a5faa9558f4c8a288a41d4d924d8ca22b87bc331205fddcaa3ea5cf379505a7c6ce04663f0a1826358909c0f7e01","ssdeep":"","tlshash":"3201839223962e3cefae427112edc930c3ef15ab40f1736d530e7046f2923808060adb","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-20T21:41:41.235455Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/favicon/favicon-16x16.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /favicon/favicon-16x16.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T04:56:15.004331Z","times_seen":548700,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kometaloft.com/api/game/last?per_page=30\u0026lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:59:40 GMT","end":"Mon, 15 Sep 2025 04:59:39 GMT"},"fingerprint":{"sha1":"5B:56:41:C9:76:FA:35:E7:BE:3C:8A:22:03:E0:28:6E:4D:2C:0B:A9","sha256":"F1:06:F1:99:C4:F1:C7:5A:42:6E:28:FA:E7:B3:BE:D3:3C:01:3B:A3:3B:80:83:9F:5F:DF:54:6A:67:9D:F4:06"}}},"request":{"raw":"GET /api/game/last?per_page=30\u0026lang=en\u0026pr=kometa\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5449,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"845a6a97c54266bc42b8561ed71649d2","sha1":"c90421d34fc80aef4ea96ffc095a3ea6ab0d6d71","sha256":"05f41b2207a2562f0cfa6ca9e441bd628d5eee39d33a5bb391db252a96ac2fdf","sha512":"d0ec08a31afc43d85afcea1254e0cde10d9105458eb239f618d17375d83348993f8d3de724124bf0783e5dcacc06f6938079251592264e0308442864370db86e","ssdeep":"48:YC4MBmCxVYoZfSs/3oxV7m4gxJT713ojst9hYpe+7aM3+8pz8ux1+6:Z4xNowV7m3PT714js3we+7adWpT","tlshash":"64b1894b8e935ebe6b2db2d50d9770dd6a2c203771c0cef81068d800dd7e9b3656722a","first_seen":"2025-06-25T14:51:19.567383Z","last_seen":"2025-06-25T14:51:19.567383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/be.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/be.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 544\r\ncf-ray: 9555470fcdb35690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-220\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 144083\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TeWSXfbr0WYtLOUVaIxTV%2FHmSP8acoDRH5bFt7wE5bVSDLBd7Nr2JKtd2VPsaGX%2F9CuhhImxkdi70bRLK2wJo%2FoTK7fNMQhkZe6QzhXTRULQtzm01GWp0LXJZjfKRw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3605\u0026min_rtt=479\u0026rtt_var=4586\u0026sent=57\u0026recv=31\u0026lost=0\u0026retrans=1\u0026sent_bytes=22728\u0026recv_bytes=2572\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=149\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"438f741be00f0a46e89b861528755118","sha1":"40b419ba748f66d84ea8626ba4803c64390b1635","sha256":"10901e922dbb7fffff9ad7a6ab5bca612525f7518e3dfd8334de30d74bfd28d3","sha512":"8929d21bb7d22994cc83e964409c070fee7d43950bd7971a7a886d0d2cb95470944e8362aab078cbc070c7c264a139c508010c0295a9e017961366e0cfbebd19","ssdeep":"","tlshash":"39f020ee57584aecbdc814776f1c0829db212b5b49aa3a3d8662cc760e4214e777a501","first_seen":"2025-03-08T14:29:59.882378Z","last_seen":"2026-07-14T06:38:22.650794Z","times_seen":130,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 590\r\ncf-ray: 955547110f5a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-24e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jYSjZTL7faD01c58uwjT9Unuq4tIfIiAO%2F9k%2BjqogtxhtPd9TDSKim%2FxOdhwOKZZltB1jqY%2ByDr5tZr3j1is73VhGQIa3kLu%2BlamkIt7hCkus8TShSeDW5CLByaWbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2231\u0026min_rtt=431\u0026rtt_var=1595\u0026sent=135\u0026recv=71\u0026lost=0\u0026retrans=1\u0026sent_bytes=51108\u0026recv_bytes=4472\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=350\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"fb83f1c5d732212ff0640daecfba4e0b","sha1":"6995b23371b88890ef484d9a1d92f9b90cb9dfa5","sha256":"e0ca3a50efb5861715493aa0f3c0796c00e242d1ab4e6ab8ed8607cd4f5362b8","sha512":"cbe2a26c84e5a35fc5d246ffce8ed83a5124ecf1af9d44ec12e93d708107d3a03e49286ac686ef607da62b50c0e752c05a82e28fd779e1718e3df3609f1667d5","ssdeep":"","tlshash":"7ef047ae53f14c5c736059f1141644bbf1272115401cb29140f9dafb1a833145aed5f6","first_seen":"2025-03-08T14:29:59.964616Z","last_seen":"2026-05-24T00:49:23.341113Z","times_seen":116,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ee.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ee.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 619\r\ncf-ray: 9555471929f75690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-26b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WqYhGHX08mPrtiP58PTCnP5ACpN3HFCaWaZnj3zor76w6x%2FBJ9fsUuYl4A3rShZQAgqTOhlrDOrakQBXu8xqHsl5VY%2F8%2BOgTHnjLD06tqI7qUBDKi1UCPs7Qr81mRw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=672\u0026min_rtt=364\u0026rtt_var=327\u0026sent=239\u0026recv=173\u0026lost=0\u0026retrans=3\u0026sent_bytes=90999\u0026recv_bytes=6904\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1664\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6c5c1210e2a5cb9972201a6826b20385","sha1":"de61d3cd828eb5a90882351f8940af062effa442","sha256":"7bb4e3f961795828e2debbc87859d4908d39ff95ff275eab6ca223d5e7037c2a","sha512":"db1c40fedee88a592c866158bcd3bd12b008585d534b745251b7c0b6ff2569e06603b70f35c1078f3ef56621670e2338401fcad74a17885f2e28f8daa479efb9","ssdeep":"","tlshash":"59f062525ed83f37fc37a33691029205d9644b641229490a3359eeda249539a3c4480a","first_seen":"2025-03-08T14:29:59.966514Z","last_seen":"2025-06-25T14:51:19.568899Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/jp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/jp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 562\r\ncf-ray: 9555471b9d8e5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-232\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1797771\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xULI2PetZs3Jq48Is4ywobm4R6%2FoECnYYNoEK1rg4SAES8rp3QHk5S8eFoNtfgaSqN50TCexkijyNMaH8Btx%2Bd7ErMYtYcYoImnthIiwnYuy8yijWlFMzumN0MirUg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1992\u0026min_rtt=364\u0026rtt_var=1200\u0026sent=361\u0026recv=246\u0026lost=0\u0026retrans=3\u0026sent_bytes=136534\u0026recv_bytes=9564\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2040\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"459b255604318bb53e5b4214cab10b98","sha1":"4a54a0032b5d0f7179feb22dc5c63432906c808d","sha256":"c050fe7db556a759cdbdd3cf0f814aeaf5120bbedfb1b489cf64bca27c3c82be","sha512":"af127349f3402cb8f48cfcc9be369ee5e7b1df599815db4f412a5886b49901a5d9cb581bd71d7190907bc8d3710db8ec9080116fe1f84571102c9f51645baf35","ssdeep":"","tlshash":"bff096f26c042f0c94f7d2b18141ec827f59c2d9a17c31a32841fe0215b818830f0645","first_seen":"2025-03-08T14:29:59.876298Z","last_seen":"2026-07-24T22:01:00.683156Z","times_seen":177,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/la.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/la.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\ncf-ray: 9555471bcdd55690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 5029\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5vtIApQgKUzCfh5hyZapAxBSPhzJ5wHMHfFqNaPqHjjt%2FXmJwDVsJK%2Bh9pBqr4uLpxwGe%2BNW31js04LWZ7qUOaCWxd%2FmUUbOzseMF7Ry2ygucVwH3LWGW6%2B7U2UCPQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1540\u0026min_rtt=364\u0026rtt_var=609\u0026sent=403\u0026recv=273\u0026lost=0\u0026retrans=3\u0026sent_bytes=151617\u0026recv_bytes=11084\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2066\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a945793e9018e47ac9672e6f52088cc8","sha1":"e6b6515650877655c8d7f5894d49ff1aedb00962","sha256":"707eda661c23940a095126ad869cbe02aeecea12f9dec282be8442a84398a317","sha512":"e3af6d450bec16538215cb5150cb41763949797cf546406f3dd485d5caeb2693286a4f49cfd4a67f42b96f5382489d6868dfffdf8144ac0ca421c2b65c09c437","ssdeep":"","tlshash":"f5f096542210cd70fd5b821ad56cfdc0957422017d3dca03340e800033bb31c1051411","first_seen":"2025-03-08T14:30:00.04662Z","last_seen":"2026-05-24T00:49:23.344139Z","times_seen":123,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/uz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/uz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 656\r\ncf-ray: 955547215dbe5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-290\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 763137\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dq%2FYRfQO475U29jCIS1xpSXzo12EW5%2FNKF%2F%2Bqqtih0%2BhB1tOkeuPMGlkCWLRta2MBJ0iaTtKePimgmghLK0g5HBqSkJLCI%2BjKn85c%2BlvmvUmNPJJwo9I9YySsYmbwA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1466\u0026min_rtt=364\u0026rtt_var=751\u0026sent=776\u0026recv=461\u0026lost=0\u0026retrans=3\u0026sent_bytes=293732\u0026recv_bytes=19900\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2952\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"efef71551e543244e7eb12da51f7b4a8","sha1":"dde3292fa075397c2d2b42c237ef2a080af2eb3e","sha256":"3c55981625e4d03a35355ce66f2d52575e6f90241042973231bd014136def5ee","sha512":"f1e8ccce135993ed4a3b08c605bd3ff2d2010947ca75440539ac8a1ac2279f765f57915c0d4e1c13c9c14b98ad4c0bb94c7c8b9038078308046aefe5104491e6","ssdeep":"","tlshash":"1bf028ef51342db87d74249dd7e7c472894212549ddcc25b2c4a47b0d10639f65896b4","first_seen":"2025-03-08T14:29:59.908828Z","last_seen":"2025-06-25T14:51:19.570898Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:45.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 300\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.6\r\ndate: Wed, 25 Jun 2025 14:50:45 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":146,"dns":37,"connect":45,"send":0,"wait":51,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/wtp/withdrawals.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/wtp/withdrawals.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 24278\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-5ed6\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24278,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"daa524b9868781c3148e9c9e3d777fb0","sha1":"75e1625b7c21a83fc344daf051d55bd6ad507552","sha256":"98b3c6ced29936dd214c59b5ecc2c08d12b19055ec80b8585008c8bf909d90fc","sha512":"d0601a209316f6f11234de179c0383311ed417eebb2eff343e204f6f31abdcd26811ef68aea113be517091464072002b654f2c6a7b3747256615a01d882eaa2f","ssdeep":"384:I1kGWSzuMgdjMsDJS7/wzdL4o7UjL5uldwsUmSPxsToJEj8jzvsPzukH6QKArDPS:MUU+dAslSbwz7qduldGmSG8qj80yklK5","tlshash":"45b2e158092ecec50c18b5fd94570dcc29facdd511bba2d14ec9a7890ca14b733f992b","first_seen":"2025-06-22T12:57:21.228494Z","last_seen":"2026-08-10T16:41:59.379063Z","times_seen":77,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/vip-club.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/vip-club.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-404\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1028,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa51cbd98199cb9af0b270cfb131f898","sha1":"96da0d4cb8cb5cb2aab49bf78fbaee0b85ec00c8","sha256":"139f4d4c23062720da6e4923526c3f4f2e8ad7b3e58f4d7f97bc5db790f85373","sha512":"e4e36499764d998f468ee64e52213ca4ba6c3ee8e4e404760321df5059fc4d51300fbfe63e5742dd7260dfd250f7d7c3fd230cfa3486e781127cdc8ec0c11928","ssdeep":"","tlshash":"591102f7a3d4f0c2e513e3f0cb2a91a1e99b71f4aca7c15457a01f147a245d04b0ad64","first_seen":"2025-06-22T12:57:21.234052Z","last_seen":"2026-08-10T16:41:59.326842Z","times_seen":68,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/script/widget/config/ziqY8DLV0e","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:26.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /script/widget/config/ziqY8DLV0e HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kometaloft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:26 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1215\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 25 Jun 2025 15:24:38 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-25T13:24:38+00:00\r\nx-node: m9-up-gc234\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2988,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"7a7460a23ed048ebd1ac639d281dda4e","sha1":"d6a9e2380c1e7f08c98bb957d9177e3165d3ed0f","sha256":"a9fc0c86b043b7c263dd8bd338e3ee190f7989f28bbd08d46d024ad839532707","sha512":"b97ee5aa6d8fb453a193c48069f72c9a36dbb6c1fe70a2aba5ea13ad8dacbab659e01410fc6b1db3d965613fe9a3698b7bdb4e6e9206e6db51b721e7bf2f8857","ssdeep":"","tlshash":"ca5146721c892c771acbfb83b187bd82507807479b815e71eaad8c3c3a5b654231b95b","first_seen":"2025-06-22T12:57:21.09095Z","last_seen":"2025-06-25T14:51:19.572842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":144,"dns":2,"connect":71,"send":0,"wait":89,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 568\r\ncf-ray: 95554710aed45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-238\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 137530\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=33CYnnXQP1iefSZsuJdnCTGZvKIfhtX0e64zyJfXhW8WNfhY806x45KSifO3vNvxkRbZ577Y%2BWofivPGiApLGUxZDIQpHnxWW1KXydtkfUayDAZBD1GB4d25wTa5qA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2679\u0026min_rtt=431\u0026rtt_var=2173\u0026sent=121\u0026recv=61\u0026lost=0\u0026retrans=1\u0026sent_bytes=46114\u0026recv_bytes=3940\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=291\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1187d6d31a186c7d0661d2e3a86a61a4","sha1":"a6d927137b60202144478c305e7418915bfbec4c","sha256":"e41da0c50d681046796412133ab31691f24c02d43f43dd4ffe308eeb38c8555c","sha512":"ec1a3ab7de568ce9b921a05d4873db1e4a2062585c6d5f1c6a2ea745881476edbe3c5b207f385aaa20a5637d7c80e93ae47229cc5d7ed306a3f5b1b6ad27556d","ssdeep":"","tlshash":"76f096b432244a649b8fe1bb200e18ee8f500134ed428195221b8a11c743ce8028e186","first_seen":"2025-03-08T14:29:59.843297Z","last_seen":"2025-06-25T14:51:19.573278Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ke.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ke.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\ncf-ray: 9555471bbdb45690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-366\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1186185\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X8lCUK6CCTiC0E6IjLrCDCFHjr4xW0Eah0MfrGID2F2wTasBTXdVCoXNR2%2B372rTr%2FxLv1tqNXtKoyJTHTq49X9sxuWMo9HB9cDrqF3zkE6RuDO%2F1SEARXZKJT%2B0Hg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1985\u0026min_rtt=364\u0026rtt_var=1024\u0026sent=378\u0026recv=262\u0026lost=0\u0026retrans=3\u0026sent_bytes=141441\u0026recv_bytes=10628\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2056\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"1f4351cf8b66f753c18f4ea290dea4a1","sha1":"fca866297cec0a9fb2050a6c61487f2792bdcd11","sha256":"2c44f2ad45efa064d00130881feaaa17d9060510b29b05ff49671de3f88bad7f","sha512":"2830ee2deb945060f0d342a3e20bd4ac26ad45ba43e1027f2dd56121f12efb95265790a19309e576c0930c8447a1a4892ca73e63db99cfd7746a3f27485db9f9","ssdeep":"","tlshash":"9a11e60bf7b73c3abac51191bb8d04485549322153120328c60feef28b6ba683d2d376","first_seen":"2025-03-08T14:29:59.973714Z","last_seen":"2026-05-24T00:49:23.182948Z","times_seen":122,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/np.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/np.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\ncf-ray: 9555471c3e875690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-264\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1073802\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2euRvo2uZjXgBGvgww529b7mPGjgGSvfI46qSUyke%2FRqfyCoQqlFNnTzmP1w5Gmzd47vFEWXAFH3Ne2SGQCVUuPn0LyCt4uPMFeKiaB7cIprM26x9FIaGEg4MPCRjA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1487\u0026min_rtt=364\u0026rtt_var=855\u0026sent=505\u0026recv=323\u0026lost=0\u0026retrans=3\u0026sent_bytes=189964\u0026recv_bytes=13592\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2132\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1178d005c86066c4be2ada05e6e54445","sha1":"7ab452a95696676b13778abee77f8cfd918b08b5","sha256":"382a95e1e2c9f394df0b970e37fdb7b3e6662187d4c448f5800ed0fe705965a6","sha512":"065b5773c94d4eda3dd55184b8fedf71886a4f371794c1f982ae68448929ab62050a532e53a0ffce83e7111defe43543f28c992246488dfdd8be2616595031ed","ssdeep":"","tlshash":"bcf008d79d44cd3444fa4115d348880ee912a92fcd3fb542bf649e7180976ac54d6649","first_seen":"2025-03-08T14:29:59.87694Z","last_seen":"2026-05-24T00:49:22.895145Z","times_seen":120,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\ncf-ray: 9555471cefbc5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9ouf7NjRa8inTsZAkBREbwK1U8OzscXUvI7qTLAM%2F6kRsuP9zvjIiOxXEmWKjXbu6O00elPPfMhNPXqeFJFGBURln1%2F%2FyuUjaQ6VGtT0KvHoGzkmm0Zvmusx%2B6gkAw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1501\u0026min_rtt=364\u0026rtt_var=787\u0026sent=717\u0026recv=423\u0026lost=0\u0026retrans=3\u0026sent_bytes=272384\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2265\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1e9d448227926d4c240a805f670b328a","sha1":"4b22c6c136f9c1aec5082326beab51e76a10e3f5","sha256":"5dbea7d34cba7d9a116b739afa6701201c054a28b1c5125fb49213e06822c434","sha512":"a78a02a88e56ba71b186c39564be253bfc40d603953bcccebd1534cf0d558af070950d31bb9a6b7865857c4a8b954ae1419a1d9ff65bc3954400ee4b03b0b4f2","ssdeep":"","tlshash":"800165873191c819906e0e1bc7b848c8fe7d7e4de43900576c7348fe0b1522519c6205","first_seen":"2025-03-08T14:29:59.771162Z","last_seen":"2026-05-24T00:49:22.897486Z","times_seen":120,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/tether.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/tether.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-ce7\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b7623eec1db8da3ee0ab1aca15c81ea","sha1":"7376c1080dbcd43c0a87153b0f81738090c1ae67","sha256":"1c6845faee131c97bb9c586095cda10016abd0f82f8e704eb86d9fc219cace8e","sha512":"d5051c0cfce9a1bfa9defdedda8e79161eec3b601664c4382486409058fce507401b69055c48b4c39379d41edc97668935f40bf51c1f50bc717c980a016268c7","ssdeep":"","tlshash":"3c6193dc76a851fcb404f2ee2b0721693d0624fbbb684a50f62d4cde3996884cc84ef5","first_seen":"2025-06-22T12:57:20.92505Z","last_seen":"2026-08-10T16:41:59.312341Z","times_seen":227,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 796\r\ncf-ray: 955547151cac5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-31c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Hqg4ga8E9Db1WzSXjG2YOIv20a7oa7H0NQTVJbRefmD3ppHX0T1efkVTFjqEDAuRwaaCZ2FKt83P%2F6LaFkCEb6e0z7Cy0dEl4%2FYMwAlB0SgFejDmZIn3%2F54r8BX5uQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1386\u0026min_rtt=431\u0026rtt_var=1230\u0026sent=161\u0026recv=89\u0026lost=0\u0026retrans=2\u0026sent_bytes=60860\u0026recv_bytes=4776\u0026delivery_rate=7956043\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=994\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"0c72437f1110c708538f1de7e645b2a7","sha1":"316c695044717db9c887e3198946e58a1c401eb1","sha256":"a1fa6532ae271cd5a585ad14cf0f7228f0f6fac96afcd73d330eba725cf4873c","sha512":"6b6ba69ca08e3a0c5efa11261c4ad2ce22eeeee855ab778763508bdcec597184ec47aad3e332e8ebfda6d711fada7f38b47c40a2bdd78c65f50d5610ba1f0ec3","ssdeep":"","tlshash":"5801c573504f0d3de0ca4c6ca4e60eccd568361201a29f1e1ab9640308bca0d209542b","first_seen":"2025-03-08T14:29:59.977998Z","last_seen":"2026-05-24T00:49:23.468512Z","times_seen":114,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\ncf-ray: 9555471a0b125690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XO6XWfIFp2ZX60cjkgMG969%2BnUbswFWMTZuwXOqtXP2xuVPCisQybyWp%2BIuaRE26XQfkZOX6twQNaBx7SewdOWj4bwde3XVYHNfjcdxbfTB49WAz6pd4yWHWNtw3Mg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3881\u0026min_rtt=364\u0026rtt_var=5351\u0026sent=268\u0026recv=194\u0026lost=0\u0026retrans=3\u0026sent_bytes=101976\u0026recv_bytes=7436\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1781\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"721c21562d8ea99b294901d60499fc3a","sha1":"2597f6e0c81ad8295813ccdbe9e74cc34d6472fd","sha256":"3c341685ab59576969f47660f4e3df8261aa786db864097120eed45edb663339","sha512":"51290fd164871525fde8ff940057b54cc5112731b9f3454bb140e5ad1e6efbc02ff0db8b945b682944bc1da6cfa3f701ae1e70f538a5d1541ff62d284b52348e","ssdeep":"","tlshash":"1901884057b1cc69fd28d7e63b9154a9cd4c1230ed11953c77404d3ca642b2045dc76e","first_seen":"2025-03-08T14:30:00.015266Z","last_seen":"2026-05-24T00:49:22.988133Z","times_seen":114,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 741\r\ncf-ray: 9555471afca15690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1181148\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YyBNm6eog4rwIm9OFvypeQ0I8fW%2BvhWBYhr469hTAE3TCch5mAVOaVBAG9QnORw0DU3PznlXYhRFj%2FzALBF5xkCRPFd4EPPPmJGHjLsePEgMAY6IKrQsCb6Mq19qWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4067\u0026min_rtt=364\u0026rtt_var=4730\u0026sent=304\u0026recv=213\u0026lost=0\u0026retrans=3\u0026sent_bytes=116021\u0026recv_bytes=8120\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1942\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"770d59b5a3efe51f90b35d7543477bbe","sha1":"e1ef10092d2cbd383e14fd8dd102c0ede3e3151a","sha256":"d9f91fea344b12376f03fbca37896f38c3d5e48665ef027f9733caa85fd59405","sha512":"ed7c0341c0a0e349ee036fcc4bbf8b75e656c852960c74b148c87c8195ca627bd4cb57025a1a6f3c4199913b5e2a8548e42d022361a3fa30e9a79c4f88f65288","ssdeep":"","tlshash":"1801602ea3e14f61e9490258468f88f864b080d3482620998b38f5a33c72127199b345","first_seen":"2025-03-08T14:29:59.775712Z","last_seen":"2026-05-24T00:49:23.445438Z","times_seen":114,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 589\r\ncf-ray: 9555471b6d3b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-24d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 2388605\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7to0Em1wv7JyJSx%2FUYU1Us8v46Rpau2SV7TRa5p256GNfOhgAH0an7foCe%2BtIAF2PMASqVxSTDAa0%2Bfcc%2B5T7FTRJMyUyBmw5rV%2BOIDGghQfv8hpUZ3E3PuydtlzKA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3889\u0026min_rtt=364\u0026rtt_var=3516\u0026sent=313\u0026recv=222\u0026lost=0\u0026retrans=3\u0026sent_bytes=118517\u0026recv_bytes=8652\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2009\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ed0732a36907c70ffda362f609e9ab22","sha1":"dfbfd722a2f6b55cae31ca161d4ab45432ce9647","sha256":"2b0d8026e3583b0773981ad41a0e861db589ab6981d70fa151cfc5b1459b4fbe","sha512":"ce5fb3c9fdab5991eca756934c3b91b1e2c39a54b50aadeac8a646692cf837c8e438dcf4347b3501ed5cbf2c8c9ebb53435e45e0a6f3f3fa2e330c649374fbb9","ssdeep":"","tlshash":"24f041ee03033cddc91a402e0869dd5f9c3302a09e218726e171f9baba155ac907e1a2","first_seen":"2025-03-08T14:29:59.793606Z","last_seen":"2026-05-24T00:49:23.316695Z","times_seen":115,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\ncf-ray: 9555471cbf4a5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hzVOMmCsuXau500pWe%2F6hnDhoN0JkxwPvXycmbEtj5yPIEfi7jDSlFZ9Q6OrrnKEt1jmdQDbv564C7lRcFGOZvEH%2FlJaUrO%2FPdEYFyFvc7jNv2uiHz10H55H1iP6%2Bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1500\u0026min_rtt=364\u0026rtt_var=551\u0026sent=604\u0026recv=373\u0026lost=0\u0026retrans=3\u0026sent_bytes=228356\u0026recv_bytes=15872\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2214\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a58c60d5aa729eaa7f39ad683e26a748","sha1":"e753e515f2005790dac13b6036abd6d006eec4b3","sha256":"3ae3f72af86bb4d1cc16eb26e16a64b6118fbdc35855fb575517d6b2ad358911","sha512":"3d9d33c856064ffbe7d93642449efa6e523b7f87d827d2b1f2eb6f3fb5b9bc7c540c73a0248d217fc0f7cc9433fbb55370e3f5e9406796e2eeb1f9e50b4e674f","ssdeep":"","tlshash":"3e014efeb3670c2f9d30402307ab4102ca3e92c890abc9491496cafeb33e28584c412b","first_seen":"2025-03-08T14:29:59.777824Z","last_seen":"2025-06-25T14:51:19.579004Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/outgoing_message.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:34.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6852b46d-1396\"\r\nexpires: Thu, 24 Jul 2025 10:19:44 GMT\r\nlast-modified: Wed, 18 Jun 2025 12:43:25 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-24T10:19:44+00:00\r\nx-node: m9p-up-gc29\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-10T20:59:18.898226Z","times_seen":16738,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/burger.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/burger.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-445\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1093,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a9145363ee240b5f68328c78b070026","sha1":"65cb89e4b56c604bd1eeed1aa979b0ec129f1e2b","sha256":"b479576b247fc7dc52c39dee02ece52ad9202aa313dda6abbba0198d99ace150","sha512":"6267bec3665651d1e1b02bbda941198f5e5027aa67d263a809ff810765b61328602c27a8c32e7c27a587a9694f06787f3f9874dedbf0e17ada2e456324e69a9f","ssdeep":"","tlshash":"ca11aaffe3de86e0ba0fc77577121126381329b92466d6cd29640880d842bbc49899c4","first_seen":"2025-06-22T12:57:20.952784Z","last_seen":"2026-08-10T16:41:59.284218Z","times_seen":68,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/footer/payments/interact.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:28.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/footer/payments/interact.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-55a9\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21929,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57e627c8fe520cf7fe6b7ba25697fe55","sha1":"4cfa9683305eee2075b9d4ffcee4e9575dda5838","sha256":"667d2b41d58cb58ea47f10ee14786069ee1625f861606772bd25bc980801642a","sha512":"865b8ad40bde7fc463caeabdd8470aff1794d15ca447fbb551d2ff8c71b5e572c764431482383735b52118849196d40fda3c6203b8bc0f52d67685cc4e9c6fb0","ssdeep":"384:faSlKW7ESNjUd4qT9v6KM2FlaD9+6cKUV3ecXko:fh7zNYdkKh+9At5ND","tlshash":"29a283e9173493dc98c7994fff32ed94531f64fab9a681c0896fdb58949b8c0fa06804","first_seen":"2025-03-08T14:29:59.761442Z","last_seen":"2026-08-10T16:41:59.340704Z","times_seen":229,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:29.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/bh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 662\r\ncf-ray: 9555470fad8f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-296\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 130836\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1W54HYGLPn2jWn68NTQTpnLNToUEEji1oOlqLMSMmTWnN9N57uM7VUUVckKcw2NULQGPMoy%2BGfOT7s9Zz0zRgMuAXGtwUP4BLuVohkOea40T8Daa9H4aGKyGVKinDQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3008\u0026min_rtt=479\u0026rtt_var=4738\u0026sent=44\u0026recv=26\u0026lost=0\u0026retrans=1\u0026sent_bytes=17917\u0026recv_bytes=2268\u0026delivery_rate=7017770\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=131\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f1fb94f91d5334efa6004671f9fe3c95","sha1":"60e88386792c6d97102e09dd343a1fdeee8d00bb","sha256":"16732b1b7aff3c43ffeb8b4152afdb6859c0700f7e88a0ab8b67a9adda3dd8e4","sha512":"b34101259eb55bb5ed9b36a55c88d2a9b3cfb4dcfdbb97caf1d7f37aa3538768923eedd68447bb4ea245f539c27f42796ab673a968626c7df9b129567c869db3","ssdeep":"","tlshash":"f30123de4fbbcdceba50c13a8d8211609ca0927acf9882c39042e27d914311c7f8c253","first_seen":"2025-03-08T14:29:59.999645Z","last_seen":"2026-07-08T04:03:21.493039Z","times_seen":123,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/cy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 605\r\ncf-ray: 9555471919d95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-25d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1154037\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4YpLQlf04o1%2BzdHzgcwzfzFvUs7z6az63cyiQE9wffLhNtl1ouVoi3tommIJMHhk7LyF1EnPveQK5sVEhwJBFUs1thRqKfan%2FmtarvYSXdA4ybLigrWWI2FqHKyLJQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1896\u0026min_rtt=431\u0026rtt_var=2497\u0026sent=197\u0026recv=138\u0026lost=0\u0026retrans=3\u0026sent_bytes=73334\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1644\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8ca239cbfa4ebb223c28dcb5d96c7e7b","sha1":"43194cf9be18de3cfc78341a4b2aafd8c1f0c648","sha256":"031f8111a66438bc6407e568877888448a15b7bc0d07c00de4d15fef3edb34b4","sha512":"ea13b70fffc9c7aac01b0cc0e95bcd8266f4b19fb9c19fd62cb109af5396751f8e269b31e7c2a3949a097bdd6257453f236aa42171fcf703cf8773de1e84f032","ssdeep":"","tlshash":"6ef041cac638deff4ada85022b2056d4b0c6c64335ace9c728d9bc350c39309ae172c4","first_seen":"2025-03-08T14:30:00.064105Z","last_seen":"2025-06-25T14:51:19.581947Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ec.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:31.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/ec.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 938\r\ncf-ray: 9555471929ed5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-3aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ztlAz6BuiLqeoc2cxxd3Bziaf1mxqhtjMYe9DXTImTXbS%2Bh0L1ttsGn6UDMNx2bWna8H9AofcvX9XMr%2BNSP%2FVfi08dNphZbU3bnGKhRZJSYxauDxov%2Fe1OrPD0m9bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=588\u0026min_rtt=364\u0026rtt_var=172\u0026sent=221\u0026recv=158\u0026lost=0\u0026retrans=3\u0026sent_bytes=83221\u0026recv_bytes=6904\u0026delivery_rate=9734453\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1654\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"23e676132fafc00bc1a37fe207419612","sha1":"476b2879609976f23aea31c833c0fd61c2396945","sha256":"88665b276b77a01ee763d1412eec2a9b93fc1970de9186f9c1f4f8b40f81eddb","sha512":"82c23d823196dff4fcffbcc93980bf4c0f55400e6f7de35a85a4ebc98d36fe35206106a5bd876e8fd18b37989d9b470e500add27d98c044fc3e43a8125de3906","ssdeep":"","tlshash":"f61154eba2c49d1ae9f180315f462022fd3cad6e5517180462e5c9b98d697bb065c31e","first_seen":"2025-03-08T14:30:00.060941Z","last_seen":"2026-05-24T00:49:22.919808Z","times_seen":116,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/ziqY8DLV0e","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:25.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /widget/ziqY8DLV0e HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Jun 2025 14:50:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6114\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"6852b46d-17e2\"\r\nexpires: Thu, 19 Jun 2025 14:17:31 GMT\r\nlast-modified: Wed, 18 Jun 2025 12:43:25 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-06-25T13:29:42+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17761,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17761), with no line terminators","md5":"c9fd17e47ed6da35a9b8f890ff272bdc","sha1":"70b179bffdb5addaa8ad0dc92628df03a0ebb02d","sha256":"96721df9726d3c98ac90535fcb377bc750a76aefd428fdd149dd0c755c10a78c","sha512":"aed1f123be9d54dc0e20240784bcdbc713aa87a92452996f3c847baa03ced7627bc5c7b8e568be58047265c009e819fd09d7cf76df3523b7e132d010f28784f1","ssdeep":"384:boUJJ1QY4mmPY0nrAN3JyMiqwIlEeJMz8P08wIbqWcPWv6:f3yfAb/9DPpWWcPA6","tlshash":"64822a6e7959b93743b208b9606f6209723545ebd404c920a405e98c7db8edf827fef8","first_seen":"2025-06-19T14:21:53.842172Z","last_seen":"2025-08-29T20:48:52.453752Z","times_seen":295,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":396,"dns":84,"connect":73,"send":0,"wait":73,"receive":15,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/loyalty-main-page%D1%83.png","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/loyalty-main-page%D1%83.png HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 193194\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-2f2aa\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193194,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e30d65722a1e0ab97362f1ddcab6ba93","sha1":"372bedc9e895f655ce474135411a3e236cdcc23b","sha256":"798e2024eddca491811fc5758b3841ca785ec3631b79d76ec667f6b26066d016","sha512":"645c1ee8c56c264ebc46978c39bffca84f591f6f4c38a0bf86d45480c0ec693ecea06df869a443cc55b78343cf13524f9176dde452b0301bf5b07e224fd47193","ssdeep":"3072:UJc+tp+SBW/AStGPy5BQG8JXXeSioscoOWZ90mR39Hlg7W+KS7nFOxYJuIsmEpc2:UZtoXG85KXgVcVWn39HlMW+KSsxNdmE/","tlshash":"8b141242b4f06244f6fba81678f6ed2f00c8969592c2c0197fbeb61cbf534939b56483","first_seen":"2025-06-22T12:57:20.960181Z","last_seen":"2026-08-10T16:41:59.269821Z","times_seen":86,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":74,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/banners/add-crypto.webp","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/banners/add-crypto.webp HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 377692\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nConnection: keep-alive\r\nETag: \"6839306b-5c35c\"\r\nExpires: Thu, 26 Jun 2025 14:50:27 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":377692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e29f6590f44364194cf2999854154576","sha1":"bd85da26ba95a6334c88dd6d7a1f3f73e1f3da8b","sha256":"1abfdaca23aa574178f8ccf9fc6b65e4e80e73d1f810e02b98bcddad89c76381","sha512":"19859eb004a648134c1e1f9fb90eab42da4211d22d721a0b8c48a3f0b27ed323fbc1d6e72f37ee584894b97425897663e614bf68ba1047163f68c283eb29631b","ssdeep":"6144:qBEvTzHK8lHHdBXmz41VVSwlYezQJ2K3XuM0HM2KjAxsoDWMA2qn+T:Zfq8lHHdVI41Vrl7A2g50sVkbp","tlshash":"c08423c01b73ddce1a868d0e7dd25c57a40598c6aedb35a19f04cc9c293af0e9a36d87","first_seen":"2025-06-22T12:57:21.117199Z","last_seen":"2026-08-10T16:41:59.358408Z","times_seen":76,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":80,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\ncf-ray: 9555471ccf715690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-23c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 925931\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RhAe9vuN7HdFzsF9y24va%2FReqsEPyZWw%2FpKyZN3Znr0eNMCoXOdyvAVbeDn6ekYGgm1nSD8lskHINq3JqIL9JDMi%2Fa%2FzNdzZ15ayz%2FyZGIiCs%2F71VBDNHKPrnPICuA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1262\u0026min_rtt=364\u0026rtt_var=513\u0026sent=651\u0026recv=399\u0026lost=0\u0026retrans=3\u0026sent_bytes=246414\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2234\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1212de0254b5ea1c0aadc2c5bb44902c","sha1":"39ed04890273765e06067c48f6b3568d58226863","sha256":"f0e54d1f7c7f22e339ea6d7a4c4d9e6c6dd9135d314191b28a67e5c910c2a140","sha512":"eb2b25e79eb55604e291069676cebaa4bd9a47149c8f5a83b00ecde7ba476048f555227fe281bf678e8cf5922b5cd28d7ac9109f248eee7c74997e6a5d529853","ssdeep":"","tlshash":"c3f026d25d514c148cf15237e65b85416b548dbdc0e3d831306c90b2fd061495ecf1d9","first_seen":"2025-03-08T14:30:00.016538Z","last_seen":"2026-05-24T00:49:23.67541Z","times_seen":117,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/games/ico/GatesofOlympusSuperScatter.jpg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /games/ico/GatesofOlympusSuperScatter.jpg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 94100\r\nLast-Modified: Wed, 21 May 2025 06:07:18 GMT\r\nConnection: keep-alive\r\nETag: \"682d6d96-16f94\"\r\nExpires: Thu, 26 Jun 2025 14:50:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"1fea16786cc0b892effd1dbd62285b43","sha1":"2c9563b577fa2012bb58372a64e63619912ab279","sha256":"a808890d84e6e8d8e6e7bf62fdc588350de1d6efe552b527d58a5b7f72e46787","sha512":"2aeb86b40d5a025f80dbcff3e16fe365298511173a066d32670652cbd9666f67738db1f274ed9aaa84e17e9c8188a02b82344617eff77f22bccb64ab49e7b6b9","ssdeep":"1536:F762JfSUWEG8giqKegPVt3fWaA8i5lfZ6uCyxTRYduJ03P7GM:g2JfjZXjL3+aelPIyGV","tlshash":"e69302ba517bbfd4362405313a905bca7bb423c5261710abccd9acd4bc637e6ef0a152","first_seen":"2025-06-22T12:57:21.232371Z","last_seen":"2026-08-10T16:41:59.383128Z","times_seen":60,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 763\r\ncf-ray: 9555471d0ff95690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2fb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 839345\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JeTCxhnrVE2rJnyZ2%2F%2FLRzvgjtx4AKlJIR5y5HuSSYkMJOzy%2FlKqrm%2BGUag8AJVd8c2eEyJS1EhdE%2F4fbkz0A1vXzpPB%2FMqx4oW0Yx27K5k3ITkhEjvp3tS0oxRnzg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1548\u0026min_rtt=364\u0026rtt_var=907\u0026sent=711\u0026recv=421\u0026lost=0\u0026retrans=3\u0026sent_bytes=269983\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2264\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"e08682552acbd8d276637e09d26a4cd7","sha1":"04acbc2e591706b3052c5bbd286b0e0a587accde","sha256":"29d6d312a2f7d4ab54bac9dc1a72410fd3f3eebae31acf435aab610e578c4b3c","sha512":"1f749fece3f8248a8c67f9e0a7515db0c3dad65e2b65b21deb294f720339738facbfa276676353ba45e68c0e54a5222d41dc3cbe954c09903e71f085142aa478","ssdeep":"","tlshash":"ec0175bbb1b1b67c6784a2764c68203c08b5a7ba1260113441db086bcf36366514db9b","first_seen":"2025-03-08T14:29:59.860375Z","last_seen":"2025-06-25T14:51:19.586375Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kometaloft.com/assets/img/icons/categories/rocket.svg","fqdn":"kometaloft.com","domain":"kometaloft.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:27.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kometaloft.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 04:57:47 GMT","end":"Mon, 15 Sep 2025 04:57:46 GMT"},"fingerprint":{"sha1":"BC:52:98:40:01:3A:3C:1A:5A:B9:B5:56:16:1C:B4:7E:9C:CF:03:56","sha256":"B8:47:08:17:EA:2A:23:82:1B:F9:30:9B:D6:0F:7C:EF:E4:F5:FF:EF:76:3D:5B:CD:D8:CD:8C:F7:D7:C7:D0:A8"}}},"request":{"raw":"GET /assets/img/icons/categories/rocket.svg HTTP/1.1\r\nHost: kometaloft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/home/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Jun 2025 14:50:28 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 30 May 2025 04:13:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6839306b-566\"\r\nExpires: Thu, 26 Jun 2025 14:50:28 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e1c0341cbec88eb6c9a871222f5a4de","sha1":"7eca055c14289a64ceff32cea6e190bea17b4f20","sha256":"9dfdbe962b955d376dcc1e291d6d6863623c51e5bfec9d0a3a65976df400b402","sha512":"d9e7914c7ba0d990cebf7d7e18abf82191c225cff96d4c62c3d028df502428852f98430db18285f11dccb4fbe3b5a9ac28d64ef36b2d288ba6e2198a95194a00","ssdeep":"","tlshash":"e22102d75168934da9cd961aef60eed5332ea07fb1fa80c19c5f161c624aed1f006060","first_seen":"2025-06-22T12:57:21.037098Z","last_seen":"2026-08-10T16:41:59.280263Z","times_seen":133,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-25","alert":"Sinkholed","trigger":"kometaloft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/gf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\ncf-ray: 955547195a3f5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-2a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1854495\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8K8zKsiuoL7DlccWjk7A5XQr5vuTuVk92XrxUAxuJV2EfhaGlcTJ62jW8P%2F2i3dp%2B64GBSNmFIZ2gKXfAkhGhoVGW9iYQulIt9zQsj0HDPNiFh%2FWflv6m9CI2spEFA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1139\u0026min_rtt=364\u0026rtt_var=844\u0026sent=254\u0026recv=181\u0026lost=0\u0026retrans=3\u0026sent_bytes=97325\u0026recv_bytes=6980\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=1678\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"11ecb7f610c249173300aec86eb465d0","sha1":"c155330663e72b5db670baf28e3766ccb54f6fb2","sha256":"9330c21fe8b82f35b9a4bc99d4f464739bd670b373b68b4b118fc6d15ba3117d","sha512":"e2fd47f458eaa053963be1b68711308e2681cb20b9e61718568465d190f28784a7418e8dcdebb421016e2a973f58751430d11f40cacf37d87fb5f11c5c474ae6","ssdeep":"","tlshash":"98018875226d488efd048012411304df9c13083a9a1b533bdd5e57717f530905fe7010","first_seen":"2025-03-08T14:29:59.809416Z","last_seen":"2026-05-24T00:49:23.525959Z","times_seen":115,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/li.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:32.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/li.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 566\r\ncf-ray: 9555471bddf85690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-236\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1613041\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xGidiqOGK8MB%2BSiZWa6OG9SXd4dIKiNJHyQZ%2FBw4tGilTNd%2BmuCurT4PIcsGU1VwRtBNi6WOQwTTvnv6Z574f6P%2B%2BUkoAG8acG3Qf4FJB9ZwcXNLQogSWDzC08oZFw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1365\u0026min_rtt=364\u0026rtt_var=486\u0026sent=417\u0026recv=278\u0026lost=0\u0026retrans=3\u0026sent_bytes=157452\u0026recv_bytes=11312\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2073\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2f17517e854a345edf2342a50189202c","sha1":"0e620e73b8220b82243eb674b1503eec32bd8b63","sha256":"34c347cd51e0c620b05b74a4f5678fdb709170011f6b6e67a9ebec547adcb205","sha512":"720af594b7720f375e5d9ead151f27700fe977a410246cfddfba87ce127b0baf3a0d5d809f21cbd974e9deada0990f7979044e8ac1f2d68228fb10ece9b87e99","ssdeep":"","tlshash":"c7f026c7adac5ff8ed802379d15351f6edd41dfd57118546cc034ca9024a05e9213a05","first_seen":"2025-03-08T14:29:59.94404Z","last_seen":"2026-05-24T00:49:23.105771Z","times_seen":118,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/me.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/me.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 573\r\ncf-ray: 9555471c1e5d5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-23d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 762230\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0YMP1EgFxCtVRdm98oytrWwlhkfEnEwAn9mSJegHWqIwL7gKwqeTBUL5dKId0Mih369wDnF5c5YRyiiZ1ExRkbu%2Ffs34iJySVZKrvbzfSOHSmtWJac295eGQXOz5AQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1747\u0026min_rtt=364\u0026rtt_var=922\u0026sent=487\u0026recv=312\u0026lost=0\u0026retrans=3\u0026sent_bytes=183892\u0026recv_bytes=12908\u0026delivery_rate=14650927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2124\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c384f92e1aaf8c196e114a0ad4c8a528","sha1":"89cd93fed5478cd2a8544ee9d7635d6a65824078","sha256":"10b58a5dcbadce0be13e6807aed20e0e3b43f8b8c2f39bbe3433d0dc6ea7257a","sha512":"31b12336e5f41b9ac04a04babaf38d1edc3c903ba619f0b17ab49ad03c33f6680910081836409b11d0dd38da1d869870772daff3aac00ecb07dd747a2f1bdc7b","ssdeep":"","tlshash":"d7f096ab496c0e6422bfc07e143f2c2487332208e6b9525bf8806353120ed74e593592","first_seen":"2025-03-08T14:29:59.951653Z","last_seen":"2025-06-25T14:51:19.58887Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/lc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\ncf-ray: 9555471cbf505690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 985624\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MMSqvX4roMlMRi4UrokqCVArUX%2F8B43wnCxL5o7iwi7k4i4Mul4QjEK4H4Iu7BV%2F1nXV9x1OAmzXJt61Z7Anls6OhE0WlNbqSwzqN97mHaRxpS4yqOJMRNBqsEEUqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1485\u0026min_rtt=364\u0026rtt_var=443\u0026sent=610\u0026recv=374\u0026lost=0\u0026retrans=3\u0026sent_bytes=230639\u0026recv_bytes=15948\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2215\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7b4324b1e4850422ba3640d8ae69234e","sha1":"dd1a9700588c943da994c33f87be3130f61b12d9","sha256":"e6dcfba5e04a8f6c3cb4cfb071f9f9d9de1aa39550c722d6ba879b36b039020f","sha512":"9e5b01fb44e5657b6b99d437239e2fedf87f0eae264960bc30734d5650c59e7724b490c769628441f12042f1de12d7d3acd9bfe5efd483f590c6d9229bfd791f","ssdeep":"","tlshash":"c0f02da23b2c6cf42b844212cedb8020fc98a76a63b65702cee341fa4a463c41299812","first_seen":"2025-03-08T14:29:59.956791Z","last_seen":"2026-05-24T00:49:23.693575Z","times_seen":115,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/sg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 649\r\ncf-ray: 9555471cdf8b5690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-289\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1858728\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j9QYSzEDBBl%2FN9K4JGYhHRN1YEig9ix1bEuefalFnVKUvRazIsxDlw9hBTs5FIe%2Bf6TEj88UNuYdcgcRJgzW8KRzse4WivUAuBfUEmP%2BhCEulkpNlCGtRfiSMHzAcw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1302\u0026min_rtt=364\u0026rtt_var=362\u0026sent=663\u0026recv=401\u0026lost=0\u0026retrans=3\u0026sent_bytes=251215\u0026recv_bytes=17164\u0026delivery_rate=15114822\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2236\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"439f8ee13a2dbb11abe1abc0a2d93af3","sha1":"26f526c37b16b4dc0f4dadbc7b1f4734e7ed2c20","sha256":"1fcdaa16e601a650fc905d0ddf1f5696d0d95ba2ebbb58e8f066b627553f6175","sha512":"f4abffda58f6d001459609c346afa45138aa36497033bfd593d1c9d20f29f800a17c262d82be68e9a2a1b410755b40058f03db9afc4db997c7716c3b2b585e9b","ssdeep":"","tlshash":"d4f023820f4cbb2ef52c42615a719c58ceea13d5954aa445d911d2782b05e5835de4c0","first_seen":"2025-03-08T14:29:59.857104Z","last_seen":"2026-07-22T00:37:09.33893Z","times_seen":129,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kometaloft.com/r/cb289a440d6f61d44c663529ef2abc66/EVELONE5555/activate","date":"2025-06-25T14:50:33.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Jun 2025 22:58:42 GMT","end":"Mon, 08 Sep 2025 23:55:08 GMT"},"fingerprint":{"sha1":"32:44:93:A1:B2:FD:62:BC:24:C3:EB:F4:79:25:6F:B7:5F:85:FB:A2","sha256":"E0:A4:9F:D6:75:88:A0:6A:8B:28:07:C1:E9:CD:F4:FB:69:6D:F0:B7:2E:B1:9B:FE:60:AF:A7:EB:B4:47:C6:0E"}}},"request":{"raw":"GET /24x18/tw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kometaloft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 553\r\ncf-ray: 9555471d0ff85690-OSL\r\nlast-modified: Wed, 03 Jan 2024 11:10:31 GMT\r\netag: \"659540a7-229\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1614666\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5SgySvFrvDdoVVIlfEM9y18%2BayQicwB4PBwxk2y5yp5rou2ENGeewCLHRn3TNphztc8Ozt48oXTZoX48R0uJuZgSBBOtRGE2hNxzzbzYJGoYRF1%2BIvwrwGWXNgb47Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1336\u0026min_rtt=364\u0026rtt_var=643\u0026sent=702\u0026recv=420\u0026lost=0\u0026retrans=3\u0026sent_bytes=266307\u0026recv_bytes=18000\u0026delivery_rate=22893280\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7185efb47e2cc7c0\u0026ts=2262\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"077e14403ee09054c5944ee6dee4a583","sha1":"2c01ddf4fe9e5616bafb96c3a4e18f5e7134a103","sha256":"0eedd3c396642dbfdb95ef226f0aba20296bc0d0368e211c4b5aeeb80c4746c9","sha512":"e8ef13037419e629abd7e5b474bdb768e1aa1f2fad9d747f4f21a9c57ff274d261aa2fbea3371d15afae96c234fa5683e79a6d6a456001ae7500d2d356b0e921","ssdeep":"","tlshash":"edf07c5045f41d35cf0c1037055d0e216b7d6d0155581b2117097f3ed9f7113d194173","first_seen":"2025-03-08T14:29:59.771698Z","last_seen":"2025-06-25T14:51:19.590971Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}